Privacy Policy

Who we are

EduZen AI is operated by Linkintel, Inc., which is the data controller for the personal data described here. This policy explains what we collect when you use EduZen AI, why, who else sees it, and what you can tell us to do about it. It applies to the website, the app and our emails.

For anything on this page, write to [email protected].

What we collect

Your account

Your email address, your name if you give one, your chosen language and time zone, and — if you sign in with Google — your Google account identifier and profile picture. If you use Sign in with Apple in the iPhone app, we store your Apple account identifier, the name you share, and your verified email address (which may be an Apple private relay address). If you set a password we store a one-way hash of it, never the password itself.

What you study

The material and work the app exists to hold: files you upload, notes you write or generate, folders, audio you record and its transcript, lessons and the steps in them, quizzes and flashcards, your answers and marks, your study plan and sessions, the gaps we name for you, and your conversations with the voice tutor.

When you ask to change a study plan, we save your written feedback with the successful change. We use it to adapt that goal’s future plans and lessons and to count your monthly plan changes. This is a saved preference, not a test result or AI model training. It is removed when your account is deleted.

During a saved lesson, this includes pasted source text, unfinished question and answer drafts, your reading position, answered and skipped checks, and the progress of practice attached to the lesson. We save these with your account so you can continue on another device. Earlier study runs and their results stay available when you choose to study the lesson again.

Your onboarding answers

What you tell us when you set up — your subject, your exam date, how much time you have, where you feel you are starting from. If you answer before you make an account, those answers are kept against a random identifier your browser generates, and the account claims them when you sign up or sign in to an unfinished account, including with Google. This includes your starting topic, what you want help with, and how you would like the tutor to explain things. We use these as preferences you shared, not as a test of your ability.

Usage and metering

How much storage you are using and, on Pro, how many voice minutes you have spent in your current allowance period, plus taught lessons and AI-created quiz or flashcard sets in the last 24 hours when those Free allowances apply, and successful study-plan changes in the current calendar month. Also your streak, your study days and when you last studied, because the app shows them back to you.

Study reminders

We save your reminder choice, time, study days and timezone with your account. The iPhone app asks permission before scheduling local study notifications. Device permission is separate from your account preference. Reminder text contains no study material. Turning reminders off removes pending reminders on that iPhone; other devices update when the app next opens.

Payment

For Stripe subscriptions, we store your Stripe customer identifier, plan and status; you give card details directly to Stripe. For Uzcard/Humo payments, our server securely forwards your card number, expiry and SMS verification code to Paylov. We do not store full card numbers, expiry dates or SMS codes. With your subscription consent, Paylov saves the card for renewals. We retain its provider reference, last four digits, card network, your consent date and terms version, payment amount and status, masked SMS destination and billing dates. These let us renew your subscription and resolve payment problems. For iPhone purchases, Apple handles payment. We retain verified transaction and product identifiers, billing dates, renewal and revocation status, and the EduZen account identifier attached to the purchase so Pro works across your devices. Apple payment credentials never reach us.

How the app is used

So we can tell which parts of EduZen AI work and which are failing, our own server records a short line each time something meaningful happens — a lesson taught, a file brought in, a set of flashcards made, a request that was refused and the reason it was. Lesson events also record whether saved work reopened and the bounded time to the next study action, such as reading another beat or answering. Each line holds the name of the thing that happened, whether it worked, and your account. It never holds what you wrote: not the question you asked, not the title of your note, not a file name. These lines are deleted after six months.

Which link brought you here

The first time your browser opens EduZen AI we record the campaign parameters that were already in the address bar (the utm_ values on a link we shared), the site that linked to you — youtube.com, not the page — and which of our pages you landed on. It tells us which of our own posts and ads reach people. It is recorded once, by our own server, against the same random identifier your browser already generates for onboarding, and the account claims it when you sign up. This first-party record itself sets no cookie and does not rely on Google Analytics.

Creator referrals and program records

If your first visit comes through an EduZen creator link, we may associate your signup and first paid subscription invoice with that referral for program reporting. The record keeps the original creator, campaign and market. Creators do not receive your account details. Creator program participants also have separate profile, content review, earnings and payout records, described in the Creator privacy information.

Website visits and engagement

We use Google Analytics 4 to understand visits and how people move through the website and app. Its default measurement includes page views, session statistics, approximate location, and browser and device information. Google uses the IP address during collection, including to derive approximate location; its handling then depends on the visitor’s region. The tag may set first-party analytics cookies such as _ga to distinguish a browser and session.

We do not send Google Analytics your name, email, account ID, questions, notes, file names, recordings, transcripts, or lesson content. Google Signals and advertising personalization are disabled in our tag. This browser-level measurement is separate from our own server’s feature and first-touch records above.

Optional Meta advertising measurement is a separate choice, described in Advertising measurement and your choice.

Technical

Our servers log ordinary request information: IP address, browser and device type, the page or endpoint requested, and the time. We use it to keep the service up, find bugs and stop abuse.

