Privacy Policy

Researchify is operated by Kravos Tech Pvt. Ltd., a company registered in India. We are the data controller for the information described here. You can reach us at info@kravos.tech.

We collect only what the product needs to function. In practice that is:

• Account details. Your name and email address, taken from your Google account when you sign in, plus your role (professor, scholar or co-supervisor) and your light or dark theme preference.
• Lab records. Scholars, groups, tasks, deadlines, submission links, review decisions and review notes.
• Meetings. Titles, dates, agendas, participants, attendance, and meeting links.
• Meeting transcripts and summaries, but only where a professor connects a recording service or pastes a transcript in manually. This is off unless somebody turns it on.
• Messages. Direct messages sent between members of a lab, and conversations with the Lumi assistant.
• Google Calendar access. When you connect Google, we store a token that lets us create and update calendar events on your behalf. See the section on Google below.
• Activity records. A log of actions taken in the app, used so supervisors can see what changed and when.

We do not use advertising trackers, we do not sell data to anyone, and we do not build profiles for marketing.

Signing in uses Google OAuth. We request one sensitive permission: calendar, so that scheduling a meeting in Researchify creates the matching event and invites in your own calendar.

We do not read your mailbox, and we do not send mail from your account. Notification emails go out from our own domain.

You can revoke our access at any time at myaccount.google.com/permissions. Calendar features stop working when you do; the rest of the app continues to work.

Researchify's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use a small number of service providers to run Researchify. Each receives only what it needs for its job.

Worth being explicit about: when a meeting is summarised, the transcript text is sent to a third-party AI provider (Groq, or OpenAI as a fallback) to generate the summary and action items. Research discussions are often unpublished work. If that is not acceptable for your lab, do not connect a recorder and do not paste transcripts in.

Other people in your lab also see your data: a professor can see their scholars' tasks, submissions and meeting attendance, and co-supervisors see whatever the professor grants them. Direct messages are visible only to the sender and recipient.

Data is held on infrastructure operated by Supabase and Vercel, which may process it in data centres outside your country. Where data leaves the region it was collected in, it is covered by the relevant provider's standard contractual protections.

We keep your information for as long as your account exists. Delete your account and we remove your profile, notifications, activity records and messages, along with any lab records that belong to you.

If you are a professor, deleting your account also deletes the meetings and tasks you created. Your scholars are not deleted. They are released from your lab and keep their own accounts.

Backups may retain deleted content for a short period before they age out. Records we are legally required to keep are retained for as long as the law requires.

You can, at any time:

• See and correct your profile details in Settings.
• Delete your account and its data from Settings, under Delete Account. This is immediate and cannot be undone.
• Withdraw Google Calendar access from your Google account settings.
• Ask us for a copy of your data, or ask us to correct or erase it, by emailing info@kravos.tech.

Depending on where you live, you may have additional rights under India's Digital Personal Data Protection Act, the UK GDPR or the EU GDPR, including the right to complain to your local data protection authority.

Access is controlled per lab, so members of one lab cannot read another lab's records. Traffic is encrypted in transit. Credentials such as your Google token are held server-side and are not exposed to the browser.

No system is perfect. If you believe you have found a security problem, please email info@kravos.tech rather than disclosing it publicly, and we will respond as quickly as we can.

Researchify is built for higher education and is not intended for anyone under 16. We do not knowingly collect data from children.

If we make a material change, we will update the date at the top of this page and notify account holders by email before it takes effect.