Privacy

What we collect

• Your account: your name, email address, a password (stored only as a one-way hash) or the sign-in provider you used (Google, Apple, Microsoft, GitHub, LinkedIn or Facebook), your time zone, whether you're male or female if you tell us, and your settings.
• What you learn with: the pursuits you set up, sources you add (files, links, pasted text), your conversations with the Assistant, your answers, any voice recordings you make, and the progress we work out from them.
• Billing: your plan and payment history. Card details go straight to Stripe and we never see them.
• Technical: a sign-in cookie, the push-notification address your browser gives us if you turn notifications on, and your IP address, which we use briefly in memory to stop abuse and do not store.

How we use it

Only to run Autodemia for you: to answer your questions, build your concept map, grade your work, remind you to review, send the emails you asked for, bill you, and keep the service secure. If you tell us you're male, Marv may invite you once, inside the app, to Men of Hunger, a separate community for men; we share nothing with it unless you sign up there yourself. We do not sell your information, show ads, or use it to train AI models. There are no advertising or analytics trackers on the site.

Who processes it for us

These companies handle data on our behalf, under contracts that limit them to providing their service to us:

• Anthropic: the AI that answers questions and reads sources. Anthropic does not train on this data.
• Deepgram: speech to text and text to speech, only when you use voice.
• JEV (typesafe.ai): small, structured AI decisions inside the app.
• Render: hosting and our database.
• Cloudflare: network delivery and file storage.
• Resend: email delivery.
• Stripe: payments.
• WorkOS: single sign-on, only for organizations that turn it on.
• Apple, Google and Mozilla: delivering push notifications, if you turn them on.

What other people can see

• Guides (a parent, teacher or organization you joined) see your progress on the pursuits they set up, plus your name and email. They do not see your conversations.
• People you learn with in a "learn together" group see your name and group activity.
• Community posts and replies are visible to other signed-in members.
• Otherwise we share information only if the law requires it, to protect people from harm, or as part of a sale of the business, in which case this policy would still apply to it.

How long we keep it

We keep your account and learning data while your account is open. When you delete a source, pursuit or profile, it is removed straight away, and from backups within 30 days. To close your account and delete everything, email hello@autodemia.io and we will do it within 30 days. We keep records of payments for as long as tax law requires, and cost records that no longer identify you.

Your choices and rights

You can see and change most of your information in the app, turn emails and notifications off in your settings, and ask us for a copy of your data, a correction, or deletion by emailing hello@autodemia.io. Depending on where you live (for example the EU, UK or California) you may have further rights, including to object or to complain to a regulator. We will not treat you differently for using them.

Security

Everything travels over HTTPS. Passwords are hashed, API keys you connect are encrypted, and access to production systems is limited to the people who run Autodemia. No system is perfectly secure, so if we ever learn of a breach that affects you, we will tell you promptly.

Children under 13

Children under 13 can use Autodemia only through a child profile that a parent or legal guardian adds to their own account. Children cannot sign up on their own.

• Consent first: when a parent adds a child profile we email them this notice with a link. The profile does not work until the parent taps it, and we email again a day later to confirm. If the parent does not confirm within 30 days, the profile is deleted.
• What we collect from a child: the first name the parent gives us, and what the child types, says or uploads while learning, along with their progress. We do not ask a child for an email address, phone number, address, location or photo.
• How it is used: only to run Autodemia for the child, through the providers listed above (including Anthropic for AI answers and, if voice is used, Deepgram), none of whom may use it for anything else. No ads, no selling, no AI training.
• What children cannot do: post in the community, join "learn together" groups, or join classes from a link. A parent can add them to a class.
• Parents' rights: a parent can see everything in the profile by switching to it, stop it at any time, and delete it with everything in it from You > Child profiles, or by emailing hello@autodemia.io. A parent can also refuse further collection while keeping what is there by simply not using the profile.
• Retention: a child profile that has not been used for a year is deleted, after a warning email to the parent 30 days before.

Questions about a child's information: hello@autodemia.io, or JP McGlone LLC (d/b/a Autodemia), PO Box 34, Cloverdale, VA 24077, USA.

Changes and contact

If we change this policy in a way that matters, we will email you before it takes effect, and we will ask parents again before using a child's information in a new way. Questions or requests: hello@autodemia.io, or by mail to JP McGlone LLC (d/b/a Autodemia), PO Box 34, Cloverdale, VA 24077, USA.