Your Privacy Matters
AvaStudy is a personal study app designed for students. We take privacy seriously — especially for younger users — and we are committed to being transparent about how your information is used.
Privacy & Safety at a Glance
- No ads. No data sales. Ever. We do not run ads, sell your data to third parties, or share your information for marketing purposes. Your data is used only to make the app work for you.
- Your content is not used to train AI. An AI reads your notes and photos to build your guide. Per Anthropic's API terms, that content is not used to train its models. Details
- Parents can see what their child sees. A linked parent can see progress, grades, the Study Tutor conversation and Teach Me lessons, and the Study Tutor and Teach Me tell the child so. Details
- Teachers see only their own class. Your name and how you are doing on the guides assigned in that class, not your pet, coins, streak or anything outside it. Details
- Stored securely. Your data lives in Google Firebase, which encrypts it in transit and, for the services we use (Cloud Firestore, Authentication and Cloud Storage), at rest. Details
- You can delete it all. A parent can delete a child's account and everything in it at any time. Details
- Children 12 and under do not make their own account. A parent or guardian creates it, and we collect only a first name, a grade, a birth month and year (kept private) and what the child studies. AvaStudy is designed to respect COPPA and FERPA. Details
Who This App Is For
AvaStudy is for students and the parents and teachers who help them. Students 13 and older can create their own account. Students 12 and under cannot: a parent or guardian creates the account from their own AvaStudy account, and the child signs in on their device with a code or QR code the parent gives them. Parents and teachers must be 18 or older. We ask for this when an account is made. What we keep about it is listed under What We Collect.
Children 12 and under. When a parent or guardian creates an account for their child, they confirm that they are the child's parent or legal guardian and consent to our collecting and using the child's information as this policy describes. For that account:
- What we collect: the child's first name, grade, and birth month and year (kept only on our servers); what the child studies (uploads, a topic they type, game results and progress); and anything they type to the Study Tutor or in a game that asks them to explain something. No email address, and no Google account.
- How we use it: only to run the app for the child: to build their study material, save their progress and show their parent how they are doing. Never for ads, never sold, and never to build a profile for marketing.
- Who receives it: the services listed under Third-Party Services act for us: Anthropic's Claude AI receives what is uploaded or typed for the child, by the child or by you, so it can build and check study material; Google Cloud Vision checks uploaded photos for adult, violent or racy content; Google Firebase stores the account. Amplitude receives only short anonymous events, never connected to the child. We do not share a child's information with anyone else.
- What a parent can do: see the child's progress and Study Tutor conversations from their own account; ask us to correct or delete what we hold about their child; and stop any further collection by deleting the child's account (see below), which erases everything. We do not require a child to give more information than a feature needs.
If you are a parent or guardian and believe your child has an account you did not create, please and we will delete it and everything in it promptly.
Parents can have a child's account deleted at any time. If you created your child's account in AvaStudy, open your child on your Home screen and tap Delete Account at the bottom of their page: that deletes the child's account and everything in it, and only the parent who created it can do this. Settings → Parents & Safety → Delete Account deletes your own account, not your child's; if you are the only parent of a child you created, you will be asked to confirm that their account is deleted with yours. If your child made their own account and you linked to it, you can remove your link, but you cannot delete their account from yours: sign in to their account and use Settings → Parents & Safety there, or and we will take care of it.
What We Collect
- Your Google account name and email, or the email address you use to get a sign-in link (used only to identify your account). A child's account that a parent created has no email address: the child signs in with a short-lived code or QR code the parent issues.
- Birth month and year: asked of a student when they sign up, and of a child when a parent creates their account, to tell whether the account is for a child 12 and under, a teen (13 to 17) or an adult. We keep the month and year only, not the exact day. It is stored where only our servers can read it, so it is never shown in the app to you, a parent, a teacher or a classmate, and it is deleted with the account. It is used to apply age-based protections and to connect parent and child accounts, never for anything else. A student who tells us on our sign-up page that they are 12 or under is asked to have a parent set up the account, and we do not keep that answer. Parents and teachers confirm they are 18 or older with a tick instead, and we keep no birth date for them. An existing account that has not answered is asked once.
- A one-way fingerprint of your email address, kept only to spot duplicate accounts. We treat the spellings Gmail lets one inbox have (dots, a +tag, or googlemail.com) as the same address, scramble it with a secret key that only our servers hold, and keep the result with your account ID. The address cannot be read back from it. If two accounts share a fingerprint, our team can see them together on a private list; nothing is blocked or taken away automatically. We do not use your IP address or your device to link accounts, we do not use the fingerprint for ads, and we do not share it. It is deleted with your account. A child's account that a parent created has no email address, so it has no fingerprint.
- The age group of an account (12 and under, 13 to 17, or 18 and over) and how we learned it. It is kept with the account and deleted with it.
- Sign-ins that never finish. If someone starts to sign in but never completes setup (for example, never answers the age question), no account is made, and we delete that sign-in, including its email address, after 24 hours. Nothing else was stored.
- Study content you upload — photos of notes, PDF files, pasted text, or a topic you type — used to generate your games. Uploaded files are stored in Firebase Storage and sent to the Claude AI API for processing.
- Pictures from your uploads: when a photo contains a diagram, map, or labeled picture, we may cut that part out as a small cropped image, store it in Firebase Storage, and show it in games built from the guide. Anyone who plays that guide, including classmates in a class you share it with, can see those pictures. Before an uploaded photo is stored or cropped, it is sent to Google Cloud Vision's SafeSearch to check for adult, violent, or racy content; a photo that can't be cleared is left out and the guide tells you which one. This check applies to photos, not to pages inside PDFs.
- Short answers and explanations you type during certain games (for example, explaining a concept in your own words to your pet) — sent to the Claude AI API to check them against your own study guide, then stored with that game session. These are not conversations and are not used for any other purpose.
- Your in-app progress: coins, XP, streaks, badges, Season Path progress, Magical Pack balances and openings, and game history
- Subscription status — whether you are on the free or paid plan. Payment information is handled entirely by Stripe and is never stored by AvaStudy.
- Push notification preferences and device token — only if you choose to enable push notifications. This is entirely optional and can be turned off at any time in your device settings or in-app Settings.
- Game scores saved to shared-set leaderboards (only when you join a shared set)
- Weak-area tracking: which questions you miss most, stored per study guide to personalize practice and daily quizzes
- An optional test grade you type in for a study guide — private from other students. A linked parent and the teacher of a class the guide is assigned to can see it, labeled as self-reported; a teacher who shared a guide with you but did not assign it to a class cannot. A teacher can also record, or confirm, the grade you got on a real test for a guide assigned to their class; that is the teacher's own record, which you and a linked parent can see (labeled as entered by the teacher) and you cannot change. A parent can also record a grade for their child, which the child and the teacher can see (labeled as entered by a parent) and the child cannot change. Each guide has one grade; whoever entered it is the one who changes it, and a teacher's entry replaces any other. It is stored with that guide and used to show you how your practice related to the result. If a parent is linked to your account, they can see the grades on your guides, including your most recent on their dashboard and in the weekly parent email, and can add a grade on a guide they made themselves.
- App preferences and feedback you give us: your chosen visual theme, star ratings for a game, accuracy flags on a study guide, questions you report as wrong, and the reason you give if you cancel a subscription — used only to improve the app and, for a reported question, to fix that specific guide. You see in the app what happened to a report: fixed, removed, or looked at and kept.
- Updates: a short list of what changed for you, such as a guide assigned to a class, a due date or test date set or changed, a test grade entered, a guide where you have mastered every topic, or a class archived. You see it on your class pages; a linked parent sees them on their report. The app shows the last 60 days, and the list is deleted along with the rest of your data when you delete your account.
- Study time records: for each day you chat with the Study Tutor, take a Teach Me lesson, ask Ava Analogy for an analogy, work on a crossword, or read or edit a study guide, we save how many messages you sent, analogies you asked for or words you solved, how many separate sittings that was, and an estimated time studied, counted from the gaps between your messages, analogies or saves (and only a few minutes for any one gap). For reading and editing a guide we count only the seconds the page is open on your screen and you are touching, scrolling or typing, per guide and per day, and nothing about what you read or wrote. For a live game or a Practice Test we also save how long it took. They feed the study time on My Stats, the weekly progress emails, the break reminder and a linked parent's report; they hold no message text. Deleting your account deletes them.
- When we last showed you a break reminder. After a long stretch of studying, a student can see a short note on the results screen suggesting a break, at most once a day. We save that one timestamp so the note does not repeat on your other devices.
- A daily activity record: for each day you use the app, which kinds of actions you took (for example, played a game, entered a grade, opened a guide) and when first and last. We use it to tell whether an account is active and to keep our usage counts accurate. It is kept on our servers for our own use, is not shown to teachers, classmates or parents, and is deleted with your account.
- Usage analytics: which features you use, pages you visit, and in-app events, collected to help us improve the app. For a child's account there is no automatic collection of pages or taps; only the app's own short events, with no study content or names. Details
- How you found us: the page you signed up from, the site you arrived from, and any campaign tags on the link you clicked (including a Google Ads click id, if you came from an ad). This tells us which of our own pages and posts bring people in. It is never used to build a profile of you, is never shared, and no ads are shown to you in the app.
- If you ask about pricing for a school or organization on our For Schools page: your name, work email, the organization's name and type, the rough number of teachers and students, and your role and message if you give them. We use them only to reply to you about licensing. They are not shared, and you are not added to any mailing list. You do not need an account to send one; if you are signed in when you do, the request is linked to your account.
- If you are a teacher who signed up through a link on a flyer or email we sent your school, or a student who joined a guide shared by such a teacher, your account is tagged with that school's code. We use it only to see, in aggregate, whether outreach to a school is working. You can view or clear it in Settings. The domain of your sign-in email is also recorded for the same aggregate purpose.
How We Use It
Your data is used only to make the app work for you — to save your progress, generate your study content, and personalize your experience. Two services receive your content, and only to do the job described here. Anthropic's Claude AI API processes your uploaded study material to generate games and checks the short answers or explanations you type in certain games against that material, writes Ava Analogy's comparison for a term you pick, and runs the Study Tutor and Teach Me, so what you type there is sent to it. An analogy is saved and shared with anyone who asks for the same term and grade level; it holds no one's name. Google Cloud Vision receives uploaded photos, for the safety check only. No personal identifying information is ever included in those requests.
When you are part of a shared study set, your best scores per game type are visible to other members of that set on the leaderboard. Your display name and pet are shown alongside your score — no email address or any other account information is visible to other members. Leaving a shared set removes you from its leaderboard.
Study set creators can see the display names of users who have joined their shared set. Members of a shared set can see each other's display names and scores on the leaderboard. Shared sets are accessible only via a private code — they are not publicly searchable or discoverable.
Once someone joins a set you shared, the person who created it can also see how the set is going overall: who has joined, who has started playing, and how many members are still finding each concept difficult. These concept figures are totals only. The creator is never shown which individual member missed which question, and never sees another member's personal progress, confidence scores, or practice history. Scores shown to the creator are the same best-per-game scores already visible to every member on the leaderboard.
What a Teacher Sees in a Class
A teacher can create a class — a roster joined by a code — and assign study guides to it, optionally with a due date. When a student joins a class or plays an assigned guide, the teacher who owns that class can see, for that class only:
- the student's display name;
- which assigned guides the student has completed, started, or not opened;
- the student's best score and time spent on assigned guides;
- how often the student practiced the assigned guides this week compared with last week, which days and times of day the class tends to study, and a streak counted only from days the student practiced those assigned guides;
- which concepts within the assigned guides the student is still finding hard;
- results of any live class game the student played.
A student's own My Classes page shows the student only their own results in a class: their guides, what is due, and updates about their own work. That is the whole list. A teacher never sees a student's pet, coins, overall streak, level, badges, Season Path progress, other study guides, personal practice history, self-logged test grades, or anything the student does outside that class. Question-by-question answers are never shown for an individual student — concept figures are the student's own mastery on the assigned material, not a transcript. This boundary is built into the product and cannot be turned off by a teacher or an admin.
A teacher can post a text message to the whole class — a reminder or a note — which students see on their dashboard and in their class list, and which is also emailed in full to the parents or guardians linked to students in that class (a parent can turn those emails off in Settings). This is one-directional: students cannot reply, message the teacher, or message each other, and no student contact information is collected or shown. A student can turn off the push notification for these in Settings.
A teacher can also tap a quick emoji reaction onto one student's row of an assignment. Like a class message, this is one-directional — the student sees which emoji and on which assignment, but cannot reply — and no note or free text is attached to it.
