What we collect
- Account data: your email address, and a password stored only as a hash by our authentication provider.
- Questions and reports: the questions you ask and the reports generated from them, so you can find them again.
- Usage records: a count of reports generated, to enforce daily limits.
- Profile data: if you choose to add them, the languages you know or are learning, your hobbies/interests, and your language goals — used to personalize your reports and which resources we recommend.
- Accessibility notes (optional, strictly private):if you choose to tell us about a learning difference (e.g. ADHD, autism) or a preferred report format, it’s stored in a separate, owner-only record that not even our admins can read. We derive only a format preference (e.g. “concise”) from it for report generation — the condition labels themselves are never sent to Anthropic’s API or anywhere else.
- A cookie for signed-out visitors:if you use the service without an account, we set a random identifier in a cookie purely to count your free reports. It isn’t linked to any personal detail and isn’t used for advertising or tracking you across other sites.
- Billing data: if you subscribe, Stripe processes your payment. We store only a customer reference and your subscription status — never card numbers.
Who we share it with
We don’t sell your data. To run the service we send your question text to Anthropic’s API to generate a report, and to open academic search APIs (Semantic Scholar, CrossRef, PubMed, Unpaywall) to find sources. Payments go through Stripe. Data is stored with our hosting and database providers.
Public reports
Reports are private to you unless we approve one for the public gallery. Published reports show the question and the answer — never your email or any account detail. If you’d like a published report taken down, ask and we’ll remove it.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete your account and everything attached to it. If you’re in the EU or UK, the GDPR gives you these rights explicitly, and you can complain to your national data protection authority. Contact us and we’ll act on requests without unnecessary delay.
Retention
We keep your account and reports until you delete your account. Usage records are kept long enough to enforce limits and understand demand.
