Privacy Policy

1) What we collect

We only collect what is needed to run the app:

• Account: name and e-mail address when you create an account (sign-in is handled by Clerk, our authentication provider).
• Conversations: the text of your chats is saved on our servers so you can find your history on any device. Anonymous chats are linked to a session cookie in your browser.
• Photos you send: they are transmitted to Google's Gemini for analysis and are not stored on our servers.
• Usage counters: number of messages, tokens and images per month, used to apply your plan limits.
• Feedback: the display name, rating and text you choose to publish on the community wall — never your e-mail address.
• Messages to the teacher: name, e-mail and message content, used to reply to you (also forwarded to the teacher by e-mail via Mailgun).
• Technical data: your IP address is processed transiently for rate limiting and security; it is not used to identify you.

2) Why we collect it

• To run the app: generate answers, keep your history, correct exercises.
• To manage your plan, trial and subscriptions.
• To reply to your messages and support requests.
• To improve the service (anonymous usage statistics).
• To comply with the law when required.

3) Legal basis

Processing is based on: the contract (running the app for you), consent (optional features), legitimate interest (security and improvement), and legal obligation where applicable.

4) Who processes the data

We use trusted service providers, each limited to what it needs:

• Clerk — sign-in and account management.
• Google (Gemini) — generates the AI answers and analyses the images you send.
• MongoDB Atlas — stores conversations and usage counters.
• Render — hosts the backend API.
• Netlify — hosts the administration console.
• Mailgun — sends the notification e-mails to the teacher.
• Google Tag Manager / Analytics — anonymous visit statistics (no conversation content, no e-mail address). Only a pseudonymous id is sent, and only if you allow the analytics cookies.

5) Security

• Encrypted transport (HTTPS/TLS) on every connection.
• We never store your password: sign-in is managed by Clerk.
• Rate limiting and upload caps against abuse.
• The administration console requires two independent factors.

6) Retention and deletion

Your data is kept while your account is active. On request, we delete your account data (conversations, feedback, counters) within 72 hours and confirm it to you.

7) Your rights

• Access: ask us for a copy of your data.
• Correction: edit your feedback directly; ask us for anything else.
• Deletion: ask us to delete your account and data.
• Objection: object to the processing of your data.

8) Cookies and local storage

You choose what we are allowed to store. The banner lets you accept everything, refuse the optional cookies, or pick category by category. Your choice is kept on your device and can be changed at any time from the "Cookie settings" link in the footer.

• Necessary cookies (always on): sign-in (Clerk) and the anonymous-chat session cookie. They are what keeps you signed in and the app working.
• Analytics cookies (optional): Google Tag Manager / Analytics, for anonymous visit statistics. They are only loaded if you allow them.
• Advertising cookies (optional): only on the free plan, which is funded by the ads. A paying plan never serves them.
• Preference storage (optional, localStorage): your language, theme, class and model choice.
• Refusing everything keeps the site working on the necessary cookies only; you can also limit the app to the free resources page.

9) Minors

Many of our users are students and may be minors. We collect the strict minimum and encourage parents and teachers to accompany younger users. A parent can contact us at any time to access or delete a minor's data.

10) Changes

We may update this policy. Material changes are announced in the app and on this page with a new date. We recommend checking it from time to time.