Privacy Policy

Effective: August 7, 2026 Last updated: August 7, 2026

A1Base Inc. owns and operates StudyArena ("StudyArena," "A1Base," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use:

• https://studyarena.ai and any other website that links to this Privacy Policy;
• StudyArena's model-comparison battles, chats, model and provider directories, leaderboards, account features, and sharing features; and
• related support, communications, research, and other activities described below.

We refer to these collectively as the "Service."

This Privacy Policy does not govern the independent practices of AI providers, authentication providers, websites fetched through agentic tools, or other third-party services. Their own terms and privacy policies apply to their processing.

We may provide additional notices for particular features, school deployments, regions, or data-collection activities. Those supplemental notices should be read together with this Privacy Policy.

1. The important points

• StudyArena lets you submit a question or files to AI models, compare answers, and vote on the results.
• In a blind model battle, the same prompt and attachments are sent to multiple AI providers selected from the current model pool. Their identities are normally revealed after voting.
• You can use some parts of StudyArena without an account. If you create an account, chats, votes, and profile information may be associated with it.
• StudyArena currently uses third-party infrastructure and AI providers. Your content may therefore be processed outside your country.
• Do not submit information that you would not want disclosed to the AI providers that process your request. In particular, avoid student IDs, grades, medical information, passwords, confidential school records, or personal information about another person unless you are authorized to share it.
• We do not sell personal information for money or use it for targeted advertising. See Section 14 for important information about how disclosures to AI providers may be classified under certain US state laws.
• You can delete your account and may request access, correction, deletion, or other privacy rights by contacting us.
• StudyArena is for users aged 13 and older. Users under the age of legal majority should use the Service only with permission from a parent or legal guardian where required.

2. Personal information we collect

2.1 Information you provide

We may collect the following information that you provide directly:

User Content

Information submitted to or created through the Service, including:

• prompts, questions, messages, instructions, and chat history;
• homework, assignments, notes, essays, research materials, and other documents;
• PDFs, images, text files, Markdown files, and other supported attachments;
• filenames, file types, file sizes, and other attachment metadata;
• AI-generated answers, outputs, rendered webpages, calculations, citations, tool results, and other generated material;
• votes, ratings, selections, feedback, categories, and model preferences; and
• information associated with saved chats, threads, shared links, and follow-up messages.

User Content may contain personal information about you or other people. We do not intentionally request sensitive personal information, but free-form prompts and uploaded files may reveal health information, disability, religion, racial or ethnic origin, sexual orientation, immigration status, financial information, school records, or other sensitive details.

Account and authentication information

If you create an account using Google, Discord, or another sign-in provider that we make available, we may receive information authorized by you and the provider, such as:

• name and username;
• email address;
• profile picture;
• provider-specific user identifier;
• authentication status and account-linking information; and
• access or refresh tokens needed to maintain the connection, where applicable.

We do not receive the password that you use with a third-party authentication provider.

The information we receive depends on the provider, the permissions requested, your settings, and the provider's policies. You can review or revoke connected-app permissions through the relevant provider, although revocation does not delete information we already received.

Study profile information

You may choose to provide information used to tailor the Service and produce aggregate statistics, such as:

• country;
• school, university, or other educational institution;
• middle-school, high-school, university, or other study level;
• school year, university year, or equivalent level; and
• profile photo or other profile details.

You may also submit search terms when looking for a school or institution.

Communications

We collect information you provide when you contact us, report content, request support, exercise a privacy right, participate in a survey, or otherwise communicate with us.

2.2 Information collected automatically

When you use the Service, we and our infrastructure providers may automatically process:

• IP address and approximate location, such as country or general region;
• browser type, device type, operating system, language, and device settings;
• request time, pages or features used, referring page, error information, and similar usage data;
• session, authentication, security, and rate-limiting information;
• cookie identifiers, local-storage values, and similar device-storage information; and
• diagnostic, availability, performance, and network information.

StudyArena may use an IP address temporarily for rate limiting without intentionally writing it to the StudyArena application database. Our hosting, security, and network providers may nevertheless process or retain IP addresses and request metadata in accordance with their configurations and terms.

2.3 Information stored on your device or included in URLs

StudyArena may use browser storage to remember profile answers, account state, onboarding status, preferences, and other information. Depending on the implementation, country, study level, school, or year may also appear in a page URL or be transmitted with a battle so that aggregate school statistics can be calculated.

After you complete the study-profile questions, your country, study level, school, and year may be reflected in the address of the page you are on. Information placed in a URL may appear in browser history, screenshots, shared links, referrer information, or infrastructure logs.

You can clear local storage and cookies through your browser settings. Doing so may sign you out or reset preferences.

2.4 Information about other people

User Content may include information about teachers, classmates, friends, family members, authors, or other people. Only submit another person's personal information if you have the right or permission to do so. Do not upload confidential school records or private communications belonging to another person.

3. How we use personal information

We may use personal information for the following purposes:

Provide and operate the Service

• process prompts and attachments;
• select and call AI models;
• stream, display, and save responses;
• provide model-comparison battles and agentic chats;
• run tools requested through a chat, such as fetching a webpage, performing a calculation, checking a date, or rendering an artifact;
• record votes and calculate model rankings;
• maintain accounts, sessions, profiles, chats, and threads;
• sync account information between devices; and
• provide support and respond to requests.

Personalize the Service

• tailor explanations to a study level or year;
• remember user selections and preferences;
• maintain school or institution selections; and
• show relevant model, category, or leaderboard information.

Benchmarking, analytics, and improvement

• calculate overall and category-specific model rankings;
• understand which models and answers users prefer;
• measure reliability, latency, quality, safety, and feature usage;
• debug errors and improve the Service; and
• create aggregate or de-identified statistics.

We do not use your prompts, attachments, or outputs to train AI models of our own — we build none — and we will not publish raw prompts or attachments as a public dataset unless we provide additional notice and obtain any consent required by law. De-identified votes, outcomes, and rankings are used to build the leaderboard and the aggregate benchmark results described below, and those aggregate results may be licensed to AI developers, schools, and other organizations. Aggregate results never carry names, email addresses, or account identifiers.

School and community statistics

We may use school, country, level, year, and vote information to calculate aggregate statistics, such as model preferences associated with a school or study level. We apply aggregation and minimum group-size thresholds designed to reduce the risk that a person can be identified from these statistics.

Safety, security, and integrity

• authenticate users and protect accounts;
• apply rate limits;
• prevent duplicate, fraudulent, abusive, harmful, or unauthorized activity;
• investigate security incidents and enforce our terms; and
• protect the rights, safety, and property of users, A1Base, and others.

Communications

• send service, account, security, support, and policy-update messages; and
• send optional product news or marketing messages if you request them, with an opportunity to unsubscribe.

Legal and business purposes

• comply with law, lawful requests, court orders, and legal processes;
• establish, exercise, or defend legal claims;
• conduct audits and maintain business records;
• enforce agreements; and
• evaluate or complete a financing, merger, acquisition, reorganization, sale of assets, or similar transaction.

4. AI providers and model processing

AI-provider processing is central to the Service.

Blind model battles

When you start a battle, StudyArena selects multiple models and sends each selected model the information needed to generate an answer. This generally includes your prompt, supported attachments, relevant conversation history, system instructions, and tool results. Model names are hidden during the battle to reduce voting bias and are normally shown after you vote.

Because the models are selected before their names are revealed, you may not know the exact recipients when you submit content. Our model directory at https://studyarena.ai/models and provider directory at https://studyarena.ai/providers list the models and providers in the current pool.

Named and agentic chats

When you select a named model, your content is sent to the provider or API platform serving that model. If the model uses tools, the provider may also receive tool instructions, results, URLs, and other context needed to complete your request.

Current providers

Current production providers may include Anthropic, DeepSeek, Google, Mistral, OpenAI, Perplexity, xAI, and other providers identified in our provider directory at https://studyarena.ai/providers. Most model traffic passes through Cloudflare AI Gateway, which routes requests to providers and keeps request logs, before reaching the provider that serves the model.

The model developer, API platform, and infrastructure provider may be different entities. Our provider directory identifies, where reasonably possible:

• the provider that receives content from StudyArena;
• the models it serves;
• the provider's role; and
• links to applicable terms and privacy information.

Identifiers contained in User Content

We do not intentionally attach your StudyArena account name or email address to a model request unless required for a disclosed feature. However, we do not automatically guarantee that prompts and files are free of identifying information. If you put a name, school ID, face, address, medical detail, or other personal information inside User Content, that information will be included in the request sent to the selected provider.

