TeachAI Privacy Policy

Referrals from the TeachAI website

When you follow a study-app link from teachai.io, we remember a random referral identifier and campaign label in browser storage for up to 30 days. We send the app, link placement, language and whether you arrived, created a new account or opened a study workspace to the TeachAI website for an operator-only conversion report. No account ID, email, name, answers, highlights or payment details are sent with these referral events. Server records expire after 30 days; physical deletion may take additional time. This tracking respects Do Not Track and Global Privacy Control.

1. Information we collect

• Account: your email address, Firebase user ID, whether your email is verified, the times we sent you a verification email, account-welcome and signup-notification delivery records, your account creation time and sign-in provider, and sign-in records. If you continue with Google, we receive your Google account ID, email address, name and profile picture; we never receive your Google password or access to your Gmail.
• Study profile: your grade, AP courses, exam season, course editions, and when you confirmed you are 13 or older. It is stored in our cloud database and on your device.
• Study requests and resources: the topics and options you choose for worksheets, knowledge organizers, flashcards and practice, and the resources and image files we generate for you.
• Note highlights: passages you choose to save, their colors, subject, unit, section, course level, guide edition, language, surrounding text used to find the passage again, and creation and update times. These are private to your account and are not shared with teachers or sent to AI providers.
• Tokens and referrals: your token balance and when tokens were granted, download requests and weekly download usage, your referral code, how many friends joined with it, and which account referred you if you joined with a friend’s code.
• Learning checklists: your latest Red, Amber or Green self-rating for each syllabus item, changes to those ratings and when you made them. Quiz attempts store your selected answers, server-marked scores and question results separately from your self-ratings. These records are removed when you delete your account.
• AI marking (only if you use it): the practice paper, the answers you type, the photos or PDF pages of your working you choose to add and which question parts each page answers, and the marks, feedback, token cost and time of each marking. Photos and PDF pages are turned into new images in your browser before upload, which removes their location, camera and document details, and are stored privately in your account. If you ask a teacher to check a marking, we also keep the class you sent it to, your note, and the teacher’s marks, comment and review time.
• Study plan (only if you make one): the subjects, units and section headings you chose, your start date, horizon, study time and time zone, the sessions you ticked off, your weekly self-check ratings, whether weekly summary emails are on, a private calendar link, and when we sent you a weekly summary. A copy is also kept on your device.
• Centre code (only if you use one): the code your tuition center or school gave you, the center’s name, when your free access started and ends, and whether you have used the free practice paper that comes with it. Using a center code alone does not share your account or study progress with the center; teacher connections require separate student consent.
• Billing (only if you buy a plan): your plan, billing period, subscription status and the Stripe customer and subscription IDs. Card details are entered on Stripe’s payment page and handled by Stripe; TeachAI never receives or stores them.
• Teacher connections: teacher profile name, school, verified email and adult educator declaration; class names, subject, level, edition and invitation links; student-chosen display names and connection consent times. After a student agrees, the class teacher can see that course’s revision-session completion and weekly confidence self-checks. A teacher also sees an AI marking, including its answers and photos, only when the student chooses to send it to that teacher’s class for the same subject, and only while the student stays in the class. Other subjects, highlights, generated resources and student email addresses are not shared. Disconnecting removes access on subsequent dashboard requests; a previously viewed screen may remain until refreshed.
• Usage: pages visited, navigation between pages, control types clicked, approximate time between page changes, a random browser-session identifier and your account ID when signed in. We do not record form values, passwords, study answers or highlighted passages in usage analytics.
• Security: sign-in and API access records, IP address, approximate country, region and city inferred from the IP address, browser user agent, sign-in provider, rejected access and possible automation signals. Location estimates can reflect a VPN or school network. We do not request GPS or precise device location.
• Service records: generation job status, token use, timestamps, and technical and security logs.
• On your device only: your appearance setting, the study note and section you last opened, an email address waiting for verification, and a friend’s invite code until it is used.

TeachAI shows no advertising. First-party usage analytics and security records stay in our own Google Cloud project; IP location lookup runs on our server using GeoLite data created by MaxMind. The apps do not ask for ongoing access to your camera, photo library, contacts, location or microphone; for AI marking, only the photos you pick in your browser’s file chooser are uploaded. Reading the study notes does not send your activity to any AI provider.

2. How we use information

We use this information to create and secure your account, verify your email address, send a one-time welcome with the guide for your role, notify the TeachAI operator of a new verified signup, personalize Home, Study and Create to your grade and AP courses, generate the study resources you ask for, mark the practice papers you send for AI marking, keep your library and highlighted notes, build your study timetable, its calendar feed and weekly summary emails, show consented course progress in teacher dashboards, run token allowances and referrals, process payments and manage subscriptions, understand which pages and features people use, investigate unusual sign-in regions and possible bots, prevent abuse, fix problems and answer support requests.

3. Service providers and international processing

We share information only with the providers that run the service for us, and only what each one needs:

• Google Cloud and Firebase: sign-in (including Continue with Google), the database and file storage (in Google’s United States regions), and the TeachAI API.
• Vercel: hosting of the ap.teachai.io website.
• Stripe: payments, subscriptions and the billing portal.
• Resend: delivery of verification emails, one-time account welcomes, signup notifications to the TeachAI operator and opt-in weekly study summaries from teachai.io, when enabled; otherwise Firebase sends verification emails.
• TeachAI operator: a new verified signup notification to alex@teachai.io includes your email, account ID, name when available, signup time, sign-in provider and any role, school, subjects, levels and exam series already saved. Learning ratings, answers and highlights are not included. School and teacher names are self-reported.
• OpenAI, Anthropic and DeepSeek: generating and reviewing the resources you request, using the topics and options you choose.
• DeepSeek: sorting the pages you upload for AI marking to the question parts they answer, and marking the practice papers you send. It receives the paper’s questions, figures and scoring guidelines with your typed answers and pages, but not your name, email address or account ID.

Processing may happen outside your country, subject to these providers’ security and contractual safeguards.

We do not sell personal data, we do not use student data for third-party advertising, and we do not use your study content to train our own AI models.

4. Retention and deletion

We keep your information while your account is active, so that your profile, library and plan keep working. Usage analytics expire after 30 days, and security audit records after 90 days. Automatic expiry may take additional time to complete. Account deletion removes usage analytics linked to your account; limited security audit records remain until their expiry for abuse investigations.

You can delete your account at any time from Profile → Security and account → Delete account permanently, or by following the steps on our account deletion page. Deletion cancels any subscription first, then removes your generation jobs and resources, stored generated files, study profile, saved note highlights, teacher profiles, classes, invitation links and student connections, study plan, calendar link and weekly-summary records, AI markings and answer photos (including any copy a teacher could open), centre-code records, token wallet and referral code, quota records, verification-email records and account-email delivery records, and your Firebase identity. Signup notifications already delivered to the TeachAI operator’s mailbox are separate from the app’s database; contact trust@teachai.io to request removal of those copies. A calendar you subscribed to stops updating, and you can remove it from your calendar app.

Information stored only on your device stays there until you clear the app’s or site’s data or uninstall the app. Stripe keeps the payment records it is required to keep by law. Some limited security records or encrypted backup copies may remain for a short time where needed for security, fraud prevention, legal obligations or routine backup rotation, after which they are deleted or de-identified.

5. Students and age

You must be 13 or older to create your own TeachAI account. Everyone confirms their age when setting up an account, including accounts created with Google, and we do not knowingly let anyone under 13 register or collect personal information from children under 13 (Children’s Online Privacy Protection Act).

Students under 13 may use TeachAI only through an account set up by their school. When a school or district is our customer, we process student records on its behalf and under its direction as a school official for the purposes of the Family Educational Rights and Privacy Act, and we follow the state student-privacy laws that apply to it, such as California’s Student Online Personal Information Protection Act.

If you believe an account belongs to someone under 13, contact trust@teachai.io and we will investigate and remove it.

6. Your choices and rights

You can ask for access to, correction of or deletion of your personal data, object to or restrict certain processing where the law allows, or ask any privacy question by emailing trust@teachai.io. We may need to confirm that you own the account before acting on a request.

7. Security

We use encrypted connections, authenticated requests to our API, access controls and private per-student storage. Only accounts with a verified email address can sign in. No online service can guarantee absolute security, so please use a unique password and avoid putting unnecessary personal or sensitive information into a study request.

8. Changes and contact

We may update this policy; the date at the top shows the current version.

Privacy questions: trust@teachai.io. Product support: support@teachai.io. See also the TeachAI Terms of Service.