Privacy

Information we handle

Depending on the features you use, this can include account identity, profile and privacy choices, learning activity, saved resources, answers and progress, friend relationships, messages, uploads, security records and support communications.

Why we use it

We use this information to operate accounts, resume learning, provide feedback, protect users and the service, enforce permissions, answer support requests and improve reliability. We do not sell student personal information.

Service providers

Supabase provides authentication, database and storage services. Cloudflare Turnstile helps prevent automated abuse. When an AI feature or image-moderation feature is deliberately used, the minimum necessary request may be sent to OpenAI. Provider access is limited to delivering those services.

Visibility and control

Profile, friend, presence and learning-sharing controls are available in Settings. Some information must remain private for safety. You can request access, correction or deletion; legal, security and abuse-prevention records may need to be retained where required.

Product analytics

When enabled, product analytics records page visits and learning actions, approximate access country, device category and referral category. A browser identifier lasts up to 30 days. Activity from a verified account can be linked to that account to measure learning and return visits. Raw IP addresses, search text, answers and messages are not stored in analytics events.

We respect Global Privacy Control, Do Not Track and the choice below. Opting out does not disable account, learning-progress, security or support records needed to provide the service.

For signed-in students, we also estimate foreground browsing time, pausing after two minutes without interaction. Account-linked daily totals use UTC dates and are available to authorised administrators; they do not record page content or exact reading behaviour. These totals are kept until account deletion. The same analytics opt-out applies, and earlier unrecorded time cannot be reconstructed.

Signed-in account presence records the latest observed active visit, independently of optional analytics. We also keep the latest reported analytics choice and collection receipt or failure status to identify missing data. These account records contain no page URLs or raw IP addresses and are removed when the account is deleted. Opting out stops new analytics time and country collection, but not account presence or the record of that choice.

Contact

For a privacy request, use Contact. Do not send passwords, one-time codes or identity documents through ordinary email.