Back to Home

Privacy Policy

Last updated: December 2025

The Short Version

  • We collect what we need to make Fehm work. Nothing more.
  • Your uploaded materials are yours. We don't sell them or use them to train AI models.
  • We don't sell your data to anyone. Ever.
  • You can delete your account and data anytime.

What We Collect

Account Information

  • Email address
  • Name (if you provide it)
  • Password (encrypted — we can't see it)
  • University and major (optional)

Content You Upload

  • PDFs, slides, Word documents, notes, images
  • Generated study materials (flashcards, summaries, quizzes, mind maps)
  • PDF annotations and highlights

Usage Data

  • Pages you visit and features you use
  • Device type and browser
  • Performance metrics

We do NOT collect:

  • Payment information (not yet integrated)
  • Precise location data
  • Contacts or files outside what you upload

How We Use Your Data

To make Fehm work

Processing your materials to generate flashcards, summaries, quizzes, and mind maps.

To improve the product

Understanding which features people use and how we can make them better.

To communicate with you

Account updates, support, and occasional product news (you can opt out).

To fix problems

Debugging issues and preventing abuse.

AI Processing

When you upload materials, we use AI (powered by OpenAI) to generate your study tools.

Important:

  • Your materials are processed to generate your study tools only
  • We do not use your uploads to train AI models
  • Your content is not shared with other users unless you choose to share it

Who We Share Data With

We use a few trusted services to run Fehm:

These providers only access what they need to do their job. We don't sell data to advertisers or data brokers.

Data Storage & Security

  • Your data is stored on secure Supabase servers
  • All connections are encrypted (HTTPS)
  • Passwords are hashed — we can't see them
  • File paths are hashed to prevent unauthorized access
  • CSRF protection on all sensitive requests

No system is 100% secure. If we ever have a breach, we'll notify affected users promptly.

Data Retention

  • Account data: Kept until you delete your account
  • Uploaded materials: Kept until you delete them or your account
  • Session tokens: Expire after 24 hours

When you delete your account, we remove your personal data. Some anonymized, aggregated data may remain (like total flashcard sets created).

Your Rights

You can:

  • Access your data — see what we have in your profile and library
  • Export your data — download your materials as PDF
  • Delete your data — remove your account and everything with it
  • Opt out of marketing emails in your notification settings

To exercise any of these rights, email us at team@fehm.ai

For UK/EU Users

You have rights under GDPR including access, rectification, erasure, and data portability. Our legal basis for processing is contract performance and legitimate interest. To exercise your rights or file a complaint, contact us.

Cookies & Local Storage

We use minimal cookies and browser storage:

CSRF Token (Cookie)

Security protection — expires after 24 hours

Theme Preference (Local Storage)

Remembers your light/dark mode choice

Language Preference (Local Storage)

Remembers your English/Arabic choice

AI Settings (Local Storage)

Your custom AI generation preferences

We don't use advertising or third-party tracking cookies.

Children

Fehm is designed for university students. We don't knowingly collect data from children under 16. If you're a parent and believe your child has signed up, contact us and we'll delete the account.

Changes to This Policy

We may update this policy occasionally. If we make significant changes, we'll notify you via email or in-app notice. Continued use after changes means you accept the updated policy.

Contact

Questions about your privacy? Reach us at: