Privacy Policy

AI Academy — Learn AI Tools • Effective April 2, 2026

1. Information We Collect

AI Academy is designed to minimize data collection. Here is exactly what data exists and where it lives:

1.1 Locally Stored Data (On Your Device)

• Learning progress, streaks, XP, badges, certificates, and preferences are stored locally on your device using AsyncStorage. This data never leaves your device and is not accessible to us.
• No account or sign-up required. We do not collect your name, email address, phone number, or any personally identifiable information to use the core app features.

1.2 Anonymous Usage Analytics

• We collect anonymous usage analytics (such as which screens are visited, which features are used, course and lesson progress, paywall views, and session start/end times) to improve the app.
• These analytics use a randomly generated device identifier (e.g., "anon-lx1abc-def456") that is not linked to your identity.
• Some events carry additional, non-identifying metadata that you provided to the app yourself: the display name you chose during onboarding is sent once with the onboarding_completed event, and your onboarding selections (skill level, learning goals, and AI tools of interest) are sent as analytics metadata so we can measure feature adoption per segment.
• Analytics data is sent to our own servers. No advertising identifiers (IDFA/GAID), no email, phone, or address, and no third-party tracking SDKs are involved.

1.3 Crash Reporting and Performance Monitoring

• We use Sentry for crash reporting and performance monitoring on both the mobile app and our API server.
• When a crash or error occurs, Sentry collects anonymous diagnostic data including: stack traces, device type and OS version, app version, and performance metrics.
• Sentry data is used solely to identify and fix bugs and improve app stability. No personally identifiable information is intentionally collected by Sentry.
• For Sentry's privacy practices, see Sentry Privacy Policy.

1.4 Leaderboard Data

• If you participate in the leaderboard, your display name, total XP, and streak count are transmitted to our server along with your anonymous device identifier.
• Leaderboard rankings, including your display name and stats, are publicly visible to all app users.
• You can choose any display name; it does not need to be your real name.

1.5 Push Notifications

• If you enable daily reminders, we use Expo Notifications to schedule local notifications on your device.
• Notifications are scheduled locally on your device. No push tokens are transmitted to or stored on our servers.
• You can disable notifications at any time in the app settings or your device's system settings.

1.6 Deep Linking

• AI Academy supports deep links via the aiacademy:// custom URL scheme and universal links (e.g., https://aiacademycourse.education/course/...) to open specific content within the app.
• Deep link URLs may contain content identifiers (course IDs, prompt IDs) but no personal information.

1.7 Referral Codes

• AI Academy includes an optional referral program. When you generate or redeem a referral code, your anonymous device identifier and the referral code are transmitted to our server to credit the referrer and the new user.
• Referral data we store consists of: the referral code itself, the anonymous device identifier of the code owner, and the anonymous device identifier of any device that redeems the code. No names, emails, or other identifying information are attached.
• To prevent abuse (e.g., automated farming of referral rewards), the server logs the IP address of the device that redeems a code on the referral claim record. The same is true for first-launch device registration. These IP addresses are server-side infrastructure data used for rate-limiting and abuse mitigation only; they are not exposed in the app, not used for advertising, and not shared with third parties.
• Referral data is used solely to administer the referral program (preventing self-referral, granting reward XP) and is deleted when you delete your device account.

1.8 Community User-Generated Content

• If you voluntarily submit content to the community feature (e.g., community-submitted prompts, comments, or reactions), that content is transmitted to our server and stored alongside your anonymous device identifier.
• Community submissions are publicly visible to other app users. To protect your privacy, the display name shown to other users on community prompts and comments is not the name you chose during onboarding — our server automatically replaces it with a generated pseudonym in the form Learner_xxxxxx (derived from the last six characters of your anonymous device identifier).
• Do not submit personal, confidential, or sensitive information.
• Community content is subject to moderation. You can report content that violates our guidelines via the in-app report button, and we may remove content at any time without notice. To support abuse mitigation, the server logs the IP address of report submissions in the report record; this IP is not exposed in the app.
• You can request removal of your own community submissions, or delete them all at once, by using the in-app "Delete Account & Data" option described in Section 1.9.

1.9 Account Deletion Right

• Because AI Academy does not require an account, "your account" refers to the anonymous device identifier and any associated server-side records (leaderboard entry, referral codes, community submissions, analytics events, and Creator-tier usage credits).
• You can delete this data at any time, directly from inside the app, by going to Profile → Delete Account & Data. This action permanently removes all server-side records linked to your device identifier and cannot be undone.
• Local on-device data (course progress, XP, preferences) is also cleared as part of this flow.
• This in-app deletion right satisfies Apple App Store Review Guideline 5.1.1(v). No email or support request is required.

2. Creator Tools Data Processing

AI Academy Creator tier provides AI-powered creative tools. When you use these tools, your inputs are processed by third-party AI services:

2.1 Text Playground

• User prompts are sent to OpenAI's API (GPT-4o model) for text generation.
• OpenAI processes your prompt text to generate a response. OpenAI's API data usage policy applies.
• For OpenAI's privacy practices, see OpenAI Privacy Policy.

2.2 Image Lab

• User prompts are sent to OpenAI's image generation API for image creation.
• Only the text prompt you provide is transmitted; no other personal data is sent.

2.3 Voice Studio

• User text is sent to ElevenLabs for text-to-speech synthesis when using ElevenLabs voices.
• As a fallback or for OpenAI voices, user text is sent to OpenAI's TTS API for text-to-speech synthesis.
• Only the text content you provide is transmitted to these services.
• For ElevenLabs' privacy practices, see ElevenLabs Privacy Policy.

Important: Do not include personal, sensitive, or confidential information in your Creator tool prompts. Content you submit to Creator tools is processed by third-party AI providers according to their respective privacy policies and data retention practices.

3. Subscription Data

AI Academy offers three tiers: Free, Pro, and Creator. If you purchase a subscription, the transaction is processed entirely by Apple (App Store) or Google (Play Store). We use RevenueCat to manage subscription status for both Pro and Creator tier entitlements.

• RevenueCat generates an opaque, anonymous App User ID the first time the app launches. This identifier is filed under Apple's "Identifiers — User ID" category in our App Store privacy questionnaire. It is not linked to your real identity (we never call RevenueCat's logIn with an email or third-party account), and it is not used for cross-app tracking.
• RevenueCat also receives your subscription entitlement status (Pro and/or Creator), the anonymous purchase events from Apple/Google StoreKit (product ID, transaction date, expiration), and SDK-level diagnostics such as device model, OS version, and app version.
• We mirror the RevenueCat anonymous App User ID to our own server (linked to your device identifier) so we can restore your purchases. We do not receive or store your payment information, Apple ID, Google account details, or card data.
• For RevenueCat's privacy practices, see RevenueCat Privacy Policy.

4. Website Data Collection

Our website (aiacademycourse.education) offers optional features that collect limited data you voluntarily provide:

• Newsletter signup: If you subscribe to our newsletter, we store your email address to send you AI tips and updates. You can unsubscribe at any time.
• Contact form: If you submit a support request through our website, we store your name, email address, subject, and message to respond to your inquiry.

This website data is stored securely on our servers and is never shared with third parties for marketing purposes.

5. Data the App Does Not Collect

To be explicit, the AI Academy mobile app does not collect:

• Location data
• Device identifiers for advertising (IDFA/GAID)
• Photos, contacts, camera, microphone, or other device sensor data
• Cookies or web tracking pixels
• Browsing history outside the app
• Health, financial, or biometric data

6. Apple App Tracking Transparency

AI Academy does not use Apple's App Tracking Transparency (ATT) framework because the app does not track users across other companies' apps or websites. We do not collect or use the Identifier for Advertisers (IDFA). No ATT prompt is displayed because no cross-app tracking occurs.

7. Data Storage and Security

7.1 Local Data

All core app data (course progress, streaks, XP, preferences, badges, certificates) is stored locally on your device using AsyncStorage. If you delete the app, this data is permanently removed with no way to recover it.

7.2 Server-Side Data

Data stored on our servers includes: anonymous analytics events, leaderboard entries, newsletter subscriptions, and contact form submissions. This data is stored in encrypted databases with access restricted to authorized personnel only.

7.3 Security Measures

• All data transmitted between the app and our servers uses HTTPS/TLS encryption.
• Server-side data is stored in access-controlled databases.
• API endpoints are protected by rate limiting to prevent abuse.
• Creator tool API endpoints are protected by authentication when configured.
• We regularly review and update our security practices.

8. Data Retention

• Anonymous analytics data: Retained for up to 24 months, then automatically deleted.
• Leaderboard data: Retained as long as the leaderboard feature is active. Inactive entries (no XP updates for 12 months) may be removed.
• Newsletter subscriptions: Retained until you unsubscribe, after which your email is deleted within 30 days.
• Contact form submissions: Retained for up to 12 months after the inquiry is resolved, then deleted.
• Crash reports (Sentry): Retained according to Sentry's data retention policies (typically 90 days).
• Local app data: Stored on your device until you delete the app or clear the app's data.

9. Third-Party Services and Subprocessors

The third-party services integrated into AI Academy are:

• Clerk, Inc. — Authentication and user identity management. When you sign in or create an account, Clerk processes your email address, authentication tokens and session data, and device/browser fingerprint information to verify your identity and maintain your session. Clerk stores this data on servers located in the United States. For Clerk's privacy practices, see Clerk Privacy Policy.
• RevenueCat — Subscription management for Pro and Creator tiers. Processes an anonymous user identifier and subscription purchase data.
• Sentry — Crash reporting and performance monitoring on both mobile and server. Collects anonymous diagnostic data when errors occur.
• OpenAI — Powers Creator tools (Text Playground via GPT-4o, Image Lab via image generation API, Voice Studio via TTS). Processes user-submitted prompts and text.
• ElevenLabs — Text-to-speech in Voice Studio. Processes user-submitted text for audio generation.
• Expo Notifications — Local push notification scheduling for daily reminders. Device tokens are handled locally.
• Self-hosted analytics — Anonymous event tracking stored on our own servers. Data includes randomly generated device identifiers, screen views, and feature usage — no personal information.

10. International Data Transfers

AI Academy is operated from the United States. If you access the app from outside the United States, your data (including anonymous analytics, leaderboard submissions, and Creator tool inputs) may be transferred to and processed in the United States.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, data transfers to the US are conducted under applicable legal mechanisms, including Standard Contractual Clauses (SCCs) where required. By using AI Academy, you consent to the transfer and processing of your data in the United States.

11. GDPR Compliance (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, the following additional rights and disclosures apply under the General Data Protection Regulation (GDPR):

11.1 Data Controller

AI Academy (operated by the development team behind AI Academy) is the data controller for any personal data processed through the app and related services. Contact: support@aiacademycourse.education.

11.2 Lawful Basis for Processing

• Legitimate interest: Anonymous analytics and crash reporting to improve app quality and stability.
• Consent: Newsletter subscriptions, push notifications, leaderboard participation, and use of Creator tools that transmit data to third-party AI services.
• Contract performance: Processing subscription data through RevenueCat to fulfill purchased services.

11.3 Your Rights

Under the GDPR, you have the right to:

• Access: Request a copy of any personal data we hold about you. If you have a signed-in account, you can do this instantly in the app via Profile → Account → Export My Data, which returns your email address, account creation date, last sign-in time, and linked OAuth providers.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your personal data ("right to be forgotten"). You can do this directly in the app via Profile → Delete Account & Data.
• Data Portability: Request your data in a structured, commonly used, machine-readable format. Use the in-app Export My Data option to download your account data at any time.
• Object: Object to processing of your data based on legitimate interest.
• Restrict Processing: Request restriction of processing in certain circumstances.
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, use our Data Request form or contact us directly at support@aiacademycourse.education. We will respond within 30 days.

11.4 Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.

12. CCPA/CPRA Compliance (California Residents)

If you are a California resident, the following additional rights and disclosures apply under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

12.1 Categories of Information Collected

• Identifiers: Anonymous device identifiers (randomly generated, not linked to identity), email address (newsletter only), display name (leaderboard only).
• Internet activity: Anonymous app usage data (screen views, feature usage, session events).
• Commercial information: Subscription status (managed by RevenueCat, anonymous).

12.2 Your Rights

• Right to Know: You may request the categories and specific pieces of personal information we have collected about you. If you have a signed-in account, you can view this immediately in the app via Profile → Account → Export My Data.
• Right to Delete: You may request deletion of your personal information. You can do this directly in the app via Profile → Delete Account & Data.
• Right to Opt-Out of Sale: AI Academy does not sell personal information. We have never sold personal information and have no plans to do so.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise your rights, use our Data Request form or contact us at support@aiacademycourse.education.

12.3 "Do Not Sell or Share My Personal Information"

AI Academy does not sell or share your personal information with third parties for cross-context behavioral advertising purposes. No opt-out mechanism is needed because no sale or sharing occurs.

13. Children's Privacy

AI Academy is intended for users aged 13 and older (16 and older in the EU/EEA). We do not knowingly collect personal information from children under these ages. If you believe a child under the applicable age has provided personal information to us, please contact us at support@aiacademycourse.education and we will promptly delete such information.

14. Changes to This Policy

If we make material changes to this privacy policy, we will update the effective date at the top of this page. We may also notify you through the app or via email (if you are a newsletter subscriber). Continued use of the app after changes constitutes acceptance of the updated policy.

15. Contact

If you have questions about this privacy policy or wish to exercise your data rights, you can:

• Use our Data Request form — submit an export or deletion request online. This form is designed for former users or anyone who no longer has app access.
• Email: support@aiacademycourse.education