Privacy Policy

Account Information

When you create an account, we collect your email address and password (securely handled by our authentication provider). Optional profile information you submit may also be stored.

Usage Data

We collect information about how you use ELI, including:

• Questions you ask and the complexity levels you choose
• Explanations returned, diagrams, and quizzes you generate
• Features you use (quizzes, diagrams, PDF downloads, etc.)
• Your learning progress and achievements
• Device and browser information
• IP address and general location (for security and service integrity)

Automatically Collected Information

We automatically collect certain information when you use the Service, including log data and cookies necessary for authentication, session management, and security. See Cookies and Tracking below.

Preferences

We store non-sensitive preferences such as your selected theme (light/dark) locally on your device to improve your experience. This preference is saved to your browser and can be changed at any time.

We use the information we collect to:

• Provide and improve our educational services
• Generate AI-powered explanations tailored to your chosen complexity level
• Track your learning progress and provide achievements
• Personalize your learning experience
• Communicate with you about your account and our services
• Ensure the safety and security of our platform
• Comply with legal obligations
• Analyze usage patterns to improve our service
• Process payments for Pro subscriptions via Stripe

Legal bases for processing (where required by law) include performance of our contract with you (providing the Service), our legitimate interests (service improvement, security, preventing abuse), and compliance with legal obligations. Where consent is required (e.g., certain cookies in applicable regions), we will request it.

ELI uses artificial intelligence to generate educational content. When you ask a question:

• Your prompts and relevant context are sent to our AI provider to generate responses
• We may use aggregated, de-identified data to improve service quality
• We transmit only what is necessary to generate the requested output
• Generated content may be stored to provide your learning history

Realtime features (such as presence or live updates) are limited to browser or Node.js server environments and do not run in the Edge runtime.

We implement technical and organizational measures to protect your data during transmission and storage.

We do not sell your personal information. We may share your information only in the following circumstances:

Service Providers

We share information with trusted service providers who help us operate our platform, including:

• OpenAI: AI processing
• Supabase: authentication, database, and hosting for certain app data (server-side interactions run in Node.js runtime; no Supabase calls from edge middleware)
• Stripe: subscription payments (including Embedded Checkout and Billing Portal)
• Google: OAuth sign-in (if you choose Google login)

Legal Requirements

We may disclose information if required by law, legal process, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures may include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Secure data storage and backup procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

ELI is designed with safety features for younger users. For users under 13, usage should occur with verifiable parental consent and through family account settings where available. We collect only the information reasonably necessary to provide the Service and offer controls for parents/guardians.

• Minimal personal information necessary for service provision
• Parental/guardian oversight for account use
• Additional safety measures for child users
• Parents/guardians can request access or deletion subject to verification

If you believe we have collected information from a child under 13 without proper consent, contact us immediately.

Depending on your location, you may have certain rights regarding your personal information:

Access and Portability

You can request access to your personal information and receive a copy in a portable format.

Correction

You can request correction of inaccurate or incomplete personal information.

Deletion

You can request deletion of your personal information, subject to certain exceptions.

Restriction

You can request restriction of processing of your personal information in certain circumstances.

Objection

You can object to processing of your personal information for certain purposes.

To exercise these rights, please contact us using the information provided below.

We use cookies and similar technologies for authentication, session management, preference storage, security, and to improve the Service. Our authentication uses secure, httpOnly cookies. Cookies are marked Secure when accessed over HTTPS. These technologies help us:

• Remember your preferences and settings
• Analyze how our Service is used to improve functionality
• Provide personalized content
• Maintain your login session
• Improve security

You can control cookies through your browser settings, but disabling cookies may affect your ability to use certain features of our service.

Your information may be transferred to and processed in countries other than your own. When we transfer personal information internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable privacy laws.

We retain your personal information only as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. We consider factors such as:

• The nature and sensitivity of the information
• Legal requirements and obligations
• Your account status and activity
• The purposes for which we collected the information

When we no longer need your personal information, we will securely delete or anonymize it.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:

• Posting the updated Privacy Policy on our website
• Providing notice through the Service (and email if appropriate)

Your continued use of ELI after any changes constitutes your acceptance of the updated Privacy Policy.