Privacy Policy
Draft: pending legal review before public launch.
What we collect
Account email and password (stored hashed), student first names, session conversations, practice results, and usage counts. Voice recordings are transcribed and then discarded; we keep the text, not the audio.
Why
Solely to run the tutoring: memory across sessions, progress tracking, parent visibility, safety monitoring, and fair usage limits. We do not sell or rent learner data. Ever.
Children
Children's profiles are created and controlled by a parent or guardian, who can review transcripts and flagged moments and can delete everything. Safety filters run on every message; serious concerns are notified to the guardian.
AI processing
Conversations are processed by AI models we host ourselves. Where a third-party AI service is used for safety classification, only the text needed for that check is sent, and it is credited on our credits page.
Your rights
Access, correction, export, and full deletion: the “Delete my account and all data” button on your account page erases the account, every student profile, all conversations, progress, and safety records, immediately and irreversibly.
Security
Passwords are bcrypt-hashed; access tokens are stored hashed and expire after 30 days; password reset links live for one hour. Report concerns to the contact address on our site.