Privacy Policy

1.1 Information You Provide

•Account Information: your email address, your password, and the month and year of birth you enter at sign-up to confirm you meet our age requirement. We store that answer as a date, using the 15th as the day, because we do not ask for the day, and once it is recorded it is not overwritten. If the answer shows you are under 13, we do not keep it (Section 12). Your password is stored by us, in hashed form (scrypt) — it is never stored in a form we or anyone else can read back. If you sign in with Google instead, we never receive a password at all; Google tells us your email address, your name, and your profile picture, and we store those.

•Input and Output: the questions, prompts, or other content you submit (“Input”) and the visualizations, text, or other content the Services generate in response (“Output”), including the one-question comprehension check the Services may show at the end of a lesson.

•Referral Information: if you join through a referral link or share your own, we store the link between the referring and referred accounts so we can count the referral for the leaderboard and badges, and detect abuse. The leaderboard, which signed-in users can see, shows a display name and a referral count; an account whose holder is under 18, or whose age we do not know, is never shown on it to anyone else, though its holder can still see their own place. If you join through a tutor's student link, that tutor can see your display name (or, if you have not set one, a short name derived from your email address — never the address itself) and the date you joined. They cannot see what you ask or watch.

•How You Found Us: after you sign up we may ask “How did you hear about Jentoo?”. Answering is optional. If you answer, we store your answer — one choice from a list, plus up to 80 characters of your own words if you choose “Somewhere else” — and the first answer you give is the one we keep. If you tell us you are a tutor, we record that your account is a tutor account and when it became one.

•Payment Information: if you subscribe to Jentoo Pro, you pay on a checkout page run by our payment processor, Stripe, Inc. Stripe receives your name, email address, card details, billing country (and billing address, if we need it to calculate tax), and keeps your payment history. Where the checkout page says “Sold through Link,” Stripe’s affiliate Sold through Link, LLC processes the payment and receives the same information to charge you, calculate tax and answer questions about the charge. We receive from Stripe identifiers for your customer record and subscription, the plan you chose, and the status and amount of each payment — never your full card number. At checkout you tick a box agreeing to our Terms of Service and Refund Policy and to the subscription renewing automatically until you cancel; we keep a record of that agreement, when you gave it, and the exact renewal terms you were shown (Section 7).

•Communications: information you provide when you contact us for support, send feedback through the in-product form, or otherwise correspond with us.

•Contributions: if you use any feature to save, share, or publish content, the content and any associated metadata.

1.2 Information Collected Automatically

•Device and Usage Data: IP address, browser type, operating system, device identifiers, pages viewed, features used, and timestamps.

•Rate-Limiting Identifiers: to enforce free-usage limits and detect abuse we store a one-way cryptographic hash of your IP address and of an anonymous browser identifier, rather than the address itself. These hashes let us count requests without retaining the underlying address. One of these counters is not a daily one: the limited number of questions a guest may ask without an account is a one-time allowance, so its count is kept against those hashes for as long as we operate that allowance. See Section 7.

•Cookies and Similar Technologies: as described in Section 6 and itemised in our Cookie Policy.

•Approximate Location: your COUNTRY only, resolved from the network connection at the moment of the request and recorded without the underlying address. We do not store your IP address alongside it, and we do not derive a city or a more precise location.

•Usage Analytics: when this is switched on (it starts on for an account whose holder is 18 or older and off for one whose holder is under 18, and anyone can switch it on or off — see Section 3.3), we also record, for each question, a subject category inferred from the wording of the question by a fixed keyword list on our own servers, whether you were on a phone or a computer, and a session identifier grouping questions asked within thirty minutes of one another. When a lesson you asked for plays, we also record, once, when it ends, how you watched it: how many chapters you reached, whether you finished it, how long the player was active, the playback speed you used, how many times you paused, whether you replayed it, and whether you asked a follow-up. If you answer the one-question comprehension check at the end of a lesson, we also record which option you chose, whether it was correct, how long you took to answer, your answer to “Did this help you understand?”, and whether you then chose the follow-up explanation or the practice questions offered. We use these to understand which topics the Services handle badly, which answers hold attention, whether a lesson actually taught what it set out to, and to improve how lessons are written.

•Campaign Counts: if you arrive through a link tagged with campaign labels (such as utm_source), we add one to a daily, aggregate count for that label when you visit, ask a question, or start or complete sign-up — with no cookie, no identifier and nothing that could link it to you, and never when your browser sends Global Privacy Control or your account has usage analytics turned off.

•Signup Attribution: when you create an account, we record on it, once, the campaign labels of the link you arrived through (if it had any) and the page of our site on which you signed up, so that we can tell which of our outreach brings people who go on to use the Services. This is recorded only while usage analytics is switched on (see Section 3.3) and never when your browser sends Global Privacy Control, and it is never updated afterwards. It uses no cookie: if you sign up with Google, the labels travel back with you in the address of the page you return to.

