About this service
Thakerli is a study assistant operated by the project owner. This page describes the current beta and how its account and study features use your data.
What we store
We store your email address, a bcrypt password hash, email verification status, optional display name, preferences, notes and subject tags, saved quizzes and flashcards, quiz answers and results, and mistake-review progress. Verification and password-reset tokens are stored as hashes with expiry times. Limited request counters help prevent abuse.
AI processing
With Groq selected, relevant note excerpts, your question, and recent chat history are sent to Groq. Quiz and flashcard generation sends up to the first 4,000 characters of the selected note. With local Ollama, model processing occurs on the machine running that model. AI answers can be incorrect; review them before relying on them. Do not upload sensitive personal information during the beta.
Hosting and email services
The current hosted deployment uses Render for the application and Neon for PostgreSQL storage. When configured, Resend processes your email address and verification or recovery message to deliver account emails. These providers process data under their own terms and privacy policies. This service does not sell your notes or use these account emails for marketing.
Browser storage and logs
The app uses browser local storage for the login token and appearance/language choices. The current app includes no advertising or analytics trackers. Hosting services may retain operational logs, including network addresses and request metadata. Email-link tokens use URL fragments and are not sent in the initial page request.
Retention and deletion
Account and study data remain in the application database until you delete them. In Settings, Delete account removes your account, notes, embeddings, saved materials, quiz attempts, results, settings, review progress and email-action tokens from the active database. This action cannot be undone. Limited abuse-prevention counters may remain until their daily cleanup. Copies in backups and provider logs expire according to the hosting providers’ configured retention policies; active-database deletion does not instantly erase every backup.
Your choices
You can edit or delete notes, update account details, reset your password using the account email, and delete your account after confirming your current password. Passwords are not recoverable in plaintext. Signing out clears the browser token; the current session design does not yet revoke that token on the server merely because you signed out.
Security and contact
We use password hashing, authenticated access checks, request limits and browser security policies. No service can guarantee absolute security. For questions about your data, contact the operator using the contact option below. Avoid sending passwords, API keys or notes through public issue reports.