Privacy Policy

Effective date: May 12, 2026 · Last updated: June 26, 2026

lattice.study ("we," "us," or "our") operates this website (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding it.

1. Who We Are

lattice.study is an independent educational platform based in Florida, United States. We are not affiliated with, endorsed by, or connected to the College Board or any AP program administrator.

Contact: soupintel@gmail.com

2. Age Requirement

You must be at least 13 years old to create an account or make a purchase. We collect your date of birth during registration solely to verify that you meet this age requirement. We do not knowingly collect personal information from children under 13. If we discover that a user under 13 has created an account, we will delete the account and all associated data promptly.

If you are between 13 and 18, we recommend reviewing this policy with a parent or guardian before registering.

3. Information We Collect

Information you provide directly:

Email address — required to create an account
Password — stored as a secure hash by Supabase; we never see your plaintext password
Date of birth — collected at registration for age verification only; not displayed to other users
Display name and full name — collected during onboarding. Your display name is visible to other users (see Section 5). Your full name is visible only to you in the settings panel.
Avatar / profile photo — optional. If you set a profile avatar, it is stored and displayed publicly on your profile to other users.
Feedback and bug reports — if you submit a review or bug report, it is stored and may be visible to other users (reviews) or to us only (bug reports).
Payment information — collected and processed entirely by Stripe; we never store your card number, billing address, or payment details on our servers

Information generated by your use of the Service:

Vocabulary flashcard progress (which cards are marked "learning" or "mastered")
Practice question answers and quiz scores
Exam dates you enter in the settings panel
Study streak data — your current streak, longest streak, and daily activity log; stored in Supabase and displayed on your profile
XP and level — computed from your study activity and displayed on your profile
Graphy daily message count — we store a count of how many messages you've sent to Graphy each day for rate-limiting purposes. We do not store the content of your Graphy conversations on our servers; chat history is kept only in your browser's local storage.
Follower and following relationships — when you follow or are followed by another user, both accounts are linked in our database. These relationships are visible on your public profile.

Information collected automatically:

Standard server/CDN access logs (IP address, browser type, pages visited, timestamps) — retained briefly for security and debugging

We do not use advertising trackers, third-party analytics pixels, or sell any data.

4. How We Use Your Information

To create and manage your account
To verify you meet the minimum age requirement
To personalize your experience using your display name and avatar
To power social features: following, followers, public profile, and activity feed
To save and sync your study progress across devices
To process payments and activate Pro features
To enforce Graphy daily message limits
To display your study streak and XP level on your profile
To respond to support requests sent to our email
To detect and prevent fraud or abuse

We do not use your information for advertising and we do not share it with third parties except as described in Section 6.

5. What Is Public on Your Profile

When other users visit your profile, they can see:

Your display name and avatar
Your follower count and following count
The list of users you follow and users who follow you
Your study streak and XP level
Any reviews you have submitted publicly

The following information is never visible to other users:

Your email address
Your full name
Your date of birth
Your Graphy chat history
Your individual practice scores or flashcard progress
Your payment or subscription information

6. Third-Party Services

Supabase (supabase.com) — database and authentication. Your email, hashed password, display name, study progress, and social graph data are stored on Supabase-managed servers. Supabase Privacy Policy
Google (google.com) — AI processing for the Graphy assistant. When you send a message to Graphy, that message (along with course context) is transmitted to Google's Gemini API for processing. Message content is subject to Google's usage policies and privacy policy. We do not store message content on our servers. Google Privacy Policy
Stripe (stripe.com) — payment processing for Pro subscriptions. Stripe handles all payment data under their own privacy policy. Stripe Privacy Policy
Vercel (vercel.com) — static site hosting and CDN delivery. Vercel may log IP addresses and request metadata for standard CDN operation. Vercel Privacy Policy
Google Fonts — font delivery. Your browser may make requests to Google's servers when loading the site.

We do not share your personal data with any other third parties.

7. Cookies and Local Storage

We use browser localStorage to remember your current course selection, pinned courses, Graphy chat history, study streak cache, and XP cache. No cross-site tracking cookies are set. Supabase sets an authentication session cookie to keep you logged in.

8. Data Security

We use HTTPS for all data in transit. Passwords are hashed via Supabase Auth. We do not store payment card data. While we take reasonable precautions, no system is perfectly secure — please use a strong, unique password.

9. Your Rights

You may:

Access your data — email us and we will describe what we have stored about you
Delete your account — email us and we will delete your account, study progress, and social data (profile, followers, following relationships) within 30 days
Correct inaccurate data — update your display name, full name, or avatar via the settings panel, or email us for other corrections
Remove a follower — you may remove any follower from your profile at any time

California residents have additional rights under CCPA, including the right to know, delete, and opt out of sale (we do not sell data). To exercise these rights, contact us by email.

10. Data Retention

We retain your account data for as long as your account is active. If you request deletion, we will remove your data within 30 days except where retention is required by law (e.g., payment records Stripe retains for tax and fraud compliance purposes).

11. Changes to This Policy

If we make material changes to this policy, we will update the "Last updated" date above. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Contact

Questions? Email us at soupintel@gmail.com.

lattice.study is not affiliated with the College Board. "AP" and "Advanced Placement" are trademarks registered by the College Board.