1.3 Guest / No-Account Use

A guest may ask a small, limited number of questions before an account is required, so guest use can create Input and Output. We keep the question text and the technical record of the request; we do not save the resulting lesson to any history, because there is no account to save it to, and nothing from a guest question is used for training (Section 3.2). If you browse the Services without an account, we still collect the limited technical information described in Section 1.2 (such as IP address and device data) to serve and secure the site. We do not collect Account Information from guests.

1.4 Information from Other Sources

We may receive limited information from Google if you choose to sign in with Google (your email address, name, and profile picture), from Apple if you choose Sign in with Apple (a stable identifier for your Apple Account, an email address — which is a private relay address created by Apple if you choose to hide your email — and, the first time only, your name), from our payment processor, Stripe (such as confirmation that a payment succeeded — see Section 1.1), and from analytics or security vendors described in Section 5.

1.5 Referral Invitations

If you use the invite-a-friend feature, we store the email address you enter so that we can send that one invitation and so that we do not send a second one to the same address. We store a one-way cryptographic hash of the address alongside it, which is what the unsubscribe link identifies and what our suppression list is keyed on — meaning the list of people who have opted out contains no readable addresses. Invitation emails are delivered by our email provider (see Section 5) and every one contains a one-click unsubscribe.

If you receive an invitation and unsubscribe, we keep only that hash, indefinitely, so that we can continue to honour your choice. We cannot read it back into your address.

1.6 Our iOS App

The Jentoo app for iPhone is the same Service as our website, displayed inside the app, so this Policy applies to it in full. Before the app sends your first question to the third-party AI providers described in Section 4, it tells you what will be sent and to whom, and asks for your permission; you can withdraw that permission at any time in Settings → Privacy, after which the app will ask again before your next question.

Device permissions: the app asks for access to your camera or photo library only when you choose to attach a photo to a question, and for permission to add to your photo library only when you choose to save a lesson as a video. A photo you attach becomes Input; the app does not otherwise read your camera or library. If you choose to dictate a question, your voice is converted to text by Apple’s speech recognition (on your device or on Apple’s servers, under Apple’s privacy policy); we receive only the resulting text, never the audio.

Age: where the law requires it, the app may ask Apple for your age range (for example, whether you are under 13 or under 18) when you create an account. We use that answer only to apply the age requirements in our Terms of Service, and we do not store it.

The app contains no advertising and no third-party analytics, advertising, or tracking software, and it does not track you across apps or websites owned by other companies.

1.7 Jentoo Check (Teachers and Their Students)

Jentoo Check lets a teacher find out what a class understands. A teacher signs in with a Jentoo account and names a unit, and may add a course name, a class name, the name students will see, and teaching material to work from. We use these to write and draw the check. Before making a check, the teacher confirms that their students are in grade 9 or above (13 or older) and that they are using Jentoo Check with their school’s permission.

A student joins from the link their teacher shares, without an account, and gives only a first name and a last initial. They then answer a short series of questions in their own words. We store the student’s name as entered, their answers and the conversation, and a rating of how well each answer shows the idea, and we set a cookie that lets the student resume (see our Cookie Policy). Only the teacher who made the check sees a student’s answers, and we record each time a teacher opens them; Jentoo staff access them only where needed to run, secure, or fix the service.

The questions and answers are processed by our AI provider (Anthropic) to run the conversation and to rate the answers. Student answers are never used to train AI models and are kept separately from everything else in Jentoo. If an answer suggests a student may be at risk of harm, the check stops, the student is shown crisis resources, and that answer is not stored.

Student answers are deleted automatically on July 1 after the school year in which the check was made, or earlier when the teacher deletes the check. A student, parent, or teacher can ask for earlier deletion by writing to support@jentoo.ai. Our student privacy notice (jentoo.ai/legal/check-privacy) explains this for students.

1.8 People We Contact About Jentoo for Business

If you work at a business or institution that may use Jentoo, we may collect your name, work email, job title and organization from public sources (such as your organization’s own website) and business-contact data providers such as Apollo, verify the address with an email-checking service, keep it in our CRM (Attio), and email you, on the basis of our legitimate interest in telling organizations about Jentoo.

These emails are sent from a Jentoo email account hosted by Google, and AI (Anthropic’s Claude) helps us research organizations and write and answer them. We record whether an email was delivered, bounced, or answered, and keep your reply. We never contact children, school (K-12) students, or anyone we believe to be under 18 in this way.

Reply “no thanks” or email support@jentoo.ai and we stop. We keep your address on our do-not-contact list, and a one-way hash of it on our suppression list, so that we never email you again; if you also ask us to delete your details, we delete everything else we hold about you. You can also ask what we hold about you at any time.

