1. Introduction
Learning Clarity (the "Service") is operated by Intellisys (intellisys.sk), referred to in this policy as "we," "our," or "us." Intellisys is the controller of the personal data described here.
This Privacy Policy explains what information we collect when you use Learning Clarity on the web, Android or iOS, why we collect it, who we share it with, how long we keep it, and the choices and rights you have. Please read it carefully.
2. Information We Collect
2.1 Account Information
When you create an account and complete onboarding, we collect:
- Email address — used for sign-in, communication and account recovery.
- Password — stored only as a secure hash; we never store or see your plaintext password.
- Full name — shown in the Service and on any certificate you earn.
- Date of birth — used to confirm you meet the minimum age, to choose an age-appropriate look for the Service, and to pitch AI-generated content at the right level (see section 3).
- Gender — collected during onboarding; you may select "prefer not to say."
- Preferred language — used for the interface and for AI-generated content.
- Mobile number — so that we have a way to contact you. In the mobile app it is optional: you can add it during onboarding or in Profile → Personal information, and remove it there at any time by clearing the field and saving. The website asks for it before you continue. We store it with its country, taken from the IP address of the request that saves the number (or, when that gives none, from the calling code you chose).
If you sign in with Google, Microsoft or Apple, we receive basic profile information from that provider (such as your name and email address). We never receive your password for those services.
2.2 Learning Data
- Topics and courses you create, including materials you upload (such as PDFs, documents and photos) and the descriptions you write.
- Your progress: Explain Mode progress and knowledge-check answers, learning plans, streaks, achievements and last-activity times.
- Quiz and exam attempts, answers and scores.
- Certificates you earn, which record your name, the certificate title, your score, the issue date and a verification ID.
- Content you choose to share with other users.
- Topics from a YouTube video: the link you paste, an optional note on what to focus on, and the video's title, channel and length as YouTube reports them (deleted 29 days after the topic is created). A link and note you have not sent yet are kept with your account until you send or clear them, so you can finish on another device.
2.3 Voice Conversations and Generated Audio
- Conversations: when you talk or type with the AI tutor, we save the transcript of what you and the tutor said, along with the session's length and the credits it used. You can switch transcript saving off in the conversation settings. We do not store recordings of your voice.
- Podcasts: podcast episodes we generate for you, including their audio, are stored privately in your account.
- Read It Aloud: audio generated from lesson text is cached so the same passage does not have to be generated twice. The cache is keyed to the text itself, not to you, and an entry is removed a limited time after it was last played (currently 90 days).
2.4 Supervision and Referrals
- Supervision: a parent, guardian or educator can ask to supervise you by entering your email address. Nothing is shared unless you accept. Once you do, your supervisor can see your topics, courses, learning plans, quiz and exam results and progress in the Service, and receives scheduled progress-report emails containing that information.
- Referrals: if you sign up with someone's referral code, we record who referred you so that the referral reward can be applied.
2.5 Support Inquiries
When you use the Contact Us form, we collect your name, email address, the subject category and your message. The form is sent to our support mailbox by email; it is not stored in the Service's database.
2.6 Payment Information
Purchases on the web are processed by Stripe. Purchases in our iOS app are processed by Apple through App Store In-App Purchase. We never receive or store your full card number or security code. We keep a record of each purchase (the amount, credits, currency and the payment provider's transaction ID) and of your credit balance and usage, for as long as your account exists.
2.7 How You Found Us
When you first arrive, we note how you got here: the campaign tags in the link you followed (UTM parameters, including any search keyword), any advertising click ID it carried (from Google — including the IDs Google uses for iPhone clicks — TikTok, Meta, Microsoft or LinkedIn), the page you landed on (without the rest of the link), the address of the website that sent you — including whether it was an AI assistant or a social network — and the time of that first visit. If you later arrive from another ad, we also note that latest ad click, one per advertising platform, so a sign-up or purchase can be credited to the right ad. We keep all this only in the open page until you accept Advertising in the cookie banner. Only then is it saved in your browser and, if you have an account, copied to it, so we can tell which channels bring people to Learning Clarity. It is never copied to the account of a user we know is under 18. When you buy credits on the web, the latest Google and TikTok click IDs, Meta's browser identifiers (_fbp and _fbc), your IP address and your browser's user agent are also passed to Stripe with the purchase, so that our servers can report the purchase to these platforms (section 4). We keep an ad click for at most 90 days (a TikTok click for 28), because it can no longer be credited after that. If you reject Advertising, or withdraw it later, it is deleted from your browser, and the ad click IDs are deleted from your account.
Separately from Advertising, every account keeps a short note of how it was created: the platform you signed up on (the website, the iOS app or the Android app), and whether you joined with a referral code or through an organization. If you choose to answer, we also keep your answer to a one-time question, "How did you hear about Learning Clarity?" (and any words you type under "Other"). Nothing is read from your browser or device for this, it is never shared with advertising platforms, and it is kept with your account so we can tell which channels bring people to Learning Clarity (our legitimate interest, which you can object to — section 10). It is the only "how you found us" information kept for users we know are under 18.
2.8 Technical and Device Information
- Usage and advertising measurement data collected by the tools described in sections 4 and 6 — on the website, and in the mobile app only if you accept them there (section 6.4).
- Mobile app installation: the app creates a random ID for each installation, which we use to store the privacy choices you make in the app on that device (section 6.4).
- Push notifications (mobile app): if you allow notifications, we store a device token and your device platform so we can send them.
2.9 Device Permissions
- Camera (mobile app): used only when you choose to photograph a document to upload as learning material.
- Microphone: used only while a voice conversation is active.
- Notifications (mobile app): used only if you allow them.
3. How We Use Your Information and Our Legal Bases
We use your information to:
- Provide the Service — create your lessons, quizzes, exams, podcasts, audio and conversations, keep your progress, issue and verify certificates, run supervision and sharing, manage credits and purchases, and answer support requests (performance of our contract with you).
- Tailor AI-generated content to you: your age and preferred language are included in the requests we send to our AI providers so that explanations are pitched at the right level (contract).
- Send account emails such as confirmations, password resets, welcome and progress-report emails (contract).
- Keep the Service secure and prevent abuse, including stopping the same email address from claiming free sign-up credits more than once (our legitimate interest in protecting the Service).
- Understand how the Service is used, so we can improve it: page statistics from Cloudflare that use no cookies and do not identify you (legitimate interest), and Google Analytics on the website and in the mobile app only if you accept Analytics (consent — see sections 6.2 and 6.4).
- Measure our advertising — with TikTok, Google, Meta and LinkedIn on the website, and with Google and Apple in the mobile app — and record which channel brought you (section 2.7), only if you accept Advertising, and never for users we know are under 18 (consent — see sections 6.2 and 6.4).
- Record how and where your account was created, and your answer to "How did you hear about Learning Clarity?" if you give one, so we can tell which channels bring people to Learning Clarity (legitimate interest — see section 2.7).
- Meet our legal obligations (legal obligation).
4. Who We Share Data With
We do not sell your personal data. We share it only with the service providers that run parts of the Service for us, each for the purpose described:
- Supabase — sign-in, database, file storage and the server functions behind the Service.
- Cloudflare — hosts the website and delivers it to your browser. Cloudflare Web Analytics measures page loads without cookies and without identifying you.
- OpenAI — generates most AI content: explanations, quizzes, exams, learning plans, images, podcast scripts, spoken audio for Read It Aloud and podcasts, and speech-to-text. Your uploaded materials, descriptions, questions and answers, and your age and language are sent to OpenAI's API to do this. See the OpenAI Privacy Policy.
- Google — the Gemini API powers live voice conversations: while a conversation is active, audio from your microphone is streamed directly from your device to Google, and the tutor's replies come back the same way. Some AI features can also be configured to use Gemini models instead of OpenAI's. Google Cloud Text-to-Speech generates spoken audio for some languages, and Firebase Cloud Messaging delivers push notifications in the mobile app. See the Google Privacy Policy.
- YouTube (Google) — when you create a topic from a YouTube video, we use the YouTube API Services to check that the video is public and to show its title, channel and length; Google's Gemini API then reads the public video, together with your note, to write the topic. Nothing is downloaded to your device. By using this feature you agree to the YouTube Terms of Service; see also the Google Privacy Policy.
- Microsoft (Microsoft 365 / Exchange Online) — sends our emails (account, welcome, progress-report and supervision emails) and forwards Contact Us messages to our support mailbox.
- Stripe — processes web payments. See the Stripe Privacy Policy.
- Apple — processes purchases made in the iOS app, and provides Sign in with Apple. If you accept Advertising in the iOS app, allow tracking when iOS asks, and we know from your date of birth that you are 18 or older, the app asks Apple which Apple Ads campaign led to the installation (Apple's AdServices), and we save Apple's answer — such as the campaign, ad group, ad, keyword, country or region and click date — with your account (section 6.4).
- Google and Microsoft — provide sign-in, if you choose to use them.
- TikTok — only if you accept Advertising, and never for users we know are under 18. The TikTok Pixel in your browser and the TikTok Events API on our servers report conversions such as sign-up and purchase. Server events include your IP address, browser user agent, your Learning Clarity account ID, the TikTok click ID if you arrived from a TikTok ad, and a hashed (not readable) version of your email address. See the TikTok Privacy Policy.
- Google Ads and Google Analytics — Google Analytics measures how the site is used, only if you accept Analytics; Google Ads measures which ads work, only if you accept Advertising. Neither is loaded before you choose (see section 6). With Advertising accepted, our servers also report sign-ups and purchases to Google Ads (through Google's Data Manager API), with the Google click ID if you arrived from a Google ad, your IP address, browser user agent and a hashed (not readable) version of your email address — never for users we know are under 18. In the mobile app, Google Analytics for Firebase is used only if you accept Analytics in the app, and Google's advertising measurement only if you also accept Advertising (section 6.4). Our servers may also report to Google Analytics a purchase or a credits milestone that the app could not report itself — for example a purchase completed while the app was closed (Google's Measurement Protocol). Such a report carries the app installation's Google Analytics ID and our random analytics ID for you, never your email address or your Learning Clarity account ID, and is sent only for an installation where Analytics is on.
- LinkedIn — the LinkedIn Insight Tag measures our LinkedIn advertising. It is loaded only if you accept Advertising. With Advertising accepted, our servers also report sign-ups and purchases to LinkedIn (LinkedIn's Conversions API), with the LinkedIn click ID if you arrived from a LinkedIn ad, your IP address and a hashed (not readable) version of your email address — never for users we know are under 18.
- Meta (Facebook and Instagram) — only if you accept Advertising, and never for users we know are under 18. The Meta Pixel in your browser and the Meta Conversions API on our servers report conversions such as sign-up and purchase. Server events include your IP address, browser user agent, Meta's browser and click identifiers, and hashed (not readable) versions of your email address and your Learning Clarity account ID. See the Meta Privacy Policy.
Before the mobile app first sends your content to these AI services, it asks for your permission. You can withdraw it at any time in Profile → Security & account → AI services; without it, the app's AI features cannot be used; the rest of the app keeps working.
We may also disclose information where the law requires it, or to protect the rights and safety of our users or the Service. Visualization libraries used inside lessons (DevExtreme, Recharts, Mafs) run entirely in your browser and do not send your data anywhere.
5. International Data Transfers
Several of the providers above — including OpenAI, Google, Stripe, Apple, TikTok, Meta, LinkedIn, Microsoft and Cloudflare — may process data outside the European Economic Area, for example in the United States. Where they do, the transfer relies on the safeguards those providers offer under data-protection law, such as the EU–U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses.
6. Cookies, Local Storage, and Tracking
6.1 What We Store in Your Browser
- Functional cookies: two first-party cookies — one remembers whether the sidebar is open (kept for 7 days) and one remembers that you have finished the product tour. Neither tracks you.
- Local storage: your sign-in session, language and theme, your cookie choices with a random consent ID (section 6.2), the progress of a quiz or exam you are in the middle of (so a reload does not lose it), whether you have seen the tour and the app promotion, a referral code you arrived with, the "how you found us" information in section 2.7 (only if you accept Advertising), and — if we know from the date of birth that the account used on this device belongs to someone under 18 — a note that keeps advertising off on this device.
- Session storage: short-lived state such as sign-in redirects and unsaved drafts, cleared when you close the tab.
6.2 Analytics and Advertising — Your Choice
Nothing for analytics or advertising runs until you answer the cookie banner. Its first screen offers Accept all, Reject all and Settings, with equal weight. Settings has one switch for each purpose, both off until you turn them on:
- Analytics — Google Analytics records visits and how the site is used.
