Your privacy matters.

Account Information

When you sign in with Google, we receive your name, email address, and profile photo from Google's authentication service. We store these to identify your account and personalise your experience.

Content You Provide

This includes messages you send in the AI chat, PDF files you upload to your Library, timetable data you enter in the Schedule, and any study notes or answers you generate.

Usage Data

We collect information about how you interact with Tura — features used, session duration, and general usage patterns. This helps us improve the product.

Plan and Billing Information

If you purchase a paid plan, we record your plan tier, activation date, and payment reference. We do not store credit card or payment card numbers directly.

To Provide the Service

Your data is used to power the AI chat, process uploaded PDFs, manage your schedule, and enforce usage quotas based on your plan.

To Improve Tura

Aggregated and anonymised usage data helps us understand which features are most useful and where we should invest in improvements.

To Communicate With You

We may send important service updates, plan renewal reminders, or security notices to your registered email address. We do not send marketing emails without your consent.

Storage

Your data is stored on Google Firebase (Firestore and Firebase Storage), hosted in Google Cloud infrastructure. PDF files are stored securely in Firebase Storage.

Security

We use Firebase Authentication for secure sign-in and enforce Firestore security rules to ensure each user can only access their own data. API routes are protected by server-side token verification.

Retention

We retain your data for as long as your account is active. If you request account deletion, we will remove your personal data and associated content within 30 days.

Google (Authentication & Infrastructure)

We use Google Firebase for authentication, database, and file storage. Google's privacy policy applies to their services: https://policies.google.com/privacy

Replicate (AI Processing)

AI responses are generated using the Replicate API. Prompts and messages you send may be processed by Replicate's servers to generate responses. See Replicate's privacy policy at https://replicate.com/privacy

Vercel (Hosting)

The Tura web application is hosted on Vercel. Vercel may process request metadata such as IP addresses and user-agent strings as part of serving the application.

Access and Correction

You can view and update your profile information within the app at any time.

Data Deletion

You may request the deletion of your account and all associated data by contacting us at the email address below. We will process your request within 30 days.

Data Portability

You may request an export of your data (chat history, library metadata, schedule data) in a machine-readable format. Contact us to make this request.

Tura is designed for students and may be used by students under 18 with parental or guardian consent. We do not knowingly collect personal data from children under 13 without verifiable parental consent. If you believe a child under 13 has provided us with personal data without consent, please contact us and we will remove it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the 'Last Updated' date at the top of this page. Continued use of Tura after changes become effective constitutes your acceptance of the revised policy.

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact us at: support@tura.app We aim to respond to all privacy-related inquiries within 5 business days.