When you contact us

Your name, email address, subject and the message you send through our contact form. The form keeps short-lived one-way hashes derived from the address, IP address and submission to limit repeated and duplicate messages; it stores no copy in the app database. The queued email passes temporarily through Redis on its way to the support inbox.

Recordings and the microphone

Your browser asks before it ever opens the microphone, and it only opens when you start a recording or a voice conversation. Nothing is listened to in the background.

When you record, the audio is sent to our servers and on to the speech model that turns it into text. The transcript is saved to your note so you can read what was actually said, and the recording itself is kept in your library until you delete it. A voice conversation with the tutor is streamed through our API rather than from your browser straight to a model provider, so no provider credential and no tool access ever enters the page.

When you ask Wolfie for help, the current EduZen page can be shared with the tutor as visible text, selected passages, control states and study drafts, alongside your saved study material. This page view is read on demand, is not saved as a screenshot or page history, and excludes hidden content, password fields and payment credentials. Anything you discuss in the reply follows the conversation retention described below.

The words of a conversation with Wolfie are kept, as text, so the next call in it can pick up where you left off; the audio of the conversation is not kept. Each conversation is listed in the Wolfie panel and you can delete it there, which removes its words. The record that a call happened, when, and which actions it took stays, for safety.

Recording other people is your responsibility: check that you are allowed to where you are.

How we use it

We use what we collect to:

• run the app — explain topics, build plans, make notes, mark practice;
• keep your account working, and let you sign back in;
• answer a message you send to support;
• send you the emails the service needs: confirming your address, resetting a password, receipts, and study reminders if you turn them on;
• meter storage and voice minutes, and take payment for Pro;
• keep the service secure and available — spotting abuse, debugging failures, preventing fraud;
• understand aggregate visits and movement through the service;
• with your permission, measure our ads and help show relevant ads;
• meet our legal and tax obligations.

We do not use your study material to build advertising profiles or make decisions about you with legal effects by automated means.

Your material is not training data

Your files, notes, recordings, transcripts and conversations are never used to train, fine-tune or improve any AI model — ours or anyone else’s. The model providers we send requests to process the content to answer that request and are contractually prohibited from training on it.

What we do look at is counts: how many lessons were started, which calls failed, how long something took. Aggregate numbers with nobody in them.

Who else sees it

We do not sell your personal data for money. We use the companies below to provide the service and measure its use. If you allow optional advertising measurement, Meta also receives the browser and event information described in the advertising section.

Wolfie is an AI tutor, so answering you means sending what you give it to the third-party AI providers below: your questions, the notes, files or photos you choose, your answers, goals, language preferences and relevant learning history, and, when you use voice, your audio and conversation context. This is part of using EduZen AI, and you agree to it when you create your account or sign in. There is no separate switch, because without it there is no tutor. If you no longer want this, you can delete your account at any time.

We will also disclose data if the law genuinely requires it, to protect someone’s safety, or to enforce our Terms. If our business is sold or merged, your data may transfer with it — you will be told, and this policy keeps applying until you are given a new one.

Advertising measurement and your choice

Where enabled on our website, the Meta Pixel helps us measure whether our ads lead to visits, new accounts and checkout starts, and helps us show relevant ads. It loads only after you choose to allow advertising measurement. Declining does not affect access to the service. This choice is separate from Google Analytics and our own product and referral records.

We send three types of events: a visit to a permitted page, a successful new-account registration, and a successfully created Stripe checkout. Measurement is limited to selected public, sign-in and onboarding pages with permitted addresses. It does not run in your study workspace, account settings, admin pages or account-recovery pages. We do not send purchase events or payment amounts through this integration.

Our event calls contain no custom name, email address, account ID, note, file, question, answer, transcript, learning difficulty or other study-material fields. Meta’s browser code still receives technical information such as your IP address, browser and device information, the page address and referrer, and may use cookies such as _fbp and _fbc and ad-click identifiers. These identifiers and events can be linked to you or your activity by Meta; this is not anonymous measurement.

Use Advertising preferences below or in the website footer to allow or decline. We remember the choice in this browser for up to 180 days. Declining stops further optional Meta measurement and attempts to clear its first-party cookies. It does not delete information Meta already received. We honor Global Privacy Control as a refusal of this optional measurement. Your choice applies to this browser; make it separately on other browsers or devices.

Cookies and browser storage

Google Analytics may set first-party analytics cookies including_ga and _ga_* to distinguish visitors and sessions. We use those cookies for aggregate service measurement, not advertising. You can block or clear them using your browser controls. Our own feature and first-touch records are separate: the latter sets no cookie, and neither depends on Google Analytics.

If you allow Meta advertising measurement, its browser code may set advertising cookies such as _fbp and _fbc. Your allow/decline choice is stored separately in local browser storage; it does not control Google Analytics cookies.

Cross-domain sign-in with the creator portal uses host-only, HttpOnly access and rotating refresh cookies and a short-lived, single-use sign-in code. Signing out revokes that browser session.

