Privacy Policy
Last updated: March 2026
1. Introduction
Distilo ("we", "us", "our") operates the Distilo platform at distilo.co. This Privacy Policy explains how we collect, use, and protect your information when you use our service.
By using Distilo, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address and display name
- Authentication data (managed by Firebase Authentication)
- Subscription and billing information (managed by Stripe)
2.2 Study Data
When you use our service, we collect and process:
- Course materials you upload (PDF, DOCX, PPTX) for AI-powered distillation
- AI-generated content: summaries, flashcards, quizzes, and review sheets
- Study progress: quiz scores, flashcard review history, and memory strength data
2.3 Usage Data
We automatically collect technical information including:
- IP address, browser type, and operating system
- Pages visited and features used
- Device information
3. How We Use Your Information
- Provide and improve the Distilo service
- Generate AI-powered study materials from your uploaded courses
- Track your learning progress and optimize spaced repetition scheduling
- Process payments and manage subscriptions
- Send important service updates and support communications
- Detect and prevent abuse or security issues
4. Third-Party Service Providers
We use the following third-party services to operate Distilo. Each processes data according to their own privacy policies:
| Provider | Purpose | Data Shared |
|---|---|---|
| Google Cloud | Hosting & infrastructure | All service data (encrypted at rest) |
| Firebase (Google) | Authentication | Email, login credentials |
| Anthropic | AI content generation (primary) | Uploaded course text (for distillation) |
| OpenAI | AI content generation (secondary) | Uploaded course text (for distillation) |
| Stripe | Payment processing | Billing info, payment method |
We do not sell your personal information to anyone. We only share data with the providers listed above, solely for the purpose of operating the service.
5. AI Processing & Your Content
When you upload course materials, the text content is sent to AI providers (currently Anthropic Claude and OpenAI) to generate summaries, flashcards, quizzes, and other study materials. Important details:
- We use API access with data processing agreements — your content is not used to train AI models
- Only the text content of your documents is sent; metadata and personal info are stripped
- Generated content is stored on our servers and associated with your account
- You can delete your courses and all associated AI-generated content at any time
6. Data Storage & Security
Your data is hosted on Google Cloud infrastructure with industry-standard protections:
- Encryption in transit (TLS) and at rest
- Access controls and authentication mechanisms
- Regular security updates and monitoring
No system is 100% secure. While we implement reasonable measures to protect your data, we cannot guarantee absolute security.
7. Your Rights
You have the right to:
- Access your personal data by viewing your account and study data within the app
- Correct inaccurate information through your account settings
- Delete your account and all associated data through your account settings or by contacting us
- Export your data — contact us to request a copy of your data
If you are located in the European Economic Area (EEA), you may have additional rights under GDPR, including the right to restrict processing and to object to certain uses of your data. Contact us to exercise these rights.
8. Data Retention
We retain your data for as long as your account is active. When you delete your account:
- Your personal information is deleted within 30 days
- Your uploaded courses, generated content, and study history are permanently removed
- Some data may be retained longer if required by law (e.g., billing records)
9. Cookies
Distilo uses essential cookies required for the service to function (authentication and session management). We do not use third-party advertising or analytics cookies.
10. Age Requirements
Distilo is designed for students aged 16 and older. If you are between 16 and 18, you confirm that you have parental or guardian consent to use the service. We do not knowingly collect data from children under 16. If you believe a child under 16 has created an account, please contact us so we can remove it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice within the app or sending an email. Continued use of the service after changes constitutes acceptance of the updated policy.
12. Contact
For any questions about this Privacy Policy or to exercise your data rights:
Email: support@distilo.co
Your privacy matters. We only collect what we need to help you learn better.