Privacy Policy

1. Summary

• We collect what we need to teach you: your account details, your learning activity and your conversations with the tutor.
• Your tutor messages are sent to Anthropic, the company that provides the AI model, so that it can produce replies.
• We do not sell your information, and we do not show ads.
• We do not use cookies.
• You can ask to see, correct, export or delete your information at any time.

2. Information we collect

Your card details go directly to Stripe. We never receive or store your full card number.

Browser storage

We do not set cookies. We keep up to three items in your browser's local storage: a token that keeps you signed in, your light or dark theme choice, and, until you sign up or log in, how you first found us. That last item is sent to us when you create an account, and removed from your browser when you sign up or log in. Stripe's checkout page and Google's sign-in page are run by those companies and may set their own cookies.

3. How we use your information

• To provide the Service: to run your account, lessons, reviews and tutor.
• To personalise lessons: the tutor is told your pathway, your current lesson, your goal and your experience level. It is not told your name or email address.
• To bill you: to start your trial, charge your subscription and handle refunds.
• To email you: to send service messages such as trial and review reminders. We send marketing email only if you agree, and you can unsubscribe at any time.
• To keep the Service safe: to enforce usage limits and our Acceptable Use Policy, and to prevent fraud.
• To improve the Service: to study how lessons and reviews perform, and which channels bring new learners, using combined statistics where we can. We do not use cross-site identifiers or share this with advertisers.
• To follow the law: to keep tax records and answer lawful requests.

We do not make decisions that have legal or similarly significant effects on you by automated means alone. The placement task only chooses which lesson you start with.

4. How the AI tutor handles your information

• Your tutor messages, the code you submit, your goal, your experience level and details of your current lesson are sent to Anthropic, PBC, in the United States.
• Anthropic uses this information to produce the tutor's replies, to grade placement tasks and to write review cards for us.
• Anthropic acts as our service provider. By default it does not use this information to train its AI models. It may keep the information for a limited time for safety and abuse monitoring, under its own policies.
• The tutor's replies are produced by AI and may be wrong.
• Please do not put passwords, payment details, health information or other people's personal information into tutor chats.

5. Who we share information with

We share information only with the companies that help us run the Service.

We may also share information when the law requires it, to protect our rights or the safety of others, or as part of a merger or sale of our business. We do not sell your personal information, and we do not share it for targeted advertising.

6. Google user data

• Sign-in: if you sign in with Google, we receive your Google account ID, email address and name. We use them only to create your account and sign you in.
• Calendar: if you connect Google Calendar, we ask for permission to manage calendar events. We use it only to add, update and remove Regradia review events. We do not read or use your other events.
• Limits on use: we do not use Google user data for advertising, we do not sell it, we do not send it to Anthropic, and we do not use it to train AI models.
• Disconnecting: you can disconnect Google Calendar from your Profile page. We then remove upcoming review events, cancel our access at Google and delete the stored tokens.

Regradia's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. How long we keep information

• Account, learning and tutor information: for as long as your account is open.
• After you ask us to delete your account: we delete this information within 30 days. Copies in backups are removed on our hosting provider's backup schedule.
• Billing records: for as long as tax and accounting laws require, which can be up to seven years.
• Server logs: for a limited period set by our hosting provider.

8. Your choices and rights

You can ask us to:

• show you the personal information we hold about you
• correct it. You can change your name and time zone yourself on the Profile page.
• delete your account and information
• send you a copy of your information in a common format
• stop or limit a particular use of it

Email info@regradia.com to make a request. We may ask you to confirm your identity, and we reply within 30 days. We will not treat you differently for using these rights.

If you live in the European Economic Area or the United Kingdom: we rely on these legal grounds. We use your information to perform our contract with you, which covers running the Service and billing. We rely on our legitimate interests for security and for improving the Service. We rely on your consent for Google Calendar and marketing email, and you can withdraw it at any time. We keep billing records to meet legal obligations. You may also complain to your local data protection authority.

If you live in California or another US state with a privacy law: you have the right to know what we collect, to correct it and to delete it. We do not sell personal information or share it for cross-context behavioural advertising.

9. Children and teenagers

• The Service is not for children under 12. If we learn that we hold information about a child under 12, we delete it.
• If you are between 13 and 17, you need a parent's or guardian's permission to use the Service. A parent or guardian can ask us to show or delete a teenager's information by emailing info@regradia.com.

Children aged 12

US law gives extra protection to children under 13. For a 12-year-old we do the following.

• Consent first: before we collect any personal information from the child, we ask only for a parent's or guardian's email address. We send that adult a notice explaining this policy and ask for verified consent.
• No account without consent: if the parent or guardian does not give verified consent, we do not create an account, and we delete the email address.
• What we collect: with consent, we collect only the information listed in section 2. We do not ask for more than the child needs to take part.
• Who receives it: the child's information goes to Anthropic, our hosting provider and our email provider, as described in section 5. Stripe receives the paying adult's details, not the child's.
• No public sharing and no ads: a child cannot make personal information public through the Service, and we do not use a child's information for advertising.
• Parents' rights: a parent or guardian can ask to see the child's information, have it deleted, or stop us collecting more. Email info@regradia.com. We will confirm the adult's identity first.

The operator responsible for children's information is Regradia Inc., [Postal address], info@regradia.com.

10. Where your information is processed

We and our service providers process information in the United States. If you live elsewhere, your information is transferred to the United States, where privacy laws may differ from those in your country. Where the law requires it, we use approved contract terms with our providers to protect transferred information.

11. Security

We store passwords only in scrambled form, encrypt the Google tokens we hold, protect information in transit with encryption, and limit who can access our systems. No system is completely secure. If a breach affects your information, we will tell you as the law requires.

12. Changes to this policy

We may update this policy. If a change is significant, we will email you before it takes effect. The effective date at the top shows when the policy last changed.

13. Contact