1. Information We Collect
We collect the following information:
- Account Information: Email address, password (hashed)
- Usage Data: Questions asked, topics selected, learning progress
- Payment Information: Processed through Stripe (we don't store card details)
- Subscription Status: Trial status, subscription dates
2. How We Use Your Information
We use your information to:
- Provide and improve the Service
- Process your subscription payments
- Personalize your learning experience
- Send important service updates (via email)
- Respond to your support requests
3. Data Storage and Security
Your data is stored securely using:
- Supabase: User authentication and database (GDPR compliant)
- Stripe: Secure payment processing (PCI compliant)
- Deno Deploy: Secure hosting with HTTPS encryption
- DeepSeek AI: Processes your questions (data not stored)
Passwords are hashed using bcrypt. We implement industry-standard security measures to protect your data.
4. Third-Party Services
We use the following third-party services:
- Supabase: Authentication and database
- Stripe: Payment processing
- DeepSeek AI: AI-powered math tutoring
- OCR.space: Image text extraction (for photo math solving)
- Deno Deploy: Hosting and deployment
These services have their own privacy policies. We are not responsible for their practices.
5. Cookies
We use cookies to:
- Maintain your login session (session cookies)
- Remember your language preference (localStorage)
- Track usage analytics (anonymized)
6. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Rectify: Correct inaccurate data
- Delete: Request account deletion (through Settings)
- Portability: Export your data
- Object: Object to processing your data
7. Data Retention
We retain your data as long as your account is active. After account deletion, data is permanently removed within 30 days. Some data may be retained for legal compliance purposes.
8. Children's Privacy
Pluto is intended for users aged 13 and above. We do not knowingly collect personal data from children under 13. If you believe a child has provided data, please contact us immediately.
9. International Transfers
Your data may be processed in the following locations:
- European Union (Supabase, EU hosting)
- United States (Stripe, DeepSeek AI)
We ensure adequate safeguards are in place for international data transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through the Service.