Legal

Privacy Policy

We keep this simple: we collect only what we need to run openstem, we never sell your data, and you stay in control of it.

Last updated: July 20, 2026

Who we are

openstem is operated by mkappworks (“openstem”, “we”, “us”), the controller responsible for your personal data. For any privacy question or to exercise your rights, contact us at openstem.app@gmail.com.

Information we collect

  • Account information: your name and email address when you sign up, or the basic profile details shared by Google/GitHub if you use social sign-in.
  • Learning data: the collections, flashcards, notes, sketches, flowcharts, plots, molecules and quizzes you create, and your group memberships.
  • Usage data: aggregated, privacy-masked analytics about how features are used, so we can improve the product.

Legal bases for processing

Where the EU or UK GDPR applies, we rely on the following legal bases:

  • Performance of a contract: to create your account and provide the service you ask for.
  • Legitimate interests: to keep the service secure, prevent abuse, and improve the product, balanced against your rights.
  • Consent: for product analytics where required by ePrivacy rules; you can withdraw consent at any time.

How we share information

We do not sell your personal data. We share it only with service providers who process it on our behalf to operate openstem, for example hosting (such as Hetzner), database, email delivery, and product analytics (such as PostHog), and only to the extent needed to provide the service, or where required by law.

Data retention

We keep your data for as long as your account is active. When you delete your account, we remove your personal data immediately, except where we are required to retain it for legal reasons.

Your rights

Depending on where you live, you may have the right to access, correct, export, delete, or restrict the processing of your personal data, to object to certain processing, and to withdraw consent. You can export your data or delete your account at any time from your account settings, or contact us at openstem.app@gmail.com.

Cookies and local storage

We use a small number of essential cookies and local-storage entries to keep you signed in and to remember your privacy choice (the oa_consent cookie). Analytics storage is set only after you consent where consent is required. Visitors in the EU and UK are asked first. We do not use advertising cookies.

California privacy rights

We do not sell or “share” personal information as those terms are defined under the California Consumer Privacy Act. California residents have the right to know, delete, and correct their personal information and to opt out of any sale or sharing, and we will not discriminate against you for exercising these rights. To make a request, contact us at openstem.app@gmail.com.

Children

openstem is not directed to children under 16, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will update the date above and, where appropriate, notify you.

Contact us

Questions about this policy? Reach out to us here:

We use privacy-friendly product analytics (no session recording, PII masked) to improve OpenStem. Load analytics? Privacy Policy