Privacy Policy

The short version

• We keep what it takes to run your account: your email, the notes you upload, your sessions and your scores, plus usage counts and a record of what you agreed to. We never keep voice recordings.
• Your notes are sent to our AI provider only to run your session. We do not use your notes, recordings or transcripts to train AI models, and our AI and speech providers are not allowed to either.
• If you connect Canvas, we read only your current courses' dates, syllabi, announcements and the files you choose. Your Canvas access code is used once and never kept.
• We never sell your data and show no ads. If you came from a Meta or TikTok ad, we tell that platform you signed up, never with your email address or anything you study, and not at all if your browser sends Global Privacy Control. The front page of our website counts visits without cookies.
• Delete your account in the app (You, then Privacy and data) and everything tied to it goes from our servers at once, notes included. If the account had the $3.00 first week or a free trial, a code made from its email address stays 12 months so the offer isn't given twice. A few logs held by our providers age out on their own, as listed below.
• Questions: privacy@sancyai.com.

Who we are

Sancy AI is run by Sancy AI LLC, a Texas limited liability company, 14153 Doonan Xing, Frisco, TX 75035. You can reach us at support@sancyai.com, and about privacy at privacy@sancyai.com.

Sancy AI is offered only in the United States, and only for people 18 and over.

The age question

Before you give an email address, the app asks your birth month and year. Our server works out your age group from them and keeps only the group. It never stores the month or the year, on our servers or on your device.

If the answer is under 13, the app stops on the device before asking for an email. Nothing is collected and nothing is sent to us. The app only saves the time of that answer in your browser (wl:blocked), so this device cannot sign up for 24 hours; after that the question appears again.

If the answer is under 18 but not under 13, the app says Sancy AI is for students 18 and over and does not go on to ask for an email. Nothing is saved or sent to us, the device is not blocked, and you can change the answer.

What we collect and why

We collect only what we need to tutor you and run your account. Each item below is strictly necessary for that, except the one marked optional, and we use each only for the reason it gives.

• Your email address: to create your account and send your sign-in codes. We never ask for a password.
• Your profile: the name or nickname you want the tutor to use and, only if you give them, your school level, school, year or grade, majors and minors, program, the tests you are preparing for, interests, sports and goals. We use these to tailor your lessons, and send the study details (never your name) to our AI provider for that.
• If you sign in with Google or with Apple: the email address and name that service shares with us (Apple's may be a private relay address it forwards to you), and, for Apple, a token we keep only so that deleting your account also ends Sign in with Apple for Sancy AI. We never see your Google password or your Apple password. Google and Apple handle that sign-in under their own privacy policies, and get nothing about your studying from us.
• The material you upload or paste (slides, notes, PDFs, photos of notes): to build your course, write your answer keys and flashcards, and check what you explain against it.
• Your sessions: what you type, say, draw or send to the tutor, and what the tutor replies, so the session can work and be graded.
• Your scores and progress: grades, check results, what you predicted before a check, your review plan, and a short learner profile that describes how you study (for example "explains the result before the cause"). The learner profile never records or guesses anything about your health, mood, stress, mental health or disability; our server removes any line that touches those topics.
• What your tutor remembers: to personalize your lessons, your tutor keeps the mix-ups from your graded explanations (what you said and the right idea), the explanations you marked as helpful, and the learner profile above (the study habits it is working on with you, your strengths, and what to focus on next). For each lesson the app picks a few of these and sends them to our AI provider with it, only to shape that lesson. The app does not show them on screen. You can clear all of it at any time in You, under Privacy (Tutor Memory), it is included when you ask for a copy of your data, and it is deleted with your account.
• Usage counts: how many AI requests you made each day, their size and what they cost us, so we can cap spending fairly.
• Product events: which screens and buttons you used (for example "started a check" or "uploaded a file"), with no words from your material, your sessions or your notes to us, so we can tell what helps students learn. Each says whether it came from the website or the iPhone and iPad app. They include how long the app was open, and, from setup, your year in school, a broad field of study (such as "health" or "business") and the goals you picked, each as one word from a fixed list, never your school or anything you typed. They include where you first came from (a campaign's tags in the link you opened, a share code, the name of the site that sent you (never the page) and, if you came from a Meta or TikTok ad, the click number its link carried, which is not kept when your browser sends Global Privacy Control), your answer if you choose to answer our one-question survey or say why you cancelled, whether you offered to talk with the founders (you then write to us from your own email), and, from our payment providers, when your subscription starts, renews, is cancelled or ends, with its plan and price. When an adult shares a score, the link carries a short code worked out from their account, so we can count who joined from it; it tells no one who sees it who you are.
• Optional: where you found Sancy AI (for example "TikTok" or "A friend"), if you answer that question when you make or sign in to your account. It is kept with your profile and sent as a product event, so we can tell where students hear about us. Skip it and nothing is kept; the first answer an account gives is the one kept.
• Ad reports, only if you came from a Meta or TikTok ad: when you sign up, we send that platform the click number from the ad's link, that you signed up and when, and a coded version of your account number. We never send your email address, your name, your IP address, whether you pay, or anything you study or write. We do this only for adults, and not when your browser sends Global Privacy Control. See If you came from an ad.
• Visits to the front page of our website (not the app): the page viewed, how far down you scrolled, which sections you reached and which buttons you pressed, where you came from, your country and the kind of browser, counted by Vercel Web Analytics. It uses no cookies and no ID, so we cannot tell who you are, and it is skipped when your browser sends Global Privacy Control or Do Not Track.
• Technical data: your IP address and the country your request comes from (to stop abuse and because we only offer Sancy AI in the US), and, where the human check is switched on, the result of a Cloudflare Turnstile check when you ask for a sign-in code on the website. In the iPhone and iPad app the check is Apple's DeviceCheck, when you ask for a sign-in code, sign in with Apple or start a trial: it tells us only that the request came from our app on a real Apple device (and, for a trial, whether that device started one this month), never which device it is.
• Your age group (never your birth month or year), as described above.
• A record of what you agreed to: which version of the Terms of Use, the Privacy Policy, the AI-tutoring permission and the voice notice you accepted, when, how, and the IP address and browser it came from. We keep it as proof of your choice.
• Notes you send with Report a problem. They are kept apart from usage counts, and you can ask us to delete them.
• If you subscribe to Pro: your plan (weekly, monthly or yearly), whether it is active, and whether you have used your one introductory offer. Stripe handles your card; we never see or store your card number.
• If you rate a grade, the rating and any note you write. If you also tick the separate box to share your explanation, that explanation.
• The U.S. state you live in, if you choose to tell us, so we know which state's rules apply.

What not to type or upload

Never upload patient information or anyone's protected health information, and please do not enter details about your own health. Sancy AI is a study tool, not a medical service, and we are not a HIPAA business associate. If you upload something by mistake, remove it from the course or delete the course, which also deletes the answer keys and lectures our server built from it (then choose Delete Now for that course in You, Privacy and data, Recently Deleted, so the copy kept there for 30 days goes too), or delete your account, which removes everything at once.

Where your data is kept

Your courses, progress and learner profile are kept in your browser and with your account (in our database at Supabase), so they follow you when you sign in on another device. Whiteboards are synced to your account too, so they follow you: a board drawn on the website shows in your other browsers, and one drawn in the iPhone or iPad app on your other iPhone or iPad. A drawing you send to the tutor goes through our server to Anthropic to produce the reply, and we do not store it. Answer keys are kept on our server: your browser holds only a reference to each one, and the full key is never sent to your browser while you study (you see one answer only when you choose to reveal it). When another student adds exactly the same course material (word for word, such as the same files from a shared Canvas course), the list of topics read from it, the answer key for each topic and what our server makes from it (its lecture, practice questions, drawing plans and spoken lines) are kept once as shared teaching material with no owner and reused for both of you and anyone else who adds that same material, as our Library topics are. A shared answer key, and the lecture, practice questions and drawing plans made from it, are written for any student taking the course, not for either of you: nothing about either of you is in them, no name, account details, year of study, major or anything you said, wrote or drew, only what was made from the material you both added. Your tutor's chat, hints and grades still follow your own level. Until another student adds the same material, the list of topics stays with your account. Deleting a course deletes your own answer keys for it; deleting your account deletes all of your own answer keys and topic lists. A shared copy stays while other students use it. Your data export includes the lists of topics kept with your account, and lists each answer key (its course, topic and when it was made) but not what it says: the keys are what your explanations are graded against, so they stay hidden, and each is built from your own material, which the export includes in full.

AI providers

When you study, the parts of your notes a step needs, what you said, wrote, drew or photographed, and the hidden answer key are sent to Anthropic, which runs the AI models, only to produce that reply or grade. We do not use your notes, recordings or transcripts to train AI models, and Anthropic does not train on data sent through its API. Anthropic deletes what we send within 30 days, except content its safety systems flag, which it may keep for up to 2 years to enforce its usage policies.

AI tutoring is how Sancy AI teaches, so on the website it has no off switch: to stop anything more being sent to the AI, delete your account in You, under Privacy. In the iPhone and iPad app you can also turn AI tutoring off in You, under Your data. While it is off, nothing is sent to the AI, and our server enforces that.

The tutor is an AI

Every tutor in Sancy AI is an AI, not a person. The session always shows the tutor's name with an "AI tutor" label, and the tutor says it is an AI if you ask. It is not a therapist, doctor, lawyer or counselor, and it does not take a romantic role or act as a companion.

If you say you may hurt yourself or someone else, or that someone is hurting you, the tutor stops the lesson and points you to 988, a trusted adult and 911. The Safety page is our published protocol and says exactly what happens.

Voice

Voice is optional; you can always type or draw instead. Before the microphone opens for the first time, the app tells you how voice works and asks you to turn it on, and we keep a record that you did.

The microphone is on only while you hold the talk button. Your voice goes straight from your device to Soniox, a speech-to-text service, which turns it into text while you speak; if Soniox is unavailable, a backup service listed below does the same. The audio never passes through our servers. We do not record or keep your voice, and Soniox's real-time service does not store it. A backup service may keep it for a limited time under its own terms, as the list below says for each one; none of them may use it to train AI models. No voiceprint or voice ID is made, and nobody's voice is used to identify them or to train AI models. Only the words go on to the tutor, and they are kept with your session like typed words. If other people are nearby, make sure they are OK with being heard, or type instead.

If you turn on spoken replies, our server sends the words of the tutor's reply to a text-to-speech service, which reads them aloud in one of our standard voices (stock synthetic voices, not from any person's voice). Your tutor's main voice is Speechify's Simba. If you pick another voice, or when your plan's hours of that voice for the month are used, the reply is read by DeepInfra with Chatterbox Turbo or Kokoro, two open text-to-speech models. Chatterbox Turbo may add a small spoken sound to a reply, such as a chuckle after praise or an "Um," before a correction; these are written into the reply by our server, not taken from anything you said. Before sending, our server puts "you" in place of the name and nickname on your profile and takes out email addresses, phone numbers and links; the rest of the reply is sent as written. Nothing of yours is stored. The spoken audio of lines that are the same for everyone, such as a shared Library lecture, may be kept so it does not have to be made again; it holds nothing about you. If these services are unavailable, your device's own voices read the reply.

Canvas (optional)

You can connect your school's Canvas (from Learn, or during setup) to bring in your courses, test dates, syllabi and class files instead of uploading them. Nothing from Canvas comes in unless you connect it.

You choose how: your school's own Canvas sign-in (only at schools that have approved Sancy AI for it), an access code you make in your Canvas settings, or your Canvas calendar link. To find your school, the name you type is sent to Canvas's public school search.

