This Privacy Policy explains what data ChemLab collects, how we use it, and the choices you have. We aim to collect as little as we need to run the service.
1. Data we collect
- Account data: email, display name, and authentication info (e.g. Google sign-in identifier).
- Study content: lab report inputs, uploaded attachments (images, data files), notes, flashcards, quizzes, and tutor conversations.
- Usage data: basic logs and quota counters so we can operate and protect the service.
- Billing data: handled by our payments processor (Stripe). We don't store full card numbers.
2. How we use your data
- To provide the service — generate reports, store your notes, run the AI tutor
- To enforce free-plan limits and protect against abuse
- To send transactional emails (auth, billing, important notices)
- To debug and improve the product
3. AI processing
When you generate a report, quiz, flashcards, or use the tutor, we send the relevant inputs to a third-party AI provider (currently Google Gemini via Lovable AI Gateway) to produce the output. These providers are bound by their own terms and do not use ChemLab API content to train their models. We do not train our own models on your content.
4. How we share data
We don't sell your data. We share it only with:
- Infrastructure providers we rely on (database, storage, AI gateway, payments)
- Authorities when required by law
5. Storage and security
Your data is stored on managed cloud infrastructure with industry-standard security controls (encryption in transit and at rest, access controls, row-level security so users can only access their own data).
6. Your rights
- Access & export: contact us to request a copy of your data.
- Delete: you can permanently delete your account and all associated data from Settings. Deletion is irreversible.
- Correct: you can edit your profile and content at any time from your dashboard.
7. Children
ChemLab is not directed to children under 13. If you believe a child has created an account, contact us and we will delete it.
8. Cookies & analytics
We use essential cookies (and similar storage) needed to keep you signed in and to remember your preferences. We don't use third-party advertising or cross-site tracking cookies.
We use PostHog to understand product usage (pageviews, feature engagement, retention). PostHog stores a first-party cookie and receives anonymised events tied to your account ID. Sensitive form inputs (passwords, payment details) are masked and never transmitted.
9. Changes
We may update this policy from time to time. Material changes will be announced in-product or by email.
10. Contact
Privacy questions or data requests? Reach us via our contact page.