Khio Study — Privacy Policy
Effective Date: April 30, 2026
Khio ("we", "us", or "our") operates Khio Study (the "Service" or "App") — an AI study tool that turns your notes, lectures, photos, PDFs, and recordings into flashcards, quizzes, notes, mind maps, podcasts, and an AI tutor. This policy explains what data we collect, how we use it, who we share it with, and your rights.
1. Information We Collect
Account information
- Sign-in identifiers: When you sign in with Apple, Google, or a phone number we receive a stable user identifier (Apple user ID, Google user ID, or phone number) plus, if you choose to share them, your name and email address.
- Profile picture: Provided by Google Sign-In if you connect a Google account. We do not require or upload a profile picture otherwise.
- Timezone: Detected automatically from your device on first launch so reminders and study schedules use the correct local time.
Content you create or upload
- Study set inputs: Text you paste, PDFs / DOCX / PPTX / TXT files you upload, images you take with the camera, audio recordings, URLs (including YouTube and TikTok links), and any custom prompts you provide.
- Generated content: Flashcards, notes, quizzes, mind maps, study guides, podcasts, and AI tutor conversations produced from your inputs.
- Practice activity: Your answers, scores, and progress on flashcards, multiple-choice questions, written responses, and review sessions.
Usage data
- Token usage counts (input/output) for AI generations, used to enforce free-tier and premium quotas.
- Aggregate feature usage (e.g. number of sets created, podcasts generated) for billing and product improvement.
- Crash reports and error logs containing browser/device type and the route that errored. These do not include the contents of your study material.
2. How We Use Your Data
- Provide the Service: Generate flashcards, quizzes, notes, podcasts, and tutor conversations from the material you submit.
- Save and sync your work: Persist your study sets across devices when you're signed in.
- Process payments: Handle Khio Premium subscriptions (monthly / yearly) and trial periods.
- Customer support: Respond to issues you report and improve the product.
- Reliability and security: Detect bugs, prevent abuse of the AI quota system, and keep your data safe.
We do not sell your data, share it for advertising, or use it to train third-party machine-learning models outside the immediate AI generation request.
3. Third-Party Service Providers
To operate Khio Study we share the minimum data necessary with the following infrastructure providers. Each is bound by its own privacy policy and may not use your data for any purpose other than serving Khio Study.
- Google Gemini (LLM): AI generation of flashcards, quizzes, notes, podcasts, and tutor responses. Your study content is sent to Gemini for the duration of each generation request. Gemini is operated by Google under their own data-handling terms.
- Apple StoreKit and RevenueCat: Process and validate in-app subscription purchases on iPhone and iPad. We never receive or store your payment card details — Apple does.
- Stripe: Process subscription purchases on the web. We never receive or store your payment card details — Stripe does.
- Supabase: Securely store your account and study content. Hosted on managed infrastructure with row-level security so users can only access their own rows.
- Cloudflare R2: Store uploaded files (PDFs, images, audio) and generated podcast audio.
- LlamaParse and yt-dlp: Extract text content from PDFs, slide decks, and YouTube/TikTok videos when you submit those as study sources.
- Microsoft Edge TTS: Generate the two-voice audio podcasts from your study content.
- Tavily Search: Optionally fetch web research results when you use the "Search the web for new sources" feature in Khio LM.
4. Sign in with Apple
If you choose to sign in with Apple, you may opt to share your real email address or use Apple's private relay address. We honor whichever you choose. If you use private relay, we never see your real email address; messages we send are routed through Apple's relay server. You can revoke Khio Study's access at any time from Settings → Apple ID → Sign-In with Apple on your iPhone.
5. Sign in with Google
If you sign in with Google we receive your name, email address, profile picture, and a stable Google user ID. We do not access any other Google account information (Gmail, Drive, Calendar, etc.) for Khio Study; the previous Khio AI accountability product used Google Calendar but Khio Study does not.
6. Children
Khio Study is not directed to children under 13. If we learn that we have collected data from a child under 13, we will delete it. If you are a parent and believe your child has used Khio Study without your consent, contact us at [email protected] and we will remove their data.
7. Data Security
- All data in transit is encrypted with HTTPS / TLS.
- User data is stored in Supabase with row-level security so each user can only access their own rows.
- Apple/Google authentication tokens are stored securely on our server and are never exposed to the browser or shared with third parties.
- Payment processing is handled by Apple StoreKit on iOS and Stripe on the web; we never store or have access to full credit-card numbers.
- Access to production systems is restricted to authorized personnel only.
8. Data Retention and Deletion
We retain your data as follows:
- Account and study sets: Retained for as long as your account is active.
- Conversation history with the AI tutor / Khio LM: Retained so the AI remembers context across sessions; you can clear individual conversations at any time.
- Crash and error logs: Retained for up to 90 days, then automatically deleted.
You can permanently delete your account at any time from inside the app:
- Tap your profile picture (top-left) to open Settings.
- Scroll to the LEGAL section.
- Tap Delete Account.
- Confirm in the dialog.
We will:
- Delete all your personal data, study sets, generated content, and conversation history within 30 days.
- Revoke any connected sign-in tokens immediately.
- Cancel your Stripe subscription automatically (Apple subscriptions are managed by Apple — see the App Store after deletion to confirm cancellation if you subscribed via iOS).
If you cannot delete via the app for any reason, email [email protected] and we will process the deletion manually.
9. Your Rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data (see Section 8).
- Export your data in a portable format.
- Withdraw consent for any optional processing.
To exercise any of these rights, email [email protected]. We will respond within 30 days.
10. International Users
Khio Study is operated from Canada. If you use the Service from outside Canada, your data may be transferred to and processed in Canada and the United States (where our infrastructure providers are located). By using Khio Study, you consent to that transfer.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes to how we handle your data, we will notify you in-app and update the "Effective Date" above. Continued use of Khio Study after the effective date of the revised policy constitutes acceptance of the changes.
12. Contact Us
For privacy questions, deletion requests, or to exercise any of the rights described above, email us at [email protected].