Privacy Policy
Last Updated: January 7, 2026
1Introduction
Finally, LLC ("Finally," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, application, and services (collectively, the "Service").
Finally, LLC is a limited liability company registered in the State of Georgia, United States. By using our Service, you consent to the data practices described in this Privacy Policy.
2. Information We Collect
The types of data we gather to provide our Service.
When you create an account via Google OAuth, we receive and store your name, email address, and profile picture as provided by Google. We do not receive or store your Google password.
We store the documents, notes, and text you upload ("User Content"), as well as the Finally Maps, quizzes, flashcard decks, mnemonics, and other content generated from your materials. This data is retained to provide you with persistent access to your study materials and track your progress.
All files you upload are automatically saved to your personal file library. We collect and store file metadata including: file names, file sizes, file types, upload timestamps, folder organization, tags you assign, and visibility settings. Files are stored securely in our cloud infrastructure.
We collect data about your interactions with the Service, including: quiz responses and scores, topics completed and mastery levels, study streaks and session timestamps, mnemonic generations, and feature usage patterns.
Our servers automatically collect certain information when you access the Service, including your IP address, browser type and version, device information, pages visited, and access timestamps. This data is used for security monitoring and service optimization.
Payment transactions are processed by Stripe, Inc. We receive confirmation of payment status and subscription details, but we do not receive, process, or store your full credit card number. All payment data is handled directly by Stripe in accordance with PCI-DSS standards.
If you use our accountability features, we collect and store the contact information (phone number and/or email address) of individuals you designate as accountability partners. You represent that you have obtained their consent to provide this information.
3How We Use Your Information
We use the information we collect to:
- Provide the Service: Create and manage your account, generate AI-powered study content, store your materials and files, and track your progress.
- Manage File Storage: Automatically save and organize your uploaded files, enable file management features, and maintain your personal file library.
- Process Payments: Manage subscriptions, process transactions, and send billing-related communications.
- Send Notifications: Deliver study reminders, accountability partner alerts, and service-related announcements.
- Improve the Service: Analyze usage patterns to enhance features, fix bugs, and develop new functionality.
- Ensure Security: Monitor for fraudulent activity, unauthorized access, and violations of our Terms of Service.
- Comply with Law: Respond to legal requests and fulfill our legal obligations.
4. Data Sharing & Third-Party Services
How your data interacts with external services.
4.1 AI Processing: To generate quizzes, flashcards, mnemonics, and study content, portions of your User Content are transmitted to Google (Gemini AI). Your use of AI-generated features is subject to Google's Terms of Service and Privacy Policy. We encourage you to review Google's data practices. We are not responsible for how Google processes data transmitted to their AI systems.
4.2 File Storage Infrastructure: Your uploaded files are stored using Supabase Storage, a third-party cloud storage provider. Files are encrypted in transit and at rest. Supabase processes data on our behalf under contractual obligations to protect your information.
4.3 Payment Processing: Payment information is processed by Stripe, Inc. Stripe's collection and use of your payment data is governed by Stripe's Privacy Policy.
4.4 Authentication: Account authentication is provided by Google OAuth. Your authentication is subject to Google's Privacy Policy.
4.5 Infrastructure Providers: We use third-party service providers for hosting, database management, and content delivery. These providers process data on our behalf under contractual obligations to protect your information.
4.6 Accountability Partners: If you enable accountability features, we send notifications containing limited study activity information (such as missed sessions) to your designated accountability partners via SMS or email. We do not share your User Content, quiz scores, or detailed progress data with accountability partners.
4.7 Public & Unlisted Files: If you choose to make files "public" or "unlisted," those files may be accessible to other users or anyone with the link, respectively. Private files are only accessible to you.
4.8 Legal Requirements: We may disclose your information if required by law, court order, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
We Do Not Sell Your Data: Finally, LLC does not sell, rent, or trade your personal information to third parties for marketing purposes.
5. Data Retention
5.1 Active Accounts: We retain your User Content, stored files, progress data, and account information for as long as your account remains active. User-uploaded files are retained until you choose to delete them.
5.2 File Retention: Files you delete from your library are permanently removed from our systems. We do not maintain backups of deleted files. Deletion is typically completed within 24 hours.
5.3 Account Termination: Upon account termination (whether by you or by us), we will delete or anonymize your personal information, including all stored files, within fourteen (14) days, except where we are required to retain data for legal, accounting, or security purposes.
5.4 Log Data: Server logs and security-related data may be retained for up to 90 days for security and fraud prevention purposes.
6Data Security
We implement industry-standard technical and organizational security measures to protect your personal information and stored files, including:
- Encryption of data in transit using TLS/SSL protocols
- Encryption of files and sensitive data at rest
- Secure cloud storage infrastructure with access controls
- Regular security assessments and monitoring
- Access controls limiting employee access to personal data
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
7. Your Rights & Choices
How you can control your data.
7.1 Access & Portability: You may request a copy of the personal information we hold about you by contacting us at the email address below.
7.2 Correction: You may update or correct your account information at any time through your account settings.
7.3 File Management: You have full control over your stored files. You may view, download, organize, rename, tag, change visibility settings, and delete any files in your library at any time through the Service interface.
7.4 Deletion: You may request deletion of your account and associated data (including all stored files) by contacting us or using the account deletion feature within the Service. Upon request, we will delete your data in accordance with Section 5.
7.5 Notifications: You may opt out of non-essential communications by adjusting your notification settings. Note that you cannot opt out of transactional communications (such as billing confirmations).
7.6 Accountability Partners: You may add or remove accountability partners at any time through your account settings. Removing a partner will stop future notifications to that individual.
8. Children's Privacy
Our commitment to protecting minors.
8.1 Age Requirement: The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13 without verifiable parental consent.
8.2 Parent & Guardian Accounts: Parents and legal guardians may create accounts to use the Service with their children. In such cases, the parent or guardian is the account holder, and all personal information collected (including stored files) is associated with the adult's account.
8.3 Parental Rights: Parents who believe we may have inadvertently collected information from their child under 13 may contact us to request deletion. We will promptly delete any such information upon verification.
COPPA Compliance: We are committed to complying with the Children's Online Privacy Protection Act (COPPA). If we discover that we have collected personal information from a child under 13 without proper parental consent, we will delete that information as quickly as possible.
9. International Users
Finally, LLC is based in the United States and the Service is primarily intended for users in the United States. If you access the Service from outside the United States, please be aware that your information (including stored files) may be transferred to, stored, and processed in the United States where our servers are located.
By using the Service, you consent to the transfer of your information to the United States and acknowledge that data protection laws in the United States may differ from those in your country of residence.
10Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Notify you via email or prominent notice on the Service
Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.
11Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: