Privacy Policy

Introduction

Amy (“we”, “us”, “our”) provides AI-powered tutoring through amy-tutor.vercel.app. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Amy, you agree to this policy.

Information we collect

• Account information. When you register, we collect your name, email address, and a hashed password.
• Learning data. Your conversations with Amy, course progress, test responses, and any documents or images you upload during a session.
• Usage data. Standard server logs such as IP address, browser type, and pages visited, used to operate and secure the service.
• Analytics. If Google Analytics is enabled, anonymised event data such as page views and clicks.

How we use your information

• Provide the tutoring service and maintain your account.
• Personalise Amy's responses based on your prior conversations.
• Improve Amy's quality, reliability, and content coverage.
• Communicate important service updates. We will not send marketing email without your consent.

Sharing and third parties

We share data only with the providers needed to run Amy:

• AI model providers. Your messages, uploaded documents, and related lesson context are sent to the AI provider that generates the response. Depending on configuration this can be Anthropic (Claude), Google (Gemini), OpenAI, or another OpenAI-compatible provider selected by us or by your school. Each provider processes data under its own commercial terms.
• Sarvam AI. Text of Amy's replies is sent to Sarvam AI to generate voice narration when audio is enabled.
• Supabase. Stores your account, conversations, progress, and generated media in a managed Postgres database and storage buckets.
• Vercel. Hosts the application and may collect standard server logs.
• Google Analytics. Collects anonymised usage events if enabled.

If the set of AI providers changes materially, we will update this policy and notify users through an in-app notice. We do not sell your data. We do not share it with advertisers.

Data storage and security

Data is stored encrypted at rest and transmitted over HTTPS. Passwords are hashed with bcrypt before storage. Only authenticated requests can access your account data. We retain data for as long as your account is active.

Your rights

You can request to:

• Access a copy of the data we hold about you.
• Correct inaccurate information.
• Delete your account and associated data.

You can delete your account from your Profile page, under “Danger Zone”. Additional data requests will be supported through an in-app channel during early access.

School accounts

If your account is linked to a school, authorised school administrators and teachers at that school can view your learning activity — including your full conversations with Amy, course progress, and quiz results — to support your learning. This visibility applies only to staff of your own school, for as long as you are a member of that school.

Children's privacy

Amy is intended for students aged 13 and above. If you are under 18, please use Amy with the awareness of a parent or guardian.

Changes to this policy

We may update this policy as Amy evolves. We will notify users of material changes through an in-app notice before they take effect.