Two kinds of conversation. Two kinds of privacy.
We treat the private things as private and we're honest about the rest. Here's exactly what that means.
We cannot read these.
Messages with instructors and classmates are end-to-end encrypted on your devices. The keys never leave them. Not us, not a subpoena, not a rogue engineer.
Encrypted, and used to improve.
Conversations with the AI tutor are encrypted in transit and may be used to make the product better. They're always clearly labelled, so you always know which kind you're in.
Device verification
The first time you use a new device, we verify it so your encrypted conversations stay reachable only from devices you approve. It takes one tap from a device you already trust.
Your recovery key
Because we cannot read your human chats, we also cannot reset them for you. You get a one-time recovery key when you join — keep it somewhere safe. It's the only way back in if you lose every device.
Your rights
You can export everything or delete your account at any time. Deletion is real: encrypted content is cryptographically shredded, and personal data is erased on a short, fixed schedule. No dark patterns, no retention games.