Provider use and control

We access AI models through the providers' commercial APIs, whose terms generally restrict use of API content for training the provider's models. However, each provider processes requests under its own terms, and provider retention, human review, and model-improvement practices can differ. We do not control information after it has been delivered to a provider acting independently from A1Base, and we cannot guarantee any particular provider's practices. Review a provider's own privacy policy — linked from our provider directory — for how it handles API content, and do not submit anything you would not want a third company to hold.

5. How we disclose personal information

We may disclose personal information to the following recipients:

Service providers and contractors

Companies that support hosting, storage, content delivery, security, authentication, communications, customer support, monitoring, and other operations. Current infrastructure runs on Cloudflare services, including Workers, D1, R2, AI Gateway, and Cloudflare's cookieless Web Analytics. Email delivery providers are used to send sign-in links and service messages. If paid plans are offered, payments will be processed by Stripe, and your card details will go to Stripe rather than to our servers.

Authentication providers

Google, Discord, and any other sign-in provider you choose to connect. These providers may receive information needed to complete authentication and account linking.

AI providers and AI platforms

The AI providers, model developers, and API platforms described in Section 4. They receive User Content and related context needed to generate responses and provide AI features.

Other users and the public

If you create or share a link to a chat, battle, output, or artifact, anyone with access to that link may be able to view the associated content. Public or link-accessible content may be copied, cached, indexed, screenshotted, or redistributed by others.

Share links you created are revoked when your account is deleted, and you can revoke an individual share link yourself at any time. Anonymised text-only work retained after account deletion is de-linked from the account, but a retained prompt can still identify you if you included identifying information in the content itself. You may request removal of specific content or links by contacting us at privacy@a1base.com and providing the URL.

At your direction

We disclose information when you direct us to do so, such as when you choose a model, share a chat, connect an account, or use a feature that interacts with another service.

Professional advisers

Lawyers, auditors, accountants, insurers, bankers, and other professional advisers where reasonably necessary for their services.

Authorities and protection

Law enforcement, regulators, courts, government authorities, and relevant private parties when we believe disclosure is required or appropriate to comply with law, respond to lawful process, investigate abuse, protect safety, or establish and defend legal rights.

Business transactions

Potential or actual investors, lenders, purchasers, successors, advisers, or other participants in a financing, merger, acquisition, reorganization, insolvency, sale of assets, or similar transaction.

Aggregate and de-identified information

We may disclose statistics and information that has been aggregated or de-identified so that it cannot reasonably identify an individual. We will not attempt to re-identify information that we maintain as de-identified except to test whether our de-identification process works or as permitted by law.

6. Cookies, browser storage, and tracking choices

StudyArena uses cookies, local storage, and similar technologies for functions such as:

• authentication and session continuity;
• security and fraud prevention;
• rate limiting;
• remembering study-profile answers and preferences;
• onboarding and account synchronization; and
• service performance and diagnostics.

In practice this means: first-party session and authentication cookies set when you use or sign in to the Service; browser local storage holding your study-profile answers, onboarding state, and interface preferences on your device; and short-lived security and rate-limiting state. We use Cloudflare Web Analytics, which is cookieless and does not track individuals across sites.

We do not use third-party advertising cookies or third-party analytics trackers, and we do not use personal information for cross-context behavioral advertising. If this changes, we will update this Privacy Policy, provide any required notice, and obtain consent before setting non-essential technologies where the law requires it.

Third-party sign-in pages and other sites you visit may set their own cookies under their own policies.

Some browsers send "Do Not Track" signals. Because there is no universally accepted standard for these signals and we do not currently conduct cross-site tracking for targeted advertising, StudyArena does not currently respond to Do Not Track signals. Where applicable law requires us to recognize an opt-out preference signal, such as Global Privacy Control, we will process it as required.

7. Your choices

Account and profile

You may review or update available profile information through your account settings. You may disconnect a sign-in provider through that provider's settings, although this does not delete information already held by StudyArena.

Delete your account

You may delete your account through the account page or contact us for assistance. Account deletion is intended to remove or de-link your account record, authentication links, active sessions, study profile, and uploaded profile photo.