When a teacher posts a message to a class or records or confirms a student's test grade, the parents or guardians linked to that student receive a short in-app notice that it happened (for a grade, the percentage and the guide's name). When a student or parent logs a grade for a guide a teacher assigned, that teacher receives a notice that a grade is waiting to be confirmed.
From the class's Pulse view a teacher can also see which students have not practiced on the class guides this week, and which concepts the class has mastered, and can send a student a quick, positive shout-out — for example for practicing several days in a row. It is a one-way notice with fixed wording and no free text. Students in a class see only counts for the class as a whole there (how many classmates studied this week and a shared weekly goal) — never a classmate's name or numbers.
A teacher also gets two passive notes about their classes: at most one a day saying how many students joined (a count and the class name, never a student's name), and a note when students flag several questions on a guide. Both appear on the teacher's Home, and the joined note can also arrive as a push if the teacher has class push notifications on.
Separately, the app-wide Pulse (beta) shows every signed-in user anonymous totals across all learners — how many are studying, which games are popular, what subjects people study, how many concepts learners mastered, how many are on a streak or have a test coming up, and a shared weekly goal. A count appears only when enough different learners are behind it. It never shows a name, a study guide, or a score, and a subject appears only when enough different learners study it. Where you stand compared with everyone is shown only to you.
A student can leave a class at any time from their Classroom or Stats page, which removes the teacher's access to their progress in it. Assigning students to a class is the teacher's responsibility: by doing so they confirm they have the authority to enroll those students and have obtained any parental consent their school or local law requires.
What a Parent Sees on a Family Plan
A child's account is connected to a parent in one of two ways. A child who made their own account links a parent by sharing a code the child generates from their own Settings → Family screen; a parent cannot link that account without a code: either that one, or, on the Family plan, an invite code from a parent who is already linked to that child. Or a parent can create an account for their child, in which case the parent is connected from the start. The child is told when a parent is added, and a child who made their own account can remove them at any time. Once linked, and for as long as the link stays active, the parent's dashboard shows, for that child only:
- the child's display name and how recently they were active;
- how many of the last seven days they were active, their current streak, and how many study guides they have active;
- every assignment due in the last 30 days or still coming up, with the guide title, class name, due date, and whether it was turned in on time, turned in late, started, not started, or is overdue;
- the classes the child is in (the class name, the teacher's name, and the subject), and for each one on the parent's Classes page, the guides assigned in that class, what is due, a short list of updates (a guide assigned, a due date set or changed, a test grade entered, every topic of a guide mastered), and the child's own games, answers, scores and concept progress on those guides. A parent sees only their own child's results in a class, never other students';
- tests the child has put on their own calendar in the next two weeks (the guide title and date), including a date a parent set on a guide they shared;
- all-time totals (study time, games, study sessions such as Strengthen, practice tests, the Daily Quiz and a sitting with the Study Tutor or Ava Analogy, questions answered, and overall mastery) and this week's totals (active days, games, study sessions, study time, and accuracy compared with the week before);
- a What's Due list that combines homework and tests, and an Updates list of what changed for the child;
- the most recent real-world test grade the child chose to log, or that the child's teacher or a parent entered for them (labeled as such), if any;
- for each guide, the child's readiness percentage and which concepts are mastered, getting there, needing work, or not yet started, listed by name, with a one-line definition from the child's own flashcard when the parent taps a concept;
- practice-test scores the child's own device records on a guide, shown labeled as self-reported because nothing verifies them;
- a calendar of which of the last seven days the child studied and how many games they played, their best streak, and their six most recent games (the game, the guide title, the date, and the score only when it is a verified one);
- on a guide the parent shared with the child: the child's games played and best score on that guide, next to their concept progress;
- the full text of any Study Tutor conversation or Teach Me lesson the child has had on a guide, in the same transcript view (Teach Me lessons are labeled Teach Me) — Study Tutor tells the child up front, the first time, that a linked parent can read it. We keep a count of how many times a parent has opened these conversations and when last, never what they said.
A parent can also turn on Heads-Ups (Settings → Notifications, off by default). Then, at most once a day, the parent gets a push notification and an email if a linked child has not studied for a few days (no more than once a week), or has a test within two days and is not yet ready for it (once per test). A parent who has not turned this on is never sent these.
A paying parent who has not opened their child's report in about two weeks may get one gentle reminder to take a look, as a push notification if they have one on, otherwise as an email. It goes out at most once every 30 days, stops after a few months of quiet, and is not sent to a parent who has turned off Re-Engagement in Settings → Notifications or unsubscribed from email.
On a guide a parent made and shared with their child, the parent can set the child's test date (the child is told, sees that a parent set it, and can change it at any time). A linked parent can also record the grade their child got on a real test, for a guide the parent made; whoever made a guide is the one who adds its dates and grade, so on a guide the child or a teacher made the parent can see the grade but not add one. The child sees it labeled as entered by a parent and cannot change it, and the child's teacher can see it for a guide assigned to their class. A grade a child did not log themselves is either that or one their own teacher records for a guide assigned to the class.
A parent who keeps the weekly email digest on (Settings → Notifications, on by default for a parent account) also gets, once a week, a report-card-style summary: games played, study sessions, question accuracy and how it compares to the week before, which days were active, roughly how long they studied, the titles of the guides they practiced, which concepts are mastered or still need work, and homework turned-in/late/overdue counts and what's due soon. The digest itself is a summary, never a question-by-question transcript — Study Tutor conversations are read on the parent's dashboard, not emailed.
A parent sees a small picture of the child's study buddy next to their name (its look only).A parent never sees a child's coins, Season Path progress, question-by-question game answers, or the full content of any study guide: only the concept names and one-line definitions described above. An AvaStudy Family subscription covers Unlimited access for up to 4 linked children, billed to the parent's account. On the Family plan a child can also have a second linked parent or guardian; each linked parent sees the same things described above (if no linked parent is on Family, the later parent's view is paused until one is), and a child who made their own account can unlink any of them at any time from their own Settings → Family, which immediately removes that parent's access to that child's progress. For an account a parent created, the parent who created it manages who is connected: the child cannot disconnect a connected parent, and other connected parents can remove only themselves. If that parent also shared guides with the child, the child is asked whether to leave them too, because the owner of a shared guide can see the child's progress on it until the child leaves it.
Account Security
Access to your account is authenticated through Google Sign-In, a sign-in link emailed to you, or, for an account a parent created for a child, a code or QR code the parent issues on the child's device. We use Firebase security rules to ensure that only you can read or modify your own account data, study sets, and progress. Other people can see only what this policy describes, such as a linked parent or the teacher of a class you join.
Data Storage
Your account data and study content are stored securely using Google Firebase. Uploaded photos and PDFs are stored in Firebase Storage; your progress, scores, and game data are stored in Firestore. Only you can see your account data and study sets unless you share them or connect with a parent or a teacher's class, which then see what this policy describes.
The app also uses your browser's local storage to remember small preferences — such as which challenge nudges you've dismissed and which "how to play" tips you've already seen. This data never leaves your device.
Data Retention
When you delete a study set, it is removed from your library right away, and there is no undo. We delete its title, topics, pasted text, cards and questions, the photos and PDFs you uploaded (including earlier versions replaced when you refreshed it) and the pictures cut from them, its leaderboard, its Study Tutor chats, its game puzzles, and everyone's progress on it.
Copies of it in other places are cleaned up too. The questions and typed answers saved in game history for it, the concept names in practice-test and quick-check results, Study League questions and crossword answers are erased. Anywhere its name was shown to someone else (a student's closed card, an in-app notice, a class practice test or a live-game report) it now reads “Deleted guide”, and a class practice test or live-game report no longer shows its questions. Scores are kept everywhere: your game history totals, a teacher's practice-test and live-game results (who took part, each score and the class average), and Study League wins and losses.
We keep only a small record that it existed: its ID, your account ID, when it was created and deleted, its type, and counts such as how many cards it had, so your free-guide total and our usage figures stay right. If you made a copy of it with Duplicate, the photo and the pictures that copy still shows are kept until the copy is deleted too; nothing else is kept for it. Push notifications and emails that were already delivered (for example, a weekly summary that named it) cannot be taken back.
If someone reported a question from it as wrong, the report is kept as a moderation record: the question and answer choices they saw, their reason and note, when it was reported and resolved, any fix we made, and the reporter's account ID. Only AvaStudy administrators can read reports. We keep them to check that a fix worked and to spot repeated problems. The extra evidence saved with a report (what the screen showed) is deleted 90 days after the report is closed, or right away when the study set is deleted. The report itself has no fixed end date yet; the reporter's account ID is removed from it when they delete their account.
When you delete your account, your data is erased immediately and cannot be recovered, apart from the few things listed under Deleting Your Account below.
AvaStudy does not keep database backups or exports, so deleted data cannot be restored from one. Our database (Google Cloud Firestore) keeps the previous version of a changed or deleted record for up to one hour, a built-in Google setting, and Google Cloud Storage keeps a deleted file for 7 days before it is permanently removed. Google also keeps system logs for up to 30 days; those logs can include technical details such as an account ID and are used only to run and secure the service. A separate Google audit log of changes to our cloud setup is kept for 400 days; it records what our team changed, not your study material. Every uploaded photo or PDF, and every picture cut from one, is removed automatically a year after it was saved, which also catches any file no study set uses any more (for example, from an upload that never finished), and all of them are removed right away when you delete your account.
A school pricing request, and our replies to it, are kept so we can follow up with you about licensing. Ask us at any time, by replying to our email or through , and we will delete it: your name, email, organization, role and message are removed, and all we keep is the organization type, the rough size ranges and the date, which identify no one and let us count requests. We may also receive a school pricing request by email; that email copy is deleted too when you ask. If you were signed in when you sent it, deleting your account does the same.
Inactive accounts are not automatically deleted. The one exception is a sign-in that never finished setting up an account, which is deleted after 24 hours (see What We Collect). Your account and data remain stored as long as your account exists. You may delete your account at any time as described in the Deleting Your Data section below.
When You Leave a Class or a Shared Guide
When you leave a class, a teacher removes you, a guide is unshared, or a class is deleted, we keep your own learning progress on those guides in a private archive tied to your account, so it is not lost and comes back if you rejoin. The archive holds your concept progress, your scores and the learning details from your game history on that guide, and any test grade you logged. You can see all of it. A parent or guardian linked to your account sees the progress in it (not the archived test grade) in the same progress report they already see, where it is marked as a guide you left and is never counted as an active guide. The teacher or guide owner cannot see it, and nothing in it is added to their reports after you leave.
The teacher keeps a limited record that you were in the class: your name as it appeared, when you left, your attendance, and the results of assignments you completed (when you finished, whether it was on time, and your score at that moment). That record never includes your concept progress, best scores, test results, or tutor chats, and it is not shown in the class's current lists, totals or averages. It is kept for as long as the class exists and is deleted when the teacher deletes the class or their account; if you delete your account, your name is removed from it. When a teacher deletes a class, its roster, assignment tracking, attendance, class messages, practice tests and live-game history are deleted with it; the coins and scores a student earned stay with the student.
You can delete the archive for a guide by choosing Delete Saved Progress Too when you leave a shared guide, or when you remove the closed guide from your list after leaving a class; a linked parent then sees nothing for that guide either. When you delete your account, your archive is deleted with it.
What You Can Upload
AvaStudy supports the following file types for study guide creation:
- Photos / images — JPG, PNG, or other common image formats
- PDF files — typed or scanned documents
- Pasted text — copy and paste directly from any source
Word documents, PowerPoint files, and other formats are not currently supported. Please do not upload files containing sensitive personal information — only your study material is needed.
Third-Party Services
AvaStudy uses the following third-party services to function. Each provider receives only the minimum data necessary to perform their specific function — none of them receive more information than what is described below.
- Google Sign-In — for authentication. We receive your Google account name and email address. You can instead sign in with a link emailed to you (sent through Amazon SES, below).
- Firebase (Google) — for secure data storage, authentication, and push notification delivery.
- Stripe — processes subscription billing for paid accounts. Your payment information (card number, billing address) is sent directly to Stripe and never stored by AvaStudy. Stripe may store a customer ID to manage billing. See stripe.com/privacy.
- Anthropic Claude AI API — converts your uploaded photos, PDFs, pasted notes, or a topic you type into flashcards and games, and checks the short answers or explanations you type in certain games against your own study guide, writes the short analogy Ava Analogy shows for a term you pick, and answers in the Study Tutor and Teach Me lessons (for an analogy: the term, the guide's title and, when the term is one of the guide's cards, its meaning, with the grade you chose in your profile; for the Study Tutor and Teach Me: the words you and the tutor exchange; never your name or email). That content is transmitted to Anthropic's servers for processing. No personal identifying information — such as your name or email — is included in these requests.
