Privacy Policy

Who we are

NeuroSprint is the reading application at getneurosprint.com and the NeuroSprint Reader browser extension, operated by DreamGrid. DreamGrid decides what is collected and why, which makes it the controller of the personal data described here. For anything to do with privacy or support, the contact is support@getneurosprint.com. We answer privacy requests from that address, and we will confirm your identity before acting on one that touches account data.

Using NeuroSprint without an account

The reader works without an account, and most of what it does never leaves your device.

• Your documents (PDFs you open and text you paste) are stored in your browser’s IndexedDB. They are not uploaded to us or to anyone else.
• Your settings, reading stats and diagram gallery are stored in the browser too, in IndexedDB and localStorage.

This means the data is tied to that browser on that device. Clearing site data removes it, and we cannot recover it for you, because we never had it. The single exception is the AI features, which only run when you ask (see section 4).

With an account

An account is optional and free. You can sign in with Google or with a sign-in link sent to your e-mail address; both are handled by Supabase Auth. With an account, we store the following on our servers:

Identity

Your e-mail address and, if you sign in with Google and Google provides them, your name and avatar.

Reading stats

XP, words and pages read, your streak, and a nickname you choose. The nickname and XP can appear on the in-app leaderboard; the rest is private to you.

Reading sessions

For each session: the document’s title, word and page counts, duration and average pace.

Library sync

Document titles and your reading position and progress in each, so your place follows you across devices. The content of your documents is never synced.

Diagram gallery (Pro)

The source text of each diagram and its title, so your gallery follows you across devices.

Documents themselves stay in the browser even when you are signed in.

AI features

Three things use an AI model: grading an “Explain it back” answer, turning a passage into a diagram and, on Pro, writing the questions for Explain it back. None of them runs by itself; each starts from something you press:

• A review sends the passage excerpt you are working on (up to about 4,000 characters), the question you were asked and the answer you wrote.
• A diagram sends the passage excerpt.
• Questions, on Pro: opening Explain it back sends the passages of that round (up to about 10,000 characters), so a question can be written for each.

That content goes to our server and is forwarded to Anthropic’s API (the Claude models), which returns the grade, the diagram or the questions. We do not store the content. The only thing we record is a usage counter per user, so that the weekly and daily limits work.

Anthropic, under its commercial terms, does not use API content to train its models, and deletes it within 30 days unless it must keep it longer for legal or safety reasons.

If you would rather send nothing, you can grade your own answer against the passage in the app. That option is always available and always free.

Dictation. Explain it back has a microphone button. It uses your browser’s own speech recognition: in Chrome and Edge, the recording is sent to Google or Microsoft to be turned into text. We receive only the text, and only when you submit it. If you would rather not, type instead.

Payments

Pro is sold through Dodo Payments, which acts as the merchant of record for DreamGrid. Dodo Payments takes your payment and processes your card data; we never see card numbers. To activate your plan, we receive the e-mail address used for the purchase, a customer id, the product bought and the status of the subscription (for example active, cancelled, or lifetime). Dodo Payments’ own privacy policy covers what it does with payment data.

Analytics, and how to switch it off

We count how the site and the app are used so we can see where people give up. Two counters do it. Both are cookieless, and both are built to know as little as possible.

Our own event counts

• They are cookieless. Nothing is written to your device to identify you.
• They record aggregate event counts: page views and product events such as “opened a document” or “finished a reading session”. Never the content of a document, a passage, a question or an answer.
• There are no advertising identifiers and no cross-site tracking.
• No IP address is stored.
• A session id is kept only in the page’s memory and disappears when you close the tab.

Vercel Web Analytics

Our host, Vercel, counts page views for us with its Web Analytics. Its script and the address it reports to are on our own domain.