Votes may remain in aggregate model ratings, and certain saved chats may remain available at existing links after being de-linked from the account. You may request removal of particular content or links as described in Section 5. Provider copies and backups may be subject to separate retention periods described in Section 9.

Browser information

You may clear cookies and local storage through your browser. This may sign you out, remove profile answers stored on that device, or prevent features from working correctly.

Communications

You may unsubscribe from marketing emails by using the unsubscribe link or contacting us. You may continue to receive service, security, legal, and account communications.

Declining information

You may decline optional information. If you do not provide information required for a feature, such as a prompt for a model request or an identifier for account authentication, that feature may not be available.

8. Privacy rights and requests

Depending on where you live and subject to applicable exceptions, you may have the right to:

• know whether we process your personal information;
• request information about our collection, use, and disclosure practices;
• access or receive a copy of your personal information;
• correct inaccurate personal information;
• delete personal information;
• receive portable data in a usable format;
• restrict or object to certain processing;
• withdraw consent where processing is based on consent;
• opt out of a sale, targeted advertising, or certain profiling where applicable;
• appeal a denial of a privacy request; and
• exercise your rights without unlawful discrimination.

To make a request, contact:

• Email: privacy@a1base.com

We may ask for information reasonably necessary to understand and verify your request. We will use verification information only for verification, security, fraud prevention, and legal compliance.

Where permitted by law, an authorized agent may submit a request for you. We may require evidence of the agent's identity and authority and may confirm the request directly with you.

If you used StudyArena without an account, we may not be able to associate stored information with you. Providing a saved-chat URL, session identifier, or other relevant information may help us locate the requested content. We will not collect excessive information solely to identify otherwise unlinked data.

We will respond within the period required by applicable law. If we deny a request, we will explain the reason where required and provide appeal instructions when available.

9. Retention and deletion

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Service, maintaining rankings, meeting legal obligations, resolving disputes, preventing fraud, and enforcing agreements.

Our general retention practices are:

When information is no longer needed, we will delete it, de-identify it, or isolate it from further use until deletion is possible. De-identified information and aggregate model statistics may be retained for a longer period where they can no longer reasonably identify a person.

AI providers and other independent third parties may apply their own retention schedules to information they have received. We do not control those schedules; the providers' own policies, linked from our provider directory, describe them.

10. International processing and transfers

A1Base is based in the United States. StudyArena uses service providers and AI providers that may process information in the United States and other countries. A model developer may be headquartered in one country while the API platform serving that model processes the request in another.

Likely processing locations include the United States and the other countries where our infrastructure and AI providers operate. Some models in the pool are developed by companies headquartered outside the United States, including DeepSeek (China) and Mistral (France), and requests to those models may be processed in the developer's home country depending on the API platform serving them. Our provider directory provides more specific information where reasonably available.

Privacy laws in these countries may differ from those where you live. When applicable law requires a transfer safeguard, we may use adequacy decisions, contractual protections such as approved Standard Contractual Clauses, the UK Addendum or International Data Transfer Agreement, or another lawful transfer mechanism. You may contact us for information about the mechanism applicable to your information.

11. Security

We use administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These measures are selected based on the nature of the information and the risks involved.

These measures include encryption in transit (TLS), encryption at rest on our storage providers, access controls limiting who can reach production systems, managed secret storage for credentials and API keys, and passwordless authentication — sign-in works through a provider you already use or an emailed link, so there is no StudyArena password to lose.

No method of transmission or storage is completely secure. We cannot guarantee absolute security. You are responsible for protecting your account, device, sign-in-provider credentials, and shared-chat links.

If a security incident affects personal information, we will investigate and provide notifications as required by applicable law.

12. Children, minors, and students

Minimum age

StudyArena is intended for users who are at least 13 years old, or the higher minimum age required to use an online service in their location without verifiable parental consent. Users under the age of legal majority should use StudyArena only with the permission of a parent or legal guardian where required.

We do not knowingly collect personal information online from a child under 13 unless a legally valid parental-consent or school-authorization process and an appropriate supplemental children's notice are in place.

If you believe a child has provided personal information contrary to this section, contact us. We will investigate and delete or otherwise handle the information as required by law.