The app also keeps some information in your browser’s own storage:

• your sign-in token, which is what keeps you signed in;
• preferences — light or dark, quiz sounds, where you left a panel divider or the voice window, whether its conversation text is unfolded, whether the floating Wolfie is hidden, and your selected checkout country and payment method;
• recovery copies of unfinished lesson drafts, pasted material, reading position and practice answers, so a reload or a failed save does not immediately lose your work. Saved lesson state is also sent to your account on our servers for continuation across devices.

Cloudflare provides an approximate country from your connection’s IP address. We use it to suggest a language and preselect a checkout country when you have not chosen one. You can change the country; your saved choice takes priority and does not change your app language.

Signing out clears the token. Clearing your browser storage clears the rest. Clearing a local recovery copy does not delete lesson state already saved with your account. Work that has not synced is available only on the device that holds its recovery copy.

Our legal bases (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we rely on these bases under the GDPR:

• Performance of a contract — running your account and everything you asked the app to do.
• Legitimate interests — keeping the service secure and reliable, preventing abuse and fraud, and understanding aggregate usage. We have weighed these against your rights.
• Consent — the microphone, optional emails such as study reminders, and optional Meta advertising measurement. You can withdraw the relevant choice in Settings, your browser, or Advertising preferences for Meta measurement.
• Legal obligation — tax and accounting records for payments.

Where your data is

Linkintel, Inc. is a company in the United States, and our providers process data there. If you are outside the United States, using EduZen AI means your data is transferred there. For transfers out of the EEA or the UK we rely on the European Commission’s Standard Contractual Clauses (with the UK Addendum where relevant), which our providers have signed.

How long we keep it

Your material stays for as long as your account does — the point of it is that your notes are there next term.

• Delete a note, a file or a folder and it goes, including from storage.
• Request deletion in iPhone Settings after confirming your identity, or contact support. In-app deletion ends account access immediately. A background job cancels web subscriptions and removes study records and account files, retrying service failures. A short delay lets work already in progress finish before files are erased. We retain the minimum account key and payment or creator contract records needed for billing, settlement and required recordkeeping. Apple subscriptions must be canceled separately with Apple. Copies in routine encrypted backups age out within 30 days.
• Sign-in links and password-reset links are stored only as a hash, are single-use, and expire in hours.
• Server logs are kept for a short period for security and debugging.
• The lines recording how the app is used are deleted after six months. Nothing reads them further back than that.
• Which link brought your browser here is kept for as long as the account, and goes with it when the account goes.
• Google Analytics data follows the retention controls configured in that service. Clearing its cookies stops this browser from carrying the same analytics identifier forward, but does not delete reports already produced; ask us if you want us to handle a data-rights request involving Google Analytics.
• Your advertising choice expires after 180 days. Information already received by Meta follows its retention practices; withdrawing permission stops future measurement from this browser but does not erase earlier events. Contact us for a data-rights request involving Meta.
• Contact-form rate-limit hashes expire within 24 hours. The message itself stays in our support mailbox for as long as we need it to answer and keep a record of what was resolved.
• Records of payments are kept for as long as tax and accounting law requires, typically seven years. That is invoice data, not your study material.

How we protect it

Everything travels over encrypted connections. Passwords are stored as one-way hashes, so nobody here can read yours. Changing your password ends every other signed-in session immediately.

Your uploads live in a private bucket with no public address. Nothing is served from it directly: when you open a file we check that the file is yours and then mint a signed link that works for a few minutes and then does not. Every upload is identified by its own bytes rather than by what it claims to be.

Links we email you are treated as credentials — random, stored only as a hash, valid once, expiring, and checked for the purpose they were issued for.

No system is perfect. If a breach ever affects your personal data, we will tell you and the relevant regulator as the law requires.

Your choices and your rights

In the app you can, at any time:

• edit or delete any note, file, folder or recording;
• change your name, language, study days and reminders in Settings;
• change your password, which signs other sessions out;
• manage or cancel a subscription in Settings → Manage billing.

Depending on where you live, you also have the right to ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent. Write to [email protected] from the address on your account and we will answer within 30 days. We will not treat you worse for asking.

If you are in the EEA or the UK and you think we have got it wrong, you can complain to your local data protection authority. We would rather you told us first.

If you are in California

Under the CCPA/CPRA you may request the categories and specific pieces of personal information we have collected about you, ask us to correct or delete it, and be free from discrimination for asking. We do not sell personal information for money. The optional Meta disclosure described above is sharing for advertising. You can opt out using Advertising preferences, and we honor Global Privacy Control for this measurement. Other requests go to [email protected], and an authorised agent may make one on your behalf with written proof.

Children and family use

EduZen AI is a learning platform and anyone can learn on it, including children studying with a parent, guardian or teacher. Children’s study material is used to provide the learning service, not for advertising. Optional website advertising measurement has the separate browser choice described above; it is not required to use the learning service.

A parent, guardian or teacher can write to [email protected] to see what a child’s account holds, correct it, have it deleted, or withdraw permission for us to keep it, and we will act on that request. If we learn that a child’s account was created without the consent their local law requires, we will delete it.

Changes to this policy

When this policy changes, the date at the top changes with it. If a change matters — a new provider, a new purpose — we will tell you by email or in the app before it takes effect, rather than leaving you to notice.