• It sets no cookie and stores nothing on your device. Vercel tells visits apart with a hash of the incoming request, which it discards after 24 hours.
• For each page view it records the time, the page, the referring site, an approximate location (country, region and city) worked out from your IP address, and your browser, operating system and type of device. The record is not tied to your IP address, and we see only totals.
• Before anything is sent, we cut the page address down to the page itself: everything after ? or # is removed, except campaign tags such as utm_source. Sign-in links and checkout references never reach it.

Both counters honour Global Privacy Control and Do Not Track: if your browser sends either signal, neither sends anything. You can also switch both off here. The choice is stored in this browser only, as a single flag that both scripts check before sending anything.

Hosting and processors

We use a small number of companies to run the service. Each processes data only to provide its service to us.

Vercel

Hosts the website and the app, and counts page views with Vercel Web Analytics (section 6). Like any web host, Vercel keeps standard server logs, which include your IP address, for security and operations.

Supabase

Provides the database and the sign-in system that hold the account data described in section 3.

Anthropic

Provides the AI model that grades answers and draws diagrams (section 4).

Dodo Payments

Merchant of record for Pro (section 5).

Storage on your device

NeuroSprint uses your browser’s localStorage and IndexedDB strictly to make the product work: your documents, settings, stats, gallery, reading positions and, if you opted out above, the analytics flag. There are no advertising cookies. If you sign in, Supabase stores your session token in localStorage so you stay signed in between visits; signing out removes it.

What we do not do

• We do not show ads.
• We do not sell personal data, and we do not share it with anyone for their own marketing.
• We do not load advertising or cross-site trackers, third-party fonts or social widgets. Every script and typeface on this site is served from our own domain.
• We do not read, index or upload the content of your documents.

Retention and deletion

Account data is kept for as long as your account exists. You can delete your account, and with it all of your server-side data, at any time from Profile → “Delete my account” in the app, or by e-mailing support@getneurosprint.com from the address on the account. Deletion is not reversible.

Content sent for an AI action is not stored by us at all; Anthropic’s retention is described in section 4. Payment records are kept by Dodo Payments for as long as tax and accounting law require. Host logs are kept by Vercel for a limited time under its own policy, and Web Analytics page views as aggregate reports for the period our Vercel plan provides.

Data stored only in your browser is under your control: clearing site data for getneurosprint.com removes it.

Your rights

Wherever you are, you can ask us to tell you what personal data we hold about you, to send you a copy, to correct it, or to delete it. Write to support@getneurosprint.com. We will reply within a month.

If you are in the European Economic Area, Switzerland or the United Kingdom, the GDPR and UK GDPR give you the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent where we rely on it. You also have the right to complain to your local data protection authority.

If you are a California resident, this section is our notice under the CCPA. We do not sell or share personal information as those terms are defined there, and we do not use it for targeted advertising. You have the right to know, to delete and to correct, and you will not be treated differently for using them.

Legal bases and international transfers

Where a legal basis is required, we rely on:

• Performance of a contract, to provide the service you signed up for: your account, sync, plan activation and the AI actions you request.
• Legitimate interest, for keeping the service secure and for aggregate, cookieless analytics of how it is used.
• Consent, where the law requires it; you can withdraw it at any time.

Our processors are located in the United States and the European Union. Where data leaves the EEA or the UK, the transfer is covered by standard contractual clauses or an equivalent recognised safeguard.

Children

NeuroSprint is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has created an account, tell us and we will delete it.

The browser extension

NeuroSprint Reader collects nothing and transmits nothing. It has no account, no analytics and no server.

• Your settings are kept in the browser’s extension storage.
• Read-aloud uses the voices built into your browser or operating system. Some browsers also offer optional “online voices”, provided by the browser or OS vendor; if you enable one, the text being spoken is sent to that vendor, and only to it. The extension does not send it anywhere else.
• “Send to NeuroSprint” copies the selected text to your clipboard and opens the app, where you can paste it. Nothing is transmitted in the background.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the date at the top, and for a change that matters we will tell account holders by e-mail before it takes effect. Earlier versions are available on request.