Security

Our approach

Tetrad is being built toward strong privacy and security standards. We do not claim features that are not yet implemented. This page describes our current direction and honest limitations.

Authentication

Sign-in is handled through standard authentication infrastructure (Supabase when configured). Passwords are not stored in plain text by Tetrad. New passwords must be at least 10 characters and include an uppercase letter, a lowercase letter, and a number. Where enabled, you can also sign in with Google — Tetrad never sees your Google password.

Data storage

• User uploads and generated notebooks are stored in protected database and storage systems
• API keys for AI generation are kept server-side and are not exposed in the browser
• Private notebooks are tied to authenticated accounts where auth is enabled

What we do not claim

• We do not claim military-grade or end-to-end encryption unless explicitly implemented and documented
• We do not guarantee that AI processing occurs entirely on your device in hosted mode
• Demo/guest mode may use local or simplified storage — see in-app behavior

Your role

Do not upload material you do not have the right to use. Review AI outputs for accuracy. Use delete controls to remove material you no longer need.

From Settings you can update your display name, change your email or password, download a JSON export of your study data, delete all of your study data, and permanently delete your account (with typed confirmation in Settings → Danger zone). Plan, billing, and student-discount fields are managed by Tetrad and cannot be edited from your account — this prevents self-upgrades to Premium.

Reporting issues

Security concerns: tetrad.vg@gmail.com