Privacy Policy

Who we are

Lianify is run by Chaiyapat Sanguanwong, an individual based in Thailand, who is the data controller for the personal data described here. You can reach us at lianify.study@gmail.com.

1. What we collect

• Account information. When you sign in with Google we receive your name, email address and profile picture. We do not receive your Google password.
• Profile and progress. The hero name, study goal and weekly target you choose during onboarding, plus XP, levels, streaks, missions, battle progress and unlocked items.
• Study content you provide. Text you paste, files you upload (PDF, Word, PowerPoint, images), YouTube links once that feature is available, and everything generated from them: summaries, quizzes, flashcards, notes, tags, comments, images and review schedules.
• Usage records. A record each time you use an AI feature (time and feature type) so we can apply daily usage limits.
• Billing records. If you buy Pro, our reseller Paddle handles the payment. We receive your email address, country, plan, subscription status and dates. We never see or store your card details.
• Data stored on your device. Your browser keeps sign-in cookies and a few preferences in local storage (dark mode, sidebar state, colors, note drafts and version history). These stay on your device.

We do not use advertising trackers and we do not sell your personal data.

2. How we use it

• To sign you in and keep your study sets, notes and progress in your account.
• To generate summaries, quizzes, flashcards and writing help from the content you submit.
• To schedule reviews, run missions and the game features, and show your progress.
• To apply fair-use limits and protect the service from abuse.
• To fix problems and improve Lianify.

Our legal basis is performing the service you asked for (contract) and our legitimate interest in keeping the service secure and working well.

3. Who processes your data

We use a small number of service providers to run Lianify:

• Supabase hosts our database, file storage and sign-in system, on servers in Singapore. Files you upload to make a study set are stored privately while we read them and deleted right after. The text we read from them is saved with your study set so you can keep studying it.
• OpenAI processes content you submit to AI features (study-set generation, AI writing help and explanations) and returns the result. Uploaded PDFs, and slides made of pictures (which your browser turns into a PDF first), are sent to OpenAI as files and deleted from OpenAI right after. Photos are sent with the request and not stored there. Under OpenAI's API terms, this data is not used to train their models.
• Google provides sign-in. When YouTube import is available, transcripts are fetched for the videos you submit.
• Paddle is our reseller and Merchant of Record for Pro. It processes payments, collects sales tax and VAT, sends receipts and handles refunds, under its own privacy policy at paddle.com.
• Cloudflare runs the website and the network it is served from. It may keep standard server logs, such as IP address and browser type.

These providers may store data outside Thailand, under their own security and contractual safeguards. We only share what each one needs to provide its part of the service.

Please don't submit sensitive personal information, such as health or financial records or other people's private data, as study material.

4. Sharing and public links

Your study sets are private to your account by default. If you create a share link for a note, anyone with that link can read that note until you turn sharing off. Images you add to notes or flashcards are stored at hard-to-guess web addresses. Anyone who has one of those addresses can view that image.

5. How long we keep data

We keep your account and study content while your account is active. When you delete a study set, we remove it and its images from our database. When you delete your account (Profile → Delete account), we delete it and all its content straight away, and any copies in backups are gone within 30 days, except where the law requires us to keep something longer. Billing records are kept as long as tax and accounting laws require.

6. Your rights

Under the PDPA you can ask to access, correct, export or delete your personal data, object to or restrict how we use it, and withdraw consent. You can delete your whole account yourself from your profile, under Delete account. For any other request, email lianify.study@gmail.com from the address you sign in with, and we will reply within 30 days. You also have the right to complain to Thailand's Personal Data Protection Committee.

7. Security

Data is sent over encrypted connections (HTTPS). Access to your study content is limited to your own account. No system is perfectly secure. If a breach affects your data, we will notify you as the law requires.

8. Children

Lianify is meant for users aged 13 and over. If you are under the age of legal consent where you live, please use Lianify with a parent's or guardian's permission. If we learn that we hold a child's data without that permission, we will delete it.

9. Changes to this policy

If we make important changes, we will update this page and change the date at the top. We will also tell you in the app or by email when the change matters to you.

Contact us

Questions or requests about this page? Email us at lianify.study@gmail.com.