Effective 18 May 2026

Privacy Policy

Megumi is a private study workspace. This policy explains what we collect, why we collect it, and how study data moves through the product.

1. Overview

This Privacy Policy applies to Megumi, available at ai.pixlox.me, and to related study, speaking practice, marking, onboarding, waitlist, and account features. Megumi is currently an invite-only product for approved users.

Megumi is designed for study support. We aim to collect only what is needed to authenticate users, control access, save study sessions, provide feedback, protect the service, and improve reliability.

2. Information we collect

Account and authentication

  • Name, email address, username, profile image, and authentication identifiers.
  • OAuth details supplied through supported sign-in providers such as GitHub.
  • Session cookies and security signals required to keep accounts signed in.

Profile and access

  • Name, username, state, year level, onboarding status, and waitlist status.
  • Access decisions, such as pending, accepted, or rejected.

Study content

  • Live practice conversations, transcripts, model answer reviews, and feedback.
  • Marker questions, typed responses, file names, generated marks, and feedback.
  • Images uploaded for marking are processed for feedback. Megumi does not currently store the raw uploaded image files as permanent study records.

Technical information

  • Request metadata, timestamps, errors, device/browser details, and IP-related server logs.
  • Microphone permission state in your browser. Megumi cannot access your microphone unless you grant permission.

3. How we use information

  • To sign users in, protect accounts, and restrict access to approved users.
  • To save and load live practice conversations, marking sessions, and feedback.
  • To generate AI feedback, model answers, marks, and speaking practice responses.
  • To maintain reliability, debug failures, prevent abuse, and enforce limits.
  • To communicate important account, access, security, or policy updates.

We do not sell personal information. We do not use Megumi for third-party advertising or behavioural ad targeting.

4. AI processing

Megumi sends study content to AI providers when you use live practice, speaking feedback, model answer review, or marker features. This can include prompts, transcripts, typed answers, uploaded image content, feedback context, and generated responses.

Live voice practice streams microphone audio to the live AI service so the service can transcribe speech and respond. Megumi stores transcripts and saved conversation data, not raw live audio recordings, unless a future feature clearly says otherwise.

Avoid entering highly sensitive information into prompts, transcripts, marker responses, or uploaded work. AI output can be wrong, incomplete, or unsuitable for your exact assessment. Use it as study support, not as a final authority.

5. Service providers

We use trusted service providers to run Megumi. They process information only as needed to provide their part of the service.

ProviderPurposeData involved
ClerkAuthentication, user management, session security, captcha.Account details, identifiers, session data, OAuth details.
Supabase / PostgresPrimary database for app records.Profiles, access state, saved sessions, messages, feedback.
VercelHosting, server-side routes, deployment, logs.Request metadata, server logs, deployed application code.
Google Gemini APILive AI, transcription, marking, feedback, model answer generation.Prompts, transcripts, answers, uploaded image content, generated output.

We may also disclose information if required by law, to protect Megumi or its users, or as part of a business transfer involving the service.

6. Retention and deletion

We retain account and study data while your account is active so Megumi can load your history, feedback, and profile. Deleted conversations and marker sessions may be soft-deleted in the app database before permanent cleanup.

You can delete your account from Settings. Account deletion removes your Megumi user record and associated saved app data from the primary database, and requests deletion of your Clerk user account. Some provider logs, backups, security records, or legally required records may remain for a limited period.

We may retain anonymised or aggregated information that no longer identifies an individual.

7. Security

  • Megumi uses HTTPS/TLS for browser connections.
  • Database credentials and AI provider keys are stored as server-side secrets.
  • Protected app routes require authentication and access checks.
  • Database access is handled through server-side routes rather than exposing database credentials to the browser.

No online service can guarantee perfect security. If we become aware of a security issue that materially affects users, we will take reasonable steps to investigate, contain, and notify affected users where required.

8. Your choices

  • You can update profile details in Settings.
  • You can delete your account in Settings.
  • You can request access, correction, or deletion help by contacting us.
  • You can control microphone permission through your browser or operating system.

9. Students and younger users

Megumi is designed for secondary study, including HSC-style preparation. If you are under 18, use Megumi only with permission from a parent, guardian, school, or responsible adult who has approved your access.

Megumi is not intended for children under 13. If we learn that an account was created for a child under 13, we may delete it.

10. Changes

We may update this policy as Megumi changes. The latest version will be posted on this page with an updated effective date. Material changes may also be communicated through the app or by email where appropriate.

11. Contact

For privacy questions, data requests, or concerns, contact hi@pixlox.me.