What we read, only for the courses you are taking now: each course's name, code and term; its syllabus; its upcoming assignments, quizzes and tests with their dates; its calendar events; its announcements from the last 45 days (to notice a test that moved); and the list of its files, including files posted in its modules. With the calendar link, only the dates. We never read your grades, your submissions, your messages, or anything about other students.

What we keep: the courses you add, their test dates and times, and what the syllabus says each test covers and the weekly topics. The class files you bring in (we suggest slides and notes, at most 12 a course and none over 25 MB, and you can change the choice) become your course material, exactly like files you upload. We do not keep the syllabus's own text or the announcements on our servers. Anything we weren't sure of is listed on Today for you to check, with the line it came from; that list stays on your device.

Your access code and calendar link are used once, for that import, and are never stored or written to our logs. A Canvas access code can do what you can do in Canvas; we use it only to read the items above, and you can delete it in Canvas at any time (Account, then Settings, then Approved Integrations).

Class files your courses link on Google (Google Slides, Docs or Drive) instead of posting them in Canvas come in the same way, as you choose them. When a file is shared with anyone who has the link, our server downloads Google's own copy of that one file (Slides and Docs as a PDF), without any Google account. When a file is shared only with your school's Google accounts, it is listed on Today with a link to download it from Google yourself, in your own browser; then you add the files you downloaded, like any upload. Sancy AI never signs in to Google, never sees your Google account, and loads nothing from Google for this.

If you connect with your school's sign-in, we keep a Canvas sign-in key, encrypted, so you can bring Canvas in again without signing in each time. Disconnect it in the app (Connect Canvas, then Disconnect), or delete your account: either way we ask Canvas to cancel it and delete our copy.

Syllabi and the files you bring in are sent to our AI provider to read them, exactly as your uploads are, and are not used to train AI models. Canvas is run by your school and Instructure under their own policies. Connecting is your own choice as a student: we are not working for your school, we send nothing to your school, and we never change anything in your Canvas (apart from asking it to cancel Sancy's sign-in when you disconnect).

Who processes your data for us

These companies process data on our behalf, under contracts that limit what they may do with it. None of them may use it to train AI models or for advertising. The Subprocessors page lists them with more detail. Meta and TikTok are not on that list: see If you came from an ad.

• Anthropic, PBC: runs the AI models for tutoring, checks and grading. Receives the parts of your material a step needs, what you said, wrote, drew or sent in the session, the hidden answer key, and the study details on your profile that help it tailor the lesson (such as your school level, year or grade, majors, program, the tests you are preparing for, interests and goals, and, when memory is on, a short learner profile). It never receives your name or email address. Does not train on this data. Deletes it within 30 days, except content flagged by its safety systems, which it may keep for up to 2 years.
• Supabase, Inc.: database and sign-in, including the emails that carry your sign-in codes. Holds your account email and ID, sign-in sessions, synced study data, answer keys, usage counts, product events, ratings, feedback notes and the record of what you agreed to. Uses your email address to send your sign-in codes. Kept for the periods in the Privacy Policy. Backups are kept 7 days.
• Vercel Inc.: hosts the website and app, runs our server code and, on the website's front page only, counts visits, scrolling and button presses without cookies (Vercel Web Analytics). Processes request data such as IP address, country and time. For the front-page counts it receives the page, where you came from, your country and the kind of browser, with no cookie and no way to tell who you are. Our server code may run in the edge location nearest to you, which can be outside the United States when you travel. Keeps request logs for a short period for security and debugging.
• Resend, Inc.: sends our account emails other than sign-in codes, such as subscription confirmations and notices that our terms changed. Receives your email address and the message. Keeps delivery logs for a limited time under its own policy, and does not use them for anything else.
• Cloudflare, Inc. (Turnstile): the human check before a sign-in code is sent. Receives browser signals and your IP address for that check, from your browser and from our server.
• Our team's chat (Slack or Discord): tells our team when something needs a person, such as a student saying they are under the age limit, the daily AI spending cap being reached, or a school's deletion request coming due. Receives only a short alert with no name, email address, account ID or words from anyone's material or sessions. A payment alert may include the subscription's reference number at Stripe, so our team can find it there. Keeps the alert in our team's chat history.
• Stripe, Inc.: payments, only if you subscribe to Pro. Receives your payment details directly from you on its own pages; we never see your card number. From us it receives your account email and account ID, so the subscription is tied to your account. Keeps payment records as financial law requires.
• Soniox, Inc.: speech to text, only if you use the microphone. Receives your voice for the time you hold the talk button, sent straight from your browser. It turns the speech into text. Its real-time service, the only one we use, does not store the audio, and by default Soniox does not use customer audio to train its models. We never keep the audio ourselves, and we do not create voiceprints.
• Speechify, Inc. (Simba text-to-speech): reads the tutor's reply aloud in the main tutor voice, only if you turn spoken replies on. Receives the words of the tutor's reply, sent from our server. Before sending, our server puts "you" in place of the name and nickname on your profile and takes out email addresses, phone numbers and links; the rest of the reply is sent as written. Speechify states that it does not train its models on customer data. We have asked it to confirm in writing how long it keeps the text and audio, and will update this page when it answers. We do not keep the audio it makes for you.
• DeepInfra, Inc. (Chatterbox Turbo and Kokoro text-to-speech): reads the tutor's reply aloud in Heart or Bella, or when the main voice's hours are used, only if you turn spoken replies on. Receives the words of the tutor's reply, sent from our server. Before sending, our server puts "you" in place of the name and nickname on your profile and takes out email addresses, phone numbers and links; the rest of the reply is sent as written. Does not store the text we send or the audio it makes, does not log their content, and does not train on them.

When we disclose information

We disclose personal information only in these cases:

• To the service providers on the Subprocessors page, only so they can do their job for us, under contracts that forbid any other use.
• To Meta or TikTok, if you came from one of their ads: the ad report described in If you came from an ad, and nothing else.
• When you ask us to: for example, a calendar app you give your private calendar link to, or Apple when you sign in with Apple or subscribe in the app.
• When the law requires it: to answer a valid subpoena, court order or other legal process, after checking that it is valid and asking for no more than it needs. Unless the law or an emergency stops us, we tell you first so you can object.
• To protect people: if we believe in good faith that someone is at risk of death or serious harm, or to report apparent child sexual abuse material to the National Center for Missing and Exploited Children, as the law requires.
• To protect Sancy AI: to enforce our Terms, stop fraud or abuse, or defend a legal claim.
• If the business changes hands: if Sancy AI LLC, a Texas limited liability company is part of a merger, acquisition, financing, reorganization or sale of assets, or goes bankrupt, your information may pass to the new owner. It must keep the promises in this policy for the information it receives. If it wants to use it in a new way, it must tell you first and give you the chance to delete your account.

De-identified and combined data

We may turn information into de-identified or combined statistics that cannot reasonably be linked to you, such as how many checks were started this week or the average score on a topic. We keep such data in de-identified form, do not try to re-identify it, and require anyone we share it with to do the same. We never de-identify your notes or sessions to train AI models.