Per Anthropic's commercial terms, content submitted through the API is not used to train Anthropic's models. How long Anthropic keeps API inputs and outputs, and why, is set by Anthropic's own policies; see anthropic.com/privacy. - Google Cloud Vision (SafeSearch) — checks photos you upload for adult, violent, or racy content before they are stored or cropped for use in games. It is used only for that safety check.
- Amazon SES — delivers the emails AvaStudy sends you: the sign-in link you ask for, a welcome message, a note when a study guide finishes processing, streak and come-back-and-study reminders, a nudge a few days after you sign up if you have not made a study guide yet, a note if a study guide could not be built or if we add free uploads to your account, a one-time note when a feature you asked to be reminded about opens up, and subscription notices such as renewals, payment problems, a heads-up about a week before a subscription you set to cancel stops, and cancellations, plus our replies to a support message or a school pricing request. Your email address and first name are transmitted to Amazon to send these. We never send marketing email from third parties, and we never share your address with anyone else.
Every one of these can be turned off in Settings → Notification Preferences, except messages required to run your account, such as billing notices. - Amplitude — product analytics that shows us which features are used and where people get stuck. What it collects depends on who is using the app:
- Before we know who you are (you are signed out, or your account has not finished loading): the pages you view, when a visit starts and ends, and the site or campaign you arrived from. It does not record what you click or type, and it is not tied to an account. If you sign in without reloading the page, this basic collection continues, still not tied to your account, until the page next loads.
- A child's account (an account a parent created, a student in kindergarten through grade 8, or a student whose grade we do not know yet): no automatic collection. The app sends only its own short events, such as a game finished with its score and game type, a count, a timing, whether an answer was right, and a guide's ID. These events are not connected to your account: we do not tell Amplitude who you are.
- Other signed-in accounts (teachers, parents, and students in grade 9 and above): the pages viewed, visit start and end, the campaign you arrived from, when a form is started or submitted (never what was typed), file downloads and page load times, plus the app's own events, connected by account ID when you were already signed in as the page loaded.
Amplitude may collect standard device and browser information as part of its operation, and works out an approximate location from your IP address. We do not use session recordings, screen recordings or heatmap tools.
Deleting Your Data
You can delete individual study sets at any time from within the app. You also have the right to permanently delete your entire account and all associated data at any time.
To delete your account, go to Settings → Parents & Safety → Delete Account. Confirming will immediately and permanently erase:
- Your profile, name, and all account settings
- All coins, XP, streaks, badges, Season Path progress, Magical Packs, and game history, including every individual game session
- Your pet, every pet you collected, and all owned accessories
- All study guides you created — their content, their leaderboards, their Study Tutor transcripts, and the photos or PDFs you uploaded to make them
- Your progress, logged test grades, accuracy feedback, and Study Tutor history on study guides you joined that someone else created
- Your daily quizzes, missions, board progress, saved notification devices, referral code, the one-way email fingerprint we keep to spot duplicate accounts, and any support messages you sent us from your account
- If you are a teacher: every class you own, including its roster, attendance records, assignments, class messages, practice tests, and live-game reports. Students in those classes are removed from them
- Your membership in any class you joined, every parent or child link on your account, and your birth month and year
A few things are not erased, because they belong to other people or the law requires them. Your entry on a shared study set's leaderboard stays as an anonymous “Former Player” row (your name and pet are removed; only the score remains, so the creator's ranking is not changed). A teacher's attendance record for a class you attended keeps the date and status but not your name, and class practice-test scores and live-game reports a teacher already received stay in that teacher's records (a live-game report may still show the display name you played under). Bug and question reports you filed are kept without your identity. We keep a minimal deletion record (your account ID, the deletion date, when the account was created, and whether it had a paid plan) to understand why people leave, and the payment records that tax and accounting rules require, held by us and our payment processor.
This action cannot be undone. Deletion is processed immediately — there is no waiting period or recovery option. As noted in the Data Retention section, Firebase system infrastructure may retain short-term operational logs for up to 30 days, but your account and personal data are removed immediately.
Questions?
If you have any questions about how your data is handled — including requests related to a child's account — and we'll get back to you promptly.
Last updated: October 21, 2026