- Advertising — Google Ads, the TikTok Pixel, the Meta Pixel and the LinkedIn Insight Tag measure which ads bring people to us and record key actions such as sign-up or a purchase. It also covers our servers reporting sign-ups and purchases to TikTok, Google Ads, Meta and LinkedIn (section 4).
- Before you choose, or if you reject: the Google, TikTok, Meta and LinkedIn scripts are not loaded at all, so they set no cookies and send nothing. Google tags are used only in Google's "basic" consent mode.
- Global Privacy Control: if your browser sends this signal, Advertising stays off whatever you choose, and the banner tells you so.
- Users under 18: once we know from the date of birth that a signed-in user is under 18, no advertising event and no hashed email is sent for them — from the browser or from our servers — even if Advertising was accepted on the device. The sign-up event at account creation is sent before we know the age, and only if Advertising was accepted.
6.3 Cookies These Tools Set
- Google Analytics (Analytics): _ga and _ga_<ID>, kept for up to 2 years.
- Google Ads (Advertising): _gcl_au and _gcl_aw, kept for up to 90 days.
- TikTok (Advertising): _ttp and _tt_enable_cookie, kept for up to 13 months, and short-lived session cookies (ttcsid).
- LinkedIn (Advertising): li_fat_id on our site, kept for up to 30 days, plus LinkedIn's own cookies on linkedin.com under LinkedIn's policy.
- Meta (Advertising): _fbp and _fbc, kept for up to 90 days.
We keep a record of each choice as proof that we asked: a random consent ID stored in your browser, the time, your choices, whether Global Privacy Control was on, the versions of the banner and of this policy, and your account ID if you were signed in. The banner asks again after 6 months, and sooner if we change these tools or this policy.
You can change your choice at any time with Cookie settings at the bottom of our home page, or here: . Switching a purpose off stops it at once: we delete the cookies these tools set on our site (where your browser allows it), reload the page, and delete the "how you found us" information from your browser.
6.4 In the Mobile App
The Learning Clarity app for Android and iOS asks for the same two choices, Analytics and Advertising, on a privacy card with Accept all, Reject all and Settings, with equal weight. If you ignore the card, nothing is switched on. Until you accept, Google Analytics for Firebase stays switched off in the app and Google's consent signals are all set to denied, so nothing is sent to Google for analytics or advertising.
- Analytics — Google Analytics for Firebase records how the app is used: screens and sessions, and these events: sign-up, sign-in, credits spent (the amount and the feature used), reaching a credits milestone (currently 100 credits spent), having spent as many credits as you received at sign-up, and purchases (the amount, currency, credit pack and the purchase's transaction ID). It also records how you signed up and whether you have bought credits. Google receives an ID for the app installation and, from your IP address, an approximate location. We give Google a random analytics ID for you — never your email address, name or Learning Clarity account ID — so that your use on several devices counts as one person.
- Advertising — lets Google use this data to measure which ads bring people to the app, including purchases our servers report (section 4) — never for personalised advertising. Only then may Google collect your device's advertising identifier (the Android advertising ID or, on iPhone, the IDFA). On iPhone and iPad, Advertising applies only once you allow tracking when iOS asks (App Tracking Transparency); the app asks once, after onboarding or sign-in, every user we know is 18 or older, before it shows its own privacy choices. If you ask the app not to track, Advertising stays off whatever you choose in the app. With Advertising on and tracking allowed, the iPhone and iPad app also asks Apple which Apple Ads campaign led to the installation (section 4), and Google's on-device conversion measurement uses a hashed (not readable) version of your email address that never leaves your device. With Advertising on, the Android app also reads, once, the referral details Google Play passed to it at installation (for example the campaign or our website link that led to the download) and saves them with your account, only for users we know are 18 or older; withdrawing Advertising deletes them.
- Users under 18: Google's advertising signals, the tracking request, Apple Ads attribution and the hashed email are used only for users we know from their date of birth are 18 or older.
- Our servers report a purchase or credits milestone to Google (section 4) only for an installation where Analytics is on, and mark it for advertising use only if Advertising is on, the user is 18 or older and, on iPhone, tracking was allowed.
- Changing your mind: in the app, open your account settings and choose Privacy choices. Switching Analytics off stops collection at once and resets the installation's analytics data and ID on the device. Switching Advertising off turns Google's advertising signals off and deletes the Apple Ads attribution saved with your account.
- Proof of consent: as on the website, we keep a record of each choice made in the app — a random consent ID, the time, your choices, the versions of the privacy card and of this policy, whether you used the Android or iOS app, the answer you gave to the iPhone tracking request, and your account ID.
7. Data Storage and Security
- Your data is stored on Supabase with access rules on every database table, so that your data is visible only to you — except where you choose to make it visible: content you share, what an accepted supervisor can see, and your certificates.
- Certificates are public by design so that anyone you show one to can check it: anyone with a certificate's verification link or ID can view the recipient's name, what it was awarded for and when.
- Uploaded files, podcast audio and generated audio are kept in private storage and are not publicly accessible.
- All data in transit is encrypted with HTTPS/TLS, requests to our servers are authenticated, and payment notifications are verified with the payment provider's signature.
- Passwords are stored only as secure hashes.
No method of transmission over the Internet or of electronic storage is completely secure, so we cannot guarantee absolute security.
8. Children's Privacy
Learning Clarity is not intended for children under 15. We ask for your date of birth during onboarding to confirm you meet this age and to present content in an age-appropriate way.
We do not knowingly collect personal information from children under 15. If we learn that a child under 15 has created an account, we will delete it. If you believe this has happened, please contact us at support@learningclarity.ai.
Advertising and users under 18. Users aged 15 to 17 may use Learning Clarity, but we never use their data for advertising measurement — see sections 6.2 and 6.4.
9. Data Retention and Account Deletion
- Your account, learning data, certificates, purchase records, conversation transcripts and podcasts are kept for as long as your account exists, unless you delete them sooner.
- Cached Read It Aloud audio is removed a limited time after it was last played (currently 90 days).
- Video details from YouTube (title, channel and length) are deleted 29 days after the topic is created; the link you pasted stays with the topic.
- Support emails are kept in our support mailbox for as long as needed to handle your request.
- Records of your cookie choices (section 6.2) and of your choices in the app (section 6.4) are kept as proof of consent. If you delete your account, they are no longer linked to it.
- The Apple Ads attribution saved with your account (section 4) is kept until you switch Advertising off in the app or delete your account.
When you delete your account, we permanently delete your profile, learning content, uploaded materials, conversation transcripts, podcasts, certificates, and credit and purchase history from our systems, along with files we sent to OpenAI for processing, your app privacy choices per device and your Apple Ads attribution. Our servers also ask Google to delete the Google Analytics data linked to your random analytics ID and to your app installations. Certificate verification links stop working, so use Download PDF first to keep a copy of any certificate you want. Deletion cannot be undone. We keep only:
- a one-way fingerprint (hash) of your email address, so the same address cannot claim free sign-up credits again — it cannot be turned back into your email address;
- records of the cost of AI processing, with your identity removed;
- records that Stripe or Apple keep themselves as the payment providers, as the law requires;
- cached Read It Aloud audio, which is not linked to you and expires as described above; and
- data already shared with advertising partners under section 4 (only if you had accepted Advertising), which they keep under their own policies.
10. Your Rights
Depending on where you live (including under the GDPR in the European Economic Area and the CCPA in California), you have the right to:
- Access your data — much of it is in your Profile, and you can ask us for a full copy.
- Correct it — update your name, gender, language and other details in your Profile, or ask us.
- Delete it — in the Learning Clarity mobile app go to Profile → Security & account → Delete account, or ask us to delete your account by email.
- Receive a portable copy of your data in a machine-readable format.
- Object to or restrict processing based on our legitimate interests.
- Withdraw consent for analytics and advertising at any time — on the website with Cookie settings (section 6.2), and in the app under Privacy choices (section 6.4). Withdrawal does not affect processing that happened before it.
- Complain to a supervisory authority — where you live or work, or in Slovakia the Office for Personal Data Protection of the Slovak Republic.
To exercise any of these rights, contact us at support@learningclarity.ai. We will respond within one month.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date at the top of this page and, where appropriate, tell you in the app or by email.
12. Contact Us
For questions about this Privacy Policy or our data practices, or to exercise your rights, contact us:
Intellisys — operator of Learning Clarity
Website: intellisys.sk
Email: support@learningclarity.ai
You can also use the Contact Us form in the app and choose the "Privacy / Data Request" category.