Privacy
Nerdit is a study tool for adults aged 18 or older, operated from Bengaluru, Karnataka, India. It is not offered to children. If you believe a child has an account, contact support so we can investigate and remove it. This page explains what it stores, why, who processes it and how to export or delete it. It describes the software as it works today. Privacy details updated 18 October 2026.
What Nerdit stores and why
| Data | What it is | Why |
|---|---|---|
| Account | Email address and sign-in identifiers (managed by Supabase Auth), your plan and study-credit usage. | To sign you in, keep your study material in your account and apply credits and plans. |
| Sources | Files you upload or import, extracted text, your corrections and processing reports. | So you can study from your own material and see exactly what was extracted. |
| Study material | Decks, cards, notes, summaries, glossaries, maps, audio and video you create, assessments, attempts, grades, review history and schedules. | This is the study service itself. |
| Learning records | Mistakes, repair sessions, plans, confidence ratings and prerequisite checks. | To suggest what to practise next. These are evidence labels, not a judgement of ability. |
| Tutor | Tutor threads you keep, whiteboards and tutor memory items you choose to save. | To continue tutoring where you left off. You can review and delete memory items. |
| Exams | Exam dates, syllabi, plans, calendars and mock exams. | To plan revision backwards from your dates. |
| Collaboration | Spaces you join, your role, comments, mentions, submissions and live answers. | Shared only with the members and links the space allows. |
| Usage records | For each AI operation: feature, provider, model, status, token or duration counts and an estimated cost. No source text. | Cost control, fair use and diagnosing failures. |
| Billing | Your plan, checkout reference, provider customer/subscription identifiers, payment status and paid-period dates. Dodo receives the contact, billing and payment information you supply in its checkout. | To collect subscription payments, grant paid access, cancel renewal and handle refunds. Nerdit never stores your card number or security code. |
| Product milestones | First-party milestones such as account created, first three generations, credits used up, pricing opened and upgrade requested. | To understand whether Nerdit is useful. No advertising or tracking pixels. |
| Support requests | What you write to us and, only if you tick the box, technical details (app version, page, error code, browser). | To answer you. Notes, answers and tutor conversations are never attached automatically. |
| Logs | Request IDs, routes, status codes, timings and a pseudonymous account reference. No content, passwords or tokens. | Reliability and security investigations. |
| This device | Offline packs you download, drafts, preferences and a local copy of your decks in your browser. | Offline study and faster loading. Signing out removes downloaded offline packs from that browser. |
AI processing
When you ask Nerdit to generate, tutor, grade, read a scanned page, transcribe or narrate, the material you selected for that action is sent to the configured AI provider (currently OpenAI) to produce the result. Nothing is sent to an AI provider when you simply study, review, browse or read saved material. Nerdit does not use your content to train its own models; the provider's API data terms apply to the request.
Service providers
- Supabase: accounts, database and private file storage.
- Render: hosting of the Nerdit server.
- Better Stack: uptime monitoring and a limited technical event stream: event names, route groups, status codes, latency and release IDs. Student content, account identifiers and credentials are not forwarded in that stream.
- Hostinger Mail: correspondence sent to support@nerdit.si.
- Dodo Payments: hosted checkout, payment and subscription processing, receipts and refunds. Your selected plan and account reference are sent when you start checkout; no study sources or answers are sent to Dodo.
- OpenAI: AI requests you start.
- Google Fonts and jsDelivr: fonts and the sign-in library are downloaded from their servers when you open Nerdit, which shows them your IP address.
- Only if you connect them: Google Drive, YouTube or Notion imports; your browser's speech service for voice features (some browsers process speech on the vendor's servers); your browser's push service if you turn on notifications.
There are no advertising, social-media or analytics trackers, and no fingerprinting.
Sharing
Your material is private by default. It is shared only with the spaces, people and links you choose. The public catalog is currently turned off; published packs are reachable only through their links.
Your choices and rights
- Export my data (Settings → Privacy and data) downloads a ZIP of your account data in JSON, CSV and Markdown.
- Delete my account (same place) permanently removes your account and private data after confirmation.
- You can correct or delete individual items in the app at any time.
- Contact: support@nerdit.si.
Retention and deletion
- Active account data: saved material, history and private uploads remain until you delete them or your account. Account deletion requires your email, the exact confirmation phrase and a sign-in within the last ten minutes. Background token refresh does not count as signing in again.
- After deletion: private files, account records and the sign-in identity are removed from the active Nerdit service. Shared comments and submissions remain in their spaces under the label "Former member"; spaces you owned are archived. Media copies you contributed to spaces, and shared media in spaces you owned, are removed. Personal copies that other members previously saved belong to those members and remain.
- Backups: Nerdit currently uses Supabase Free and has no separately configured application backup or customer-restorable daily backup window. This is not a promise that the provider holds no infrastructure, security or disaster-recovery copies. Any such copies follow its own retention terms and are not erased by an application-level delete. See Supabase backup information.
- Technical logs: Render application logs are retained for seven days on the current Hobby workspace plan; Better Stack's limited event logs are retained for three days on its current Free plan. These logs are not study content and are not individually removed by deleting an account. Provider security and billing records can have separate retention.
- External records: Dodo's transaction, receipt, refund and compliance records follow Dodo's own retention requirements. AI requests already sent follow the AI provider's API terms. Support emails remain in the support mailbox until removed by the operator; deleting an account does not automatically delete that correspondence. Contact support@nerdit.si for a request concerning those records.
- Your devices and downloads: deletion clears this browser's Nerdit account copies and signs it out. Exported ZIPs, files you downloaded yourself and copies on other devices cannot be remotely erased; remove them on each device. Other sessions lose authenticated server access when the identity is deleted.
Security
Connections use HTTPS. The server checks your account and permissions on every request. Row-level security limits browser access to your own synced decks and study history; every other table is reachable only by the Nerdit server. Cloud-import tokens are encrypted at rest.
Changes
If this policy changes materially, the effective date above changes and the app will tell you.