We take the safety of students' data seriously. Our main protection is collecting very little.
Data minimisation
No accounts, names, emails or phone numbers. The only identifier is a random UUID kept in the iPhone Keychain (this-device-only).
History, age group and settings stay on your device.
Photos are not stored on our server. Cached answers hold no photo and no device ID, only a SHA-256 hash key, and expire after 180 days.
Encryption
In transit: all traffic between the app, Supabase, Anthropic, Google AdMob and Firebase uses HTTPS/TLS.
At rest: the Supabase database is encrypted at rest by the provider.
Locked database
Row Level Security (RLS) is enabled on every app table with a deny-all policy for the public `anon` and `authenticated` roles, and all their table privileges are revoked.
Only our server functions, running with the service role, can read or write. The service-role key never leaves the server.
Database functions run with a fixed empty `search_path` and are executable by the service role only.
Keys kept server-side
The Anthropic (Claude) API key is stored as a Supabase Edge Function secret. It is never shipped in the app.
The app contains only Supabase's public (publishable) key, which grants no direct table access.
Limits and abuse protection
Every request must carry our public key and a valid device UUID.
10 free solves per day; rewarded ads add +3, at most 5 times a day and at least 20 seconds apart.
Images up to 2 MB and OCR text up to 4,000 characters; AI requests time out after 45 seconds.
Failed or refused answers don't use up quota; atomic database locks prevent double counting.
Child safety: the AI refuses non-educational or unsafe content and ignores personal data and instructions hidden in images.
Deletion
Settings → Delete my account & data erases your server records, wipes local history and resets the anonymous ID.
Email ali5250111@gmail.com with the subject "Security". Please give us 30 days to fix the issue before you disclose it publicly. We do not take legal action against good-faith research.