Privacy Policy

• No accounts.Students enter a class code. That's the whole sign-up.
• Optional nickname + PIN. To continue work across devices, a student can pick a made-up nickname and a 4-digit PIN. The app instructs students to never use their real name. PINs are stored hashed.
• Project work and mentor chats. Worksheet answers and conversations with Dr. Curiosity are stored so the project survives a refresh — tied to the nickname or, for code-only students, kept in their own browser.
• A random device cookie. Code-only students get a random identifier cookie so their seat and daily limits work. It contains no personal information.
• Usage counts. Per-day message counts and AI cost per seat, shown to the teacher and used for fair-use limits.

• Account: your email address, and your name and avatar if you sign in with Google. Magic-link emails come from our mail provider.
• Billing: what you bought, when, and for how much. Card details go directly to Stripe and never touch our servers.
• School membership: which schools you belong to and your role in them, plus invite emails you send colleagues.

The service is intentionally designed so that we do not collect personal information from children: no student accounts, no email addresses, no real names, no photos, no location. Nicknames are student-chosen and explicitly instructed to be made up; chats are about science projects and students are told not to share personal details in them. Access happens only through a class code issued by a teacher or parent, who acts as the gatekeeper and can remove any student, reset PINs, lock joins, or pause the room at any time. If you believe a child has nonetheless submitted personal information, email us and we will delete it.

To run the service: signing you in, running rooms, metering AI usage against credits, preventing abuse, and showing teachers their own class's activity. That's it. We do not run ads, do not sell or rent data, and do not use advertising or cross-site analytics trackers. The only cookies are functional: your sign-in session and the student room session.

• Anthropic— mentor chats are sent to Anthropic's API to generate Dr. Curiosity's replies. Under Anthropic's commercial API terms, this data is not used to train their models.
• Stripe — payment processing, receipts, and (as merchant of record) sales tax handling.
• Our hosting and email providers — running the servers and database, and delivering sign-in and invite emails.

Each processor receives only what its job requires, and none may use the data for their own purposes.

• Delete your account yourself: Dashboard → Your account → Delete. Your name and email are permanently removed, sign-in is severed everywhere, and personal workspaces only you belong to are deleted with all their rooms and student data.
• What we keep after deletion: billing records (purchases, amounts, refunds), anonymized — retained because tax, accounting, and fraud-prevention law requires it. A minimal audit entry records that the deletion happened.
• Student data:deleting a student, room, or school permanently deletes the student records under it. Work kept in a code-only student's own browser belongs to that browser — clearing it, or leaving the room, is in the student's hands.
• An expired (unrenewed) subscription deletes nothing — data waits for renewal until you delete it.

Traffic is encrypted with HTTPS, student sessions use signed httpOnly cookies, PINs are stored hashed, and access to classroom data is gated by school roles. No system is perfectly secure — if we learn of a breach affecting your data, we will notify affected account holders promptly.

For school customers, we act at the school's direction as a service provider. The records we hold for a class are minimal — nicknames, project work, usage counts — and the school controls them: its staff can view, export (print), and delete them. We use them only to provide the service.

You can access what we hold about you from your dashboard, correct your account email by signing in with the corrected one, and delete your account yourself. For anything else — a copy of your data, a question, a complaint, or a child-data concern — email us (address below) and we'll respond within 30 days. If we change this policy materially, the "Last updated" date changes and significant changes will be flagged on the dashboard. See also the Terms of Service.