Privacy Policy

Effective November 5, 2026

Study Naturally exists to help people learn. To teach you well, the tutor has to remember how you're doing, so we do handle your information. This policy explains what we collect, why, and what control you have. It applies to the websites, apps and services run by Arcaro Labs LLC ("we" or "us").

Our promises

• We don't sell your personal information, and we don't share it for targeted advertising. We don't show ads.
• We don't train AI models on your content, whether our own or anyone else's. That covers your messages, answers, drawings and uploads. The AI providers that power the tutor process them under commercial terms that do not allow training on them by default. The one thing outside our control is your browser's speech recognition, explained below.

If our company is ever sold or merged, these promises continue to apply to information we already hold unless you agree otherwise.

What we collect

Account details. Your name, email address and password (stored only in hashed form). If you sign in with Google or through your organization's single sign-on, we receive basic details from them, such as your name and email.

Your learning. What you study and why, your messages to the tutor, your quiz answers, the drawings you send from the scratchpad, and how the tutor read them. If you use voice, we receive only the text of what you said.

What the tutor works out about you. Its notes on your level, strengths, misconceptions and preferences, your mastery of each concept, and its grading of your answers. These notes are AI estimates, may be wrong, and are used to teach you. They are not used to make legal or similarly significant decisions about you.

Your preferences. Your choice of teacher, voice settings, and any avatar model you upload.

Progress and leaderboards. XP, streaks, counts of concepts and topics, the broad categories of your study, your time zone, your nickname, your friend connections, and reports made by or about you.

Teachers and schools. Materials you request, the source notes you provide, your edits and approvals, and partner program applications, including your name, email, role, organization and message.

Payments. Your subscription details. Card details are handled by our payment processor, Stripe, and we don't store them.

Technical information. IP address, browser and device details, signed-in devices, and security and activity logs.

Messages to us. Anything you send us by email or for support.

How we use it

• to provide the tutor and the Service, and to personalize your teaching
• to run accounts, organizations, billing, leaderboards and friend connections
• to review nicknames and reports, and to keep the Service safe
• to protect against fraud and abuse, and to secure accounts
• to contact you about your account, security and changes to the Service
• to find and fix problems and improve the Service, for example by reviewing how the tutor performed in a lesson (authorized staff may do this, and it never involves training AI models on your content)
• to produce overall statistics that don't identify you
• to meet legal obligations and enforce our terms

Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interests in running and securing an education service, your consent (such as joining a leaderboard, which you can withdraw at any time), and legal obligations.

Who sees your information

Other people, only as you choose. Leaderboards are off until you join them.

• Friends and members of your organization who have joined those boards can see your nickname and numbers if you join them too.
• The global leaderboard is public. If you join it, anyone on the internet can see your nickname, your numbers and the broad categories you study, even without an account, and others may copy that information. We never show your account name, email or specific topics on a board, and topics marked private aren't shown or counted there. We ask search engines not to index this board, but we can't guarantee that they or others will honor that.

Your organization. If your account belongs to a school or other organization, its administrators can see membership and activity information, such as usage. They can't open your lessons through the Service, unless yours is a learner account (see Children and teens). They can see material created in their organization.

Our staff. A limited number of authorized staff may access accounts, including lesson content, when needed for support, safety, security or legal reasons.

Service providers who work for us under contract:

• AI providers, which run the models. We use Anthropic, with OpenAI and Google as backups when another is unavailable. Your lesson content, including any drawings you send, is sent to the provider handling your request to generate a reply. Only under API terms that do not allow training on it by default. Providers may keep it for a limited time to detect abuse, typically 30 days and up to 55 days depending on the provider, or longer if flagged for a policy violation or required by law.
• ElevenLabs, on plans with natural voices. It receives the text the tutor speaks.
• Web search used to fact-check teaching material, run through our AI provider. Factual claims from that material may be used in searches.
• Google Cloud, which hosts the Service, and Google, if you sign in with it.
• Stripe, for payments, and our email delivery provider.
• If we use a monitoring provider to keep the Service reliable, it receives technical information.

The law and safety. We may share information if required by law, or if we reasonably believe it's necessary to protect someone's safety, our rights or the Service.

Business changes. If we're involved in a merger, acquisition or sale of assets, information may transfer, subject to the promises above.

Voice

Voice input is optional. When you use the microphone, your browser's own speech recognition turns your speech into text, and we receive only the text. Your browser's maker handles that audio under its own terms, not ours, and we don't control it. Some browsers, including Chrome, send the audio to the browser maker's servers. If you'd rather avoid this, simply type instead.

Cookies

We use cookies and similar storage to keep you signed in, