Privacy Policy

Last updated: June 28, 2026

This Privacy Policy explains what information Pebble Log collects, how we use it, and the choices you have.

1. Scope

This Policy applies to information we collect through the Pebble Log website, applications, and related services (the "Service") operated by Pebble Log ("Pebble Log," "Pebble," "we," "us," or "our"). It should be read together with our Terms of Service. It does not apply to third-party products or services that we do not operate, even if you reach them through the Service.

2. Information we collect

Information you provide

• Account and identity. When you sign in with Google, we receive and store identity information from your Google account, including your name, email address, profile picture, and your Google account identifier.
• Profile and preferences. Information you set in the Service, such as a target test date, focus area, default question source, goal score, whether you work with a tutor, onboarding status, and your customized organization settings.
• Study content. The practice questions you log and everything attached to them — including the section and topic, difficulty, source, the question text (which you may type or transcribe from an image), the type of mistake, your notes, status labels, and any screenshots or other images you upload.
• Payment-related information. If you purchase a paid plan, you provide payment details directly to our payment processor (Stripe). We do not receive or store your full payment card number. We store limited billing-related information such as your plan, whether and when it is active or expires, and identifiers our payment processor assigns to you.
• Communications. If you contact us, we keep your messages and contact details.

Information collected automatically

• Session and device information. When you use the Service we may process technical information such as your IP address, browser and device type, operating system, language, referring pages, the pages and features you use, timestamps, and similar log data. We use a session cookie to keep you signed in.
• Usage and analytics data. We collect information about how the Service is accessed and used, as described under "Analytics" below.
• Cookies and local storage. We and our providers use cookies and similar technologies, as described under "Cookies and similar technologies."

Information from third parties

• Identity provider. We receive your basic profile information from Google when you sign in.
• Payment processor. We receive information about your transactions and subscription status from Stripe, such as whether a payment succeeded and when a plan renews or ends.

We may combine information from these sources and use it as described in this Policy.

3. How we use information

We use the information we collect for any lawful purpose, including to:

• provide, operate, maintain, secure, and support the Service;
• create and manage your account and authenticate you;
• store, process, and display the content you log, and provide features such as dashboards, insights, review, and export;
• process transactions and manage plans and subscriptions;
• personalize and improve the Service and develop new features, products, and services;
• analyze usage and trends, conduct research, and perform analytics;
• develop, test, train, and improve features, models, algorithms, and other technologies;
• communicate with you, including sending service, transactional, and (where permitted) promotional messages;
• prevent, detect, and respond to fraud, abuse, security incidents, and violations of our Terms;
• comply with law and enforce our agreements and legal rights; and
• carry out any other business or commercial purpose we disclose or that is compatible with the context in which the information was collected.

We may create aggregated, anonymized, or de-identified information from the data we collect (including from your content), and we may use and disclose such information for any purpose. This information is not subject to this Policy because it no longer identifies you.

4. AI and screenshot processing

If you use features that transcribe or interpret a screenshot or other content, the relevant content (for example, an image you upload) is sent to a third-party artificial-intelligence provider (currently Google's Gemini API) to generate the result, which is returned to the Service. Your use of these features means you understand and agree that such content is processed by that provider, subject to that provider's terms. We may also use content and the results of such processing to operate, evaluate, and improve our features as described above.

5. How we share information

We may share information as follows:

• Service providers and processors. With companies that perform services for us, such as cloud hosting and storage, our database and infrastructure provider (Cloudflare), payment processing (Stripe), identity and sign-in (Google), AI processing (Google), content delivery networks (such as jsDelivr), fonts (Google Fonts), and analytics (Plausible). These providers process information on our behalf or under their own terms.
• Legal and safety. When we believe disclosure is appropriate to comply with the law, a legal process, or a governmental request; to enforce our Terms; or to protect the rights, property, or safety of Pebble Log, our users, or others.
• Business transfers. In connection with, or during negotiations of, any merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, in which case information may be transferred as a business asset.
• With your direction or consent. When you ask us to share information or otherwise consent.
• Affiliates and others. With our affiliates and with other parties for the purposes described in this Policy.
• Aggregated or de-identified information. Which we may share freely for any purpose.

Depending on how applicable privacy laws define terms such as "sale" or "sharing," some of the disclosures described in this Policy could be considered a sale or sharing of personal information. Where applicable law gives you a right to opt out of such activity, you may exercise it by contacting us at the address below.

6. Cookies and similar technologies

We use a small number of cookies and similar technologies:

• Session cookie ("sid"). A strictly necessary cookie that keeps you signed in. It is set as HttpOnly and expires after a period of time or when you sign out.
• Local storage. The Service stores some preferences and interface state (such as your theme choice and timer settings) in your browser's local storage. This stays on your device and is not used to identify you.
• Analytics. See "Analytics" below.

You can control cookies through your browser settings, but disabling strictly necessary cookies may prevent you from signing in or using the Service.

7. Analytics

We use a privacy-focused analytics provider (Plausible Analytics) to understand how the Service is used in aggregate — for example, which pages are viewed and general device and referrer information. We use this analytics provider in a way that does not use cookies for tracking and is designed not to collect personally identifying information for this purpose. We may change or add analytics or measurement providers over time.

8. Retention

We retain information for as long as we consider necessary for the purposes described in this Policy — including to provide the Service, comply with our legal obligations, resolve disputes, enforce our agreements, and for legitimate business purposes — and as permitted by law. Retention periods vary depending on the type of information and the context. We may apply limits to certain features or content based on your plan. Even after you delete content or your account, we may retain copies in backups, logs, or in aggregated or de-identified form, and as otherwise permitted or required by law. We are not obligated to retain any information and may delete it at any time, subject to applicable law.

9. Security

We use reasonable technical and organizational measures designed to protect information. However, no method of transmission or storage is completely secure, and we cannot and do not guarantee the security of any information. You use the Service and provide information at your own risk. If you believe your account or information has been compromised, please contact us.

10. Your choices and rights

• Account information. You can review and update much of your profile information within the Service.
• Deleting your account. You can delete your account from within the Service. When you do, we remove your profile, your logged content, your stored screenshots, and your active sessions from the live Service. We may, however, continue to retain information in backups, logs, and in aggregated or de-identified form, and as otherwise described in the Retention section above or as permitted by law; deletion does not require us to erase every copy from every system. Some records, such as those held by our payment processor, may be retained by that provider for its own legal and business purposes.
• Communications. You can opt out of non-essential messages where we offer that option. We may still send you service or transactional messages.
• Legal rights. Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, or to object to or restrict certain processing. To the extent these rights apply to you, you may exercise them by contacting us. We may need to verify your identity, and we may decline a request where an exception applies. We will not discriminate against you for exercising rights you have under applicable law.

We do not currently respond to "Do Not Track" browser signals.

11. Children

The Service is intended for users who are at least 13 years old. It is not directed to and is not intended for children under 13, and we do not knowingly collect personal information from anyone under 13. If you are between 13 and the age of majority where you live, you may use the Service only with the involvement and consent of a parent or legal guardian. If you believe we have collected information from a child under 13, please contact us and we will take appropriate steps to delete it.

12. International users and transfers

We operate primarily in the United States, and our providers may process and store information in the United States and other countries. Privacy laws in these locations may differ from those where you live. By using the Service, you understand that your information may be transferred to, stored, and processed in the United States and other countries.

13. Third-party services and links

The Service relies on and may link to third-party services we do not control, including those listed above. This Policy does not cover the practices of those third parties, and we are not responsible for them. Their handling of your information is governed by their own privacy policies and terms.

14. Changes to this Policy

We may update this Policy at any time. If we make changes, we will update the "Last updated" date above and may provide additional notice as we consider appropriate. Changes are effective when posted unless stated otherwise. Your continued use of the Service after changes take effect means you accept the updated Policy.

15. Contact

Questions about this Policy or your information? Contact us at hi@pebblelog.com.