How long we keep it

• Your account, synced study data, answer keys and accepted Terms: until you delete your account. If an account has no activity for 12 months, its study data and answer keys are deleted automatically. We email you about 30 days before, and signing in before then keeps them.
• A course you delete (its material, grades and flashcards, never its session history): kept for 30 days in Recently Deleted (You, Privacy and data) so you can bring it back, then deleted. Delete Now there removes it at once, and deleting your account removes it with everything else.
• A trial started before making an account (the course you added, its answer keys and your graded explanation): deleted with everything in it if it isn't saved to an account within 7 days.
• A sign-in that never finished the age question (an email address or Apple sign-in with no age group recorded): deleted after 7 days.
• An account paused because a session heard that its user is under 18: deleted with its data after 7 days unless our team confirms the user is 18 or over.
• Usage counts and spending records: 90 days.
• Counters that limit how often a request can be made: 1 day after they reset. A counter for an IP address or an email address is filed under a code made from it with a secret key, never the address itself, so the code can't be turned back into the address.
• An introductory offer (the $3.00 first week or a free trial) on an account you delete: a code made from its email address with a secret key, never the address itself and nothing else about you, kept 12 months so a new account with the same address isn't given the offer again, then deleted.
• Safety records (that a session was paused for safety, without its words): 90 days.
• Crisis counts (how many tutor replies each day were flagged for self-harm or distress, with no account and no words): 3 years, for the reports some state laws ask for.
• Product events, including an ad click number if you came from an ad: 24 months, then deleted, or sooner if you ask us to delete the click number.
• Ratings, and explanations you chose to share: 12 months.
• Notes you send with Report a problem: 12 months.
• The record of what you agreed to, with its IP address and browser: as long as your account exists, and it is deleted with the account.
• Payment messages from Stripe to our server: 90 days. Payment records at Stripe: as long as tax and financial law requires.
• Backups: our database is backed up daily, and each backup is kept for 7 days, so deleted data is gone from backups within 7 days.
• Canvas: the courses, dates and files you bring in, like the rest of your study data. A Canvas access code or calendar link: never kept. A school sign-in key (if you used one): until you disconnect it or delete your account.

California notice at collection

Over the past 12 months we collected the categories of personal information below, as California law defines them. For each: where it comes from, why we use it, and who receives it. How long we keep each is in How long we keep it above. We do not sell any of it. We share a small part of it for cross-context behavioral advertising, as the last item below says, and we do not disclose any of it for any purpose other than those listed.

• Identifiers (your email address, account ID, IP address, the Apple relay address if you sign in with Apple): from you and your device; to make and secure your account and send sign-in codes; received by our database, hosting and email providers, and Apple when you sign in with it.
• Customer records and commercial information (your plan, whether it is active, whether you used an introductory offer): from you, Stripe and Apple; to run your subscription; received by Stripe or Apple.
• Education-related and user content (your material, sessions, answers, scores, flashcards and exams): from you; to tutor you and run your account; received by our database provider and, for each step, our AI provider.
• Inferences (the short learner profile that describes how you study): made by our AI from your sessions; only to tutor you; received by our database provider and our AI provider.
• Internet and other activity (product events, usage counts, request logs): from your device; to run, secure and improve Sancy AI and cap spending; received by our database and hosting providers.
• Audio (your voice, only while you hold the talk button): from your device; turned into text in real time and not kept by us; received by the speech-to-text service.
• Coarse location (the country your request comes from, and your state if you tell us): from your device and from you; to keep Sancy AI in the US and follow state law; received by our hosting provider.
• Characteristics (your age group, never your birth date): from you; to make sure you are 18 or over.
• Shared for cross-context behavioral advertising, only if you came from a Meta or TikTok ad (identifiers and internet activity): the ad's click number, a coded version of your account number, and that you signed up; from your device and our records; to tell the platform its ad worked; received by Meta or TikTok. You can opt out by sending Global Privacy Control or by emailing privacy@sancyai.com (see Your choices and rights). Sancy AI is only for people 18 and over, so we do not knowingly share the information of anyone under 16.

Sensitive information

We do not ask for sensitive personal information, such as health, racial or ethnic origin, religion, sexual life, precise location, government ID numbers, financial account numbers or biometrics, and we ask you not to put it in your material or sessions. If some reaches us anyway because you put it there, we use it only to provide Sancy AI to you, as you asked, and never to infer anything about you. Because we use sensitive information only in the ways the law allows without an opt-out, there is no need for a "Limit the use of my sensitive personal information" link.

Consumer health data

Sancy AI is not a health service and does not try to collect consumer health data as defined by Washington's My Health My Data Act, Nevada's SB 370 or Connecticut's law. If you put health information in your material or sessions, for example notes for a nursing course that mention your own condition, we use it only to provide the tutoring you asked for, we never sell it, never use it for ads and never share it except with the service providers that run Sancy AI. You can see, export and delete it as described below, and you can withdraw your consent by deleting it or your account.