1.9 Comments on Our Social-Media Posts

Jentoo posts short videos on its own Instagram and YouTube accounts. If you comment on one of those posts, we receive your comment, your public username, and the post it is on, through Instagram’s and YouTube’s official interfaces. AI (Anthropic’s Claude) reads the comment and may post a short public reply from Jentoo’s account, and a question you ask may become the topic of a future video, without your name. Comments that look like spam or abuse, or that suggest a person may be in distress, are not answered.

We keep the comment, your username and our reply so that we never answer the same comment twice, until you ask us to delete them at support@jentoo.ai. What you post on Instagram or YouTube is also governed by those platforms’ own privacy policies. Our basis for this processing is our legitimate interest in answering people who talk to us.

3.1 Opting Out of Training

You can turn off the use of your Input and Output for model training at any time in your account settings, under Privacy & data. Once you opt out, new Input and Output will not be used for training going forward. Opting out does not affect our ability to use your data to operate the Services, for safety and security purposes, or as otherwise described in this Policy, and it does not retroactively remove data already used to train a model that has already been trained.

3.2 Guest Use and Training

We do not use guest (no-account) Input or Output for training. A guest has no account in which to record a training choice, so we treat the absence of one as a refusal and mark every guest question ineligible at the moment it is asked. Training, and the opt-out in Section 3.1, apply only to the questions and answers on your account.

3.3 Opting Out of Usage Analytics

Separately from the training opt-out above, you can switch off usage analytics at any time in your account settings, under Privacy & data. Switching it off stops the collection described in Section 1.2 under “Usage Analytics” — we do not record it and then hide it — and also deletes the session records, the subject, device, and session fields, the lesson-viewing records, your answers to comprehension checks (including the thumbs-up or thumbs-down and what you chose afterwards), the campaign labels and sign-up page recorded under “Signup Attribution”, and the country recorded for your account. Your answer to “How did you hear about Jentoo?” is something you told us rather than something we observed, so it stays with your account, like the rest of your account information, until you delete the account.

Switching it off does not delete the questions themselves or the answers we produced for them. Those are the record of what you asked us to make, are needed to operate the Services and to account for your question allowance, and are covered by the deletion right in Section 11 instead.

3.4 What We Never Use for Training

Whatever your setting in Section 3.1, we never use the following to train AI models:

•Anything asked from an account whose holder is under 18, or whose date of birth we do not have;

•Questions that may reveal information about your health (including mental, sexual, and reproductive health and substance use), your sex life or sexual orientation, or your gender identity. We identify these automatically when you ask them, and we err on the side of leaving a question out. They are still answered, and saved to your history like any other question, so that the Services work as you asked;

•Incognito questions and guest questions (Section 3.2);

•Questions asked from an account provided through a school; and

•Anything a student writes in a Jentoo Check (Section 1.7).

If a question suggests that someone may be at risk of harming themselves, we show crisis resources instead of an answer, and we do not send that question to any AI provider or keep it.

11.1 Rights Available to All Users

Regardless of where you live, you can generally:

•Access the personal information we hold about you;

•Correct inaccurate personal information;

•Delete your account and associated personal information;

•Export a copy of your Input and Output;

•Opt out of AI model training, as described in Section 3.1;

•Opt out of usage analytics, as described in Section 3.3.

Export, deletion, and both opt-outs are available directly in your account settings under Privacy & data. For anything else, contact us at the email address in Section 14. We may need to verify your identity before fulfilling a request.

11.2 California and Other U.S. State Privacy Rights

If you are a resident of California or another U.S. state with a comprehensive privacy law (such as Virginia, Colorado, Connecticut, or Utah), you may have additional rights, including the right to know what personal information we collect and how it is used and disclosed, the right to delete personal information, the right to correct inaccurate personal information, and the right to opt out of the “sale” or “sharing” of personal information and of certain targeted advertising.

We do not sell personal information and do not use it for cross-context behavioral advertising, so there is generally nothing to opt out of in that respect. You will not receive discriminatory treatment for exercising any privacy right.

11.3 EU, UK, and Swiss Privacy Rights (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or UK GDPR, including the right to access, rectify, erase, or restrict processing of your personal data, the right to data portability, and the right to object to processing, including processing based on legitimate interests.

Our legal bases for processing your personal data include: performance of a contract (to provide the Services you request, including a paid subscription), legitimate interests (to operate, secure, and improve the Services, including AI model training where you have not opted out; to prevent abuse of free-usage limits; to tell people at businesses and institutions about Jentoo, as described in Section 1.8; and to answer comments on our social-media posts, as described in Section 1.9), consent (where we ask for it, and for any non-essential cookie we may add in future), and compliance with legal obligations (such as keeping billing records and the record of your agreement to automatic renewal). You may object at any time to processing based on our legitimate interests, and to any direct marketing, by writing to us at the address in Section 14. You also have the right to lodge a complaint with your local data protection authority.