Jolina AI
Back to home

Privacy Policy

Last updated: 7/22/2026

1. Who We Are

Jolina AI (operated by linamahmoud) is the data controller for the personal data collected through our Service. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use Jolina AI.

2. Information We Collect

We collect the following categories of personal data:

  • Account information: name, email address, password (hashed), and profile information you provide when registering;
  • User content: documents, files, prompts, and other materials you upload to the Service for processing;
  • Usage data: interactions with the Service, including generated quizzes, summaries, flashcards, and feature usage;
  • Device and technical data: IP address, browser type, operating system, and device identifiers;
  • Support data: messages, feedback, and communications you send to our support team;
  • Payment data: handled exclusively by our payment provider, Paddle. We do not store full payment card details on our servers.

3. How We Use Your Information

We use your personal data for the following purposes:

  • Providing the Service: to create and manage your account, process your documents, and generate AI-powered study materials;
  • Security and fraud prevention: to protect your account and our systems from unauthorized access and abuse;
  • Product improvement: to analyze usage patterns and improve the functionality and performance of the Service;
  • Customer support: to respond to your inquiries and resolve issues;
  • Communication: to send you service-related updates, security alerts, and (with your consent) marketing communications;
  • Legal compliance: to comply with applicable laws, regulations, and legal processes.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract performance: processing necessary to provide the Service you signed up for;
  • Legitimate interests: security, fraud prevention, and service improvement;
  • Consent: where required for specific purposes such as marketing communications;
  • Legal obligation: where we are required to process data by law.

5. Data Sharing and Recipients

We do not sell your personal data. We may share your data with the following categories of recipients:

  • Service providers: hosting, analytics, and customer support tools that help us operate the Service;
  • Paddle (Merchant of Record): for payment processing, subscription management, tax compliance, and invoicing. Paddle acts as an independent controller for the data it collects during checkout;
  • Professional advisers: legal and accounting professionals where necessary;
  • Authorities: when required by law, court order, or government request.

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain it for legal, tax, or regulatory purposes. AI-generated outputs may be retained in anonymized form for product improvement.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you;
  • Rectification: request correction of inaccurate or incomplete data;
  • Erasure: request deletion of your personal data;
  • Restriction: request limitation of processing in certain circumstances;
  • Portability: request transfer of your data to another controller;
  • Objection: object to processing based on legitimate interests;
  • Withdraw consent: withdraw consent where processing is based on consent.

To exercise these rights, please contact us. We will respond to your request within one month, or longer if permitted by law.

8. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/SSL), access controls, and regular security reviews. However, no system is completely secure, and we cannot guarantee absolute security.

9. Cookies and Similar Technologies

We use essential cookies to maintain your session and enable core functionality. We may also use analytics cookies to understand how users interact with the Service. You can manage your cookie preferences through your browser settings.

10. Children's Privacy

The Service is not intended for children under 13 years of age (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

11. International Transfers

Your data may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data in accordance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact Jolina AI support.