What we keep, and why.

Margin is a study coach. To plan your sessions it has to remember what you’re learning and how it’s going, so it stores your notes and its own notes about you. We use that only to run Margin for you. We don’t sell it, show you ads, or use third-party analytics or trackers. You can delete all of it from Settings at any time.

• Account: your email, your name, and either your Google account ID (if you sign in with Google) or a hashed password.
• Sign-in sessions: for each signed-in device, the IP address and browser user agent it signed in from, so you can review and revoke sessions.
• Your learning: each path’s name, resource and goals; its objectives; session plans; your notes and any images you attach; what you tell the coach before a session (time, energy, focus); your end-of-session reflections; your answers to recall checks and feedback questions, with your confidence ratings.
• What the coach writes about you: a running learner summary, feedback on your notes, grades on recall answers, and an internal map of the concepts you’ve worked on and how well they’re holding up.
• In-session chat: your chat messages are sent to the AI model to answer you and, at the end of a session, to update your summary. Margin does not keep a chat transcript afterwards.
• Waitlist: if you join the waitlist, your email, name (if given) and how you heard about us.
• Reminder emails: only if you turn on a reminder for a path, when we last sent you one.

To run the product: sign you in, plan and review your sessions, send the emails you ask for (verification, password reset, and reminders you’ve opted into), and keep Margin secure and working. We read stored data only to fix problems or when you ask us to.

To see which parts of Margin help and where people get stuck, we record usage events ourselves, such as “session started”, “recall check submitted” or “page viewed”. They hold ids, counts and choices (like how many minutes you said you had), never the content of your notes, answers or messages. They’re stored in our own Google Cloud project, not sent to an analytics company, and no cookies or third-party trackers are involved.

Before you sign in, events carry a random id that lives only in this browser tab’s session storage and is gone when you close it, so we can see one visit, not follow you across visits. Events are kept for 13 months and deleted with your account.

• Google Cloud (United States, us-central1) hosts the app, database and files, and runs Google’s Gemini models through Vertex AI.
• Anthropic runs the Claude models that write plans, reviews and chat replies. Your notes, summary and messages are sent to it for each of those calls.
• Resend delivers our emails.
• Google Sign-In authenticates you if you choose “Continue with Google”.

We use these AI providers’ paid API services, under terms that don’t allow them to train their models on the data we send.

Margin keeps your sign-in token and a few display preferences (like collapsed panels) in your browser’s local storage, and the per-visit analytics id described above in session storage. We don’t use advertising or analytics cookies. Google may set its own cookies when you use Google Sign-In.

• Your account and learning data: until you delete your account.
• Database backups: up to about 14 days after deletion, after which they roll off automatically.
• Internal concept-analysis snapshots of your notes: 90 days.
• Product analytics events: 13 months.
• Operational logs: about 30 days.

Settings → Delete account permanently removes your account and every path, session, note, image, feedback item and pending verification, and takes you off the waitlist. To request a copy of your data, or for anything else, email tarikeshaq@gmail.com.

Margin isn’t intended for children under 16.

If we change how we handle your data in a meaningful way, we’ll update this page and tell you by email before the change applies to data we already hold.