Privacy Policy

Your account. First name, last name, email address, and a password we never see in readable form. If you sign in with Google, we get your name and email from Google instead.

Your profile. Your display name, what kind of learner you are, what you are using Grader for, and your study language, so questions match what you actually study. Country, which decides your currency and which payment provider you use.

How you found us. When you first arrive we record which site or link sent you, and whether you are on a phone, tablet or computer. It tells us which of our own posts and links are worth making. It is not linked to anything you do afterwards, and we do not use it to build a profile of you.

Your study material. The notes, PDFs, slides, images and lecture recordings you upload, and everything Grader makes from them: questions, flashcards, summaries, your answers and your marks.

Payment records. If you subscribe, we keep the amount, currency, date and status of each transaction, plus an identifier from the payment provider. We never see or store your card details.

Support messages. If you report an issue, we keep what you sent so we can fix it and reply.

• To run the service: generating questions, marking answers, keeping your library.
• To take payment, and to prove a payment happened if it is ever disputed.
• To send you the few emails the service needs, such as password resets and receipts.
• To answer you when you contact support.
• To keep the service secure and to enforce our terms.

We do not use your material for advertising, we do not sell it, and we do not use it to train AI models.

Running Grader means other companies handle some of your data on our behalf. Each of them is bound to use it only for the job we give them.

• Supabase — the database, sign-in, and file storage for the material you upload.
• Vercel — hosting, which means it processes the requests your browser makes.
• Google (Gemini API) — generates and marks questions. Your material is sent to it for that purpose. Google states that data sent through the paid API is not used to train its models.
• Paystack — takes payment in Naira, and holds your card details rather than us.
• Polar — the merchant of record for international payments, which means it is the seller on your receipt and handles the tax.
• Our email provider — delivers service emails such as password resets and receipts.
• PostHog — product analytics and session replay, so we can see which parts of the app people get stuck in. Hosted in the EU. It receives your account ID, never your name or email, and every word on screen is blanked out of a replay before it leaves your device.

These providers operate internationally, so your data is transferred and stored outside your own country. We use providers that commit to appropriate safeguards for that transfer.

Your material and your account stay until you delete them. Delete a material and it goes, along with everything generated from it. Close your account and we remove your personal data.

Payment records are the exception: we keep them for as long as tax and accounting rules require, even after an account closes.

You can ask us to:

• Show you what we hold about you.
• Correct anything wrong.
• Delete your account and your data.
• Send you a copy of your data.
• Stop processing your data in a particular way.

Email support@usegrader.com and we will deal with it within 30 days.

This policy follows the Nigeria Data Protection Act 2023. If you are not satisfied with how we handle a request, you can complain to the Nigeria Data Protection Commission.

Grader is for students aged 13 and over. If you are under 18 you need a parent or guardian's permission. If we find out we are holding data for a child under 13, we delete it.

We use cookies to keep you signed in and to remember your settings. One more records the site or link that first sent you here, so we know which of our own posts are worth making. It holds nothing about who you are, we delete it as soon as you finish signing up, and it is never sent to anyone else. Clearing them signs you out.

We use PostHog to see how the app is used. It records which pages are opened and which features are used, so we can tell where people get stuck. It sets its own cookie, which makes it a third-party cookie, and its servers are in the EU.

It records your session, with all text blanked out. We can replay how you moved through a page, what you tapped, where you scrolled and where you hesitated, so we can find the parts of Grader that confuse people. Every word on the screen is hidden before the recording leaves your device, including anything you type. Nobody watching a replay can read your notes, your questions, your answers or your Study Note. They see the shapes and the movement, not the content.

Nothing is recorded while you are sitting an exam. Recording is switched off completely on those pages, masked or not.

It does not capture the text you tap on. Automatic click tracking is switched off, because the words on a question or a topic are your material, not ours to collect. PostHog receives your account ID so we can tell one person's journey from another's, and never your name or your email.

There are no advertising cookies.

If we change this policy in a way that matters, we will tell you before it takes effect. For anything about your data, or to exercise any of the rights above, email support@usegrader.com.

See also our Terms of Service and refund policy.