School use

If StudyArena is offered through a school, teacher, district, university, or other educational institution, a supplemental school notice and agreement may apply. Where A1Base processes education records on an institution's behalf, we will use that information only as authorized by the institution and applicable law, including contractual restrictions on use, disclosure, security, retention, and deletion.

School-authorized consent for a child will be used only where legally permitted and only for the school's authorized educational purpose. It will not authorize A1Base to use children's personal information for unrelated commercial purposes.

Removal rights for minors

A registered user under 18 may request removal of content they posted or made available through StudyArena by emailing us with the account information and URL needed to locate the content. Removal from StudyArena does not ensure complete removal from backups, search engines, caches, AI providers, or copies made by other people, although we will take the steps required by applicable law.

13. Notice to users in the EEA, UK, and Switzerland

This section applies when European data-protection law applies to our processing.

Controller

A1Base Inc. is the controller of personal information covered by this Privacy Policy unless a supplemental notice says otherwise.

• Privacy contact: privacy@a1base.com

Legal bases

We rely on one or more of the following legal bases:

Our legitimate interests include providing a reliable model-comparison service, understanding model quality, improving the Service, protecting users, preventing abuse, and defending legal rights. We balance those interests against the rights and interests of affected individuals, with particular care for children and sensitive information.

We do not use solely automated processing to make decisions about individuals that produce legal or similarly significant effects.

European rights

Subject to applicable conditions, you may request access, correction, deletion, restriction, objection, or portability; withdraw consent; and complain to the supervisory authority where you live or work or where an alleged infringement occurred. Withdrawing consent does not affect processing that occurred before withdrawal.

You are not generally required by law to provide personal information to StudyArena, but information such as a prompt is necessary for us to provide the requested AI response, and authentication information is necessary to create and maintain an account.

14. US state privacy notice

This section applies to residents of US states with privacy laws that apply to A1Base and the relevant processing.

California Notice at Collection

StudyArena may collect the following categories of personal information. The table describes current practices and practices during the 12 months before this Policy's effective date.

We collect these categories from users, devices and browsers, authentication providers, service providers, and User Content supplied by other people. We use them for the purposes described in Section 3 and retain them as described in Section 9.

Sale, sharing, and targeted advertising

We do not sell personal information for money, do not "share" personal information for cross-context behavioral advertising, and do not use personal information for targeted advertising.

Where AI providers process User Content solely to return the output requested by a user under appropriate contractual restrictions, we treat the disclosure as necessary to provide the Service or as made at the user's direction, as applicable. If a provider is permitted to use information for its own purposes and applicable law treats that disclosure as a sale or other opt-out processing, we will provide the required notice and opt-out method.

We do not knowingly sell or share the personal information of users under 16 without the affirmative authorization required by applicable law.

State rights

Depending on your state, you may have rights to know, access, correct, delete, or obtain a portable copy of personal information; opt out of sale, targeted advertising, or qualifying profiling; restrict certain sensitive-data processing; appeal a denied request; and exercise rights without discrimination.

You may exercise applicable rights using the methods in Section 8. Where required, we will recognize valid browser-based opt-out preference signals. If we deny an appeal, you may have the right to contact your state attorney general or privacy regulator.

15. Additional information for Australia

If the Australian Privacy Act 1988 applies to A1Base, this Privacy Policy is intended to describe the kinds of personal information we collect and hold, how we collect and use it, and the countries where recipients may process it.

You may request access to or correction of personal information or complain about our handling of personal information using the contact details in Section 17. Please provide enough detail for us to understand the issue. We will investigate and respond within a reasonable period.

If you are dissatisfied with our response, you may be entitled to complain to the Office of the Australian Information Commissioner at https://www.oaic.gov.au.

16. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, providers, data practices, or law. We will post the updated version and change the effective or last-updated date.

If a change materially affects how we use personal information already collected, we will provide additional notice through the Service, email, or another appropriate method before the change takes effect where required. We will obtain consent before a materially different use when applicable law requires it.

Earlier versions are available on request from privacy@a1base.com.

17. Contact us

Questions, complaints, and privacy requests may be sent to:

A1Base Inc. (United States)

Privacy requests: privacy@a1base.com General support: help@a1base.com

If your request concerns a child or a particular saved chat, please include enough information for us to locate the account or content, such as the relevant email address or chat URL. Do not send passwords or unnecessary sensitive documents.