If you came from an ad

We advertise Sancy AI on Meta (Facebook and Instagram) and TikTok. When you click one of those ads, the platform adds a click number to the link. If you then sign up, we use that number to tell the platform its ad worked, so it can show our ads to people more likely to want them.

• What we send: the click number, that you signed up and when, and a coded version of your account number. Never your email address, name, IP address, browser details, whether you start a trial or pay, or anything you study, write or say.
• Who it is for: only adults, and only if you came from one of those ads. Nobody else's information is sent.
• Who gets it: Meta Platforms, Inc. or TikTok, whichever ad you clicked. They are not our service providers. They use what we send under their own privacy policies, including to measure ads and improve how ads are shown. Under state privacy laws this counts as sharing for targeted advertising.
• Your choice: if your browser sends Global Privacy Control, we do not keep the click number and send nothing. Or email privacy@sancyai.com from the address on your account and we delete the click number we hold and send nothing more. What a platform already has is handled under its own policy, and you can also use its ad settings.
• How long we keep the click number: with your product events, 24 months, or until you ask us to delete it.

No selling, and no ads in Sancy AI

We never sell your personal information, for money or anything else, and Sancy AI shows no ads. The only thing we share for advertising is the ad report in If you came from an ad, and only for people who came from one of those ads. Nothing else you do in Sancy AI is shared for advertising.

• No sale of personal information, and no sharing of it for targeted (cross-context behavioral) advertising except the ad report above.
• No ads of any kind inside Sancy AI, targeted or not.
• No advertising pixels, session recordings or chat widgets on Sancy AI, and no analytics in the app. Only the front page of our website counts visits, with Vercel Web Analytics, which uses no cookies.
• No profiling that has legal or similarly significant effects on anyone, and no such decisions made by automated means.
• No precise location. We know only the state you tell us and the country your request comes from.
• No design meant to keep you hooked: no streaks to keep and no nudges to come back.

Student data

Whatever your age, we use what students put into Sancy AI only to tutor them and run their account. We never sell student data, never use it for targeted advertising, and never build a profile of a student for any other purpose. The ad report in If you came from an ad never includes any of it.

Under 18

Sancy AI is only for people 18 and over. We do not knowingly collect personal information from anyone younger. If a session hears that you are under 18, your account is paused at once and our team reviews it: unless the team confirms within 7 days that it belongs to someone 18 or over, the account and its data are deleted automatically. If we learn in any other way that an account belongs to someone under 18, we delete it and its data; an account of someone under 13 is deleted as soon as we learn of it. If you think a minor is using Sancy AI, tell us at privacy@sancyai.com.

Your choices and rights

• See and get a copy: email privacy@sancyai.com from the address on your account, and within 45 days we send you one file with your courses and profile and everything our servers hold about your account: your account settings, what you agreed to, usage counts, ratings and notes you sent, your synced study data (what your tutor remembers included; anything kept only on a device and never synced is not on our servers, so it can't be included), a list of your answer keys, the lectures our server kept for them, whether you made a private calendar link and when, any free trial saved into your account, and usage events. Left out: what each answer key says (it stays hidden so it can't be used to look up answers; it is built from your material, which is included), the answer kept with a Show it question, for the same reason, the secret parts of your calendar link, the token we keep only to end Sign in with Apple when you delete your account, internal bookkeeping such as when we last emailed you a reminder, and short-lived counters that limit how often something can be done.
• Correct: edit your profile, courses and notes in the app, or ask us.
• Clear what your tutor remembers: You, then Privacy, then Tutor Memory. Your tutor forgets your past mix-ups, what you marked as helpful and how you study, on every device. Your courses and grades stay.
• Delete: You, then Privacy and data, then Delete account removes your account and everything tied to it, notes included, at once. Copies in backups are gone within 7 days. The one thing kept: if the account had the $3.00 first week or a free trial, a code made from its email address (see How long we keep it).
• Delete what was said in past sessions: deleting a course in the app removes its session history, or email privacy@sancyai.com and we delete the transcripts held with your account.
• Opt out of ad reports (sharing for targeted advertising): send Global Privacy Control from your browser, or email privacy@sancyai.com from the address on your account. We delete the click number we hold for your account, send nothing more to Meta or TikTok, and confirm by email.
• Stop sending anything to the AI: delete your account in You, under Privacy, or in the iPhone and iPad app turn AI tutoring off in You, under Your data.
• Email: unsubscribe from non-essential email with the link in any such email. Account emails, such as sign-in codes and notices the law requires, still arrive.

Asking us, and appealing

For a copy of your data, or anything you cannot do in the app, such as asking what we hold about you, email privacy@sancyai.com from the address on your account, or have an authorized agent write for you. We may ask you to confirm that you control the address. We answer within 45 days. If we need more time, which some state laws allow, we tell you why within those 45 days. We do not treat you differently for asking.

If we turn down any part of your request, we tell you why and how to appeal. To appeal, reply with Appeal in the subject line. We answer an appeal within 45 days and tell you what we decided and why. If you are still not satisfied, you can contact your state's attorney general.

Your state's privacy laws

Depending on where you live, state law may give you more rights. These short notes cover the states whose laws most often apply to a study app like ours.

• Texas, Colorado, Connecticut, Virginia, Oregon, Montana and the other states with consumer privacy laws: you can ask to confirm whether we process your data and to see, correct, delete or get a copy of it, and to opt out of sale, targeted advertising and profiling that has legal or similarly significant effects. We do not sell personal data and do not profile in that way. The ad report in If you came from an ad counts as targeted advertising, so you can opt out of it as described in Your choices and rights, and we treat Global Privacy Control as that opt-out. You can appeal as described above. We do not sell sensitive personal data.
• Nevada: Nevada residents (and anyone) can send a "do not sell" request to privacy@sancyai.com. We will confirm it, although we do not sell personal information.
• California: we treat a Global Privacy Control signal as your request to opt out of sharing for targeted advertising: it stops us keeping an ad click number and sending the ad report. We also skip our front-page visit counting when your browser sends Global Privacy Control or Do Not Track, which is how the California Online Privacy Protection Act asks us to say we respond to Do Not Track. We do not track you across other sites, and we let no other company track you on Sancy AI.
• California "Shine the Light": we do not disclose personal information to anyone for their own direct marketing, other than the ad report in If you came from an ad, which Meta and TikTok use to measure ads.

Security

Data is encrypted in transit and at rest with our providers. Access to production data is limited to the people who need it to run Sancy AI. The full answer keys are never sent to the browser while you study, and every tutor reply sent back for grading is signed so it cannot be changed. No system is perfectly secure, so we cannot promise that your information will never be accessed without permission.

If a breach affects your personal information, we will tell you by email without unreasonable delay, and within the time the law sets (in Texas, no later than 60 days), and tell the authorities the law requires us to tell. The notice says what happened, what information was involved, what we are doing and what you can do.

Outside the United States

Sancy AI is offered only to people in the United States, and sign-up is not available elsewhere. Our database and the services we use are in the United States, with two exceptions. Speechmatics, when it is listed above as a backup speech-to-text service, is a United Kingdom company, but your audio goes to its United States service. Vercel, which hosts the app, may run our server code in the location of its network nearest to you, which can be outside the United States if you use Sancy AI while traveling.

Links to other sites

Sancy AI may link to other websites and services, such as a textbook's source or your calendar app. Their own privacy policies apply to what they collect, and we are not responsible for them.

Changes to this policy

If we change this policy in a way that matters, we will email you at least 30 days before the change takes effect and show you a short notice in the app the next time you sign in. We will not use information we already hold in a materially different way without your consent. The date at the top says when it last changed.

Contact us

Sancy AI LLC, a Texas limited liability company, 14153 Doonan Xing, Frisco, TX 75035. Privacy questions and requests: privacy@sancyai.com. Everything else: support@sancyai.com.