Privacy Policy

Last Updated: December 24, 2024

1. Introduction

Multi-Headed Learning Engine ("MHLE," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Please read this Privacy Policy carefully. By using the Service, you consent to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, password (hashed), and profile details
  • Content: Notes, courses, uploaded documents (PDFs, images, audio), and other materials you submit
  • Payment Information: Billing details processed through Stripe (we do not store full credit card numbers)
  • Communications: Feedback, support requests, and correspondence with us

2.2 Information Collected Automatically

  • Usage Data: Features used, actions taken, timestamps, and session information
  • Device Information: Browser type, operating system, device identifiers
  • Log Data: IP address, access times, pages viewed, and referring URLs

2.3 Information from Third Parties

  • Authentication providers if you sign in through third-party services
  • Payment status from Stripe

3. Third-Party AI Processing

IMPORTANT DISCLOSURE: To provide our AI-powered features, we transmit your content to third-party AI service providers, including:

  • OpenAI - For text analysis and generation
  • Google (Gemini) - For multi-modal analysis and processing

When your content is processed:

  • It is transmitted securely via encrypted connections
  • Your data is NOT used to train AI models - We use API configurations that prevent training on your data
  • Third-party providers may retain data temporarily for processing and abuse prevention per their policies
  • You should review OpenAI's Privacy Policy and Google's Privacy Policy

4. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve the Service
  • Process your content through AI analysis features
  • Manage your account and subscription
  • Send transactional emails (account verification, password reset, billing)
  • Respond to support requests and communications
  • Monitor and analyze usage patterns to improve features
  • Detect, prevent, and address technical issues and abuse
  • Comply with legal obligations

5. Data Retention

Account Data: Retained while your account is active and for 18 months after your subscription ends or account becomes inactive, for backup, legal compliance, and potential dispute resolution purposes.

Content: Your notes, courses, and uploaded materials are retained until you delete them or close your account. After account closure, content is retained for the 18-month retention period.

AI Processing: Content sent to AI providers is processed in real-time and not permanently stored by us after processing is complete.

Usage Logs: Retained for up to 12 months for analytics and security purposes.

Legal Holds: In the event of pending litigation, legal disputes, or regulatory investigations, we may retain your data beyond the standard retention period until the matter is resolved, as required by law.

6. Data Sharing and Disclosure

We may share your information with:

  • AI Service Providers: OpenAI and Google for content processing (as described above)
  • Payment Processors: Stripe for subscription and payment handling
  • Hosting Providers: Infrastructure services that store and serve our application
  • Legal Requirements: When required by law, court order, or governmental authority
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

We do NOT sell your personal information to third parties.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit (TLS/SSL)
  • Secure password hashing
  • Access controls and authentication
  • Regular security assessments

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

All Users:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and associated data
  • Export: Download your content in a portable format

GDPR Rights (EU/EEA Users):

  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent
  • Right to lodge a complaint with a supervisory authority

CCPA Rights (California Users):

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of sale of personal information (we do not sell data)
  • Right to non-discrimination for exercising privacy rights

To exercise these rights, contact us at privacy@mhle.app

9. Cookies and Tracking

We use essential cookies and local storage for:

  • Authentication and session management
  • Remembering your preferences
  • Security features

We do not use third-party advertising cookies or cross-site tracking.

10. Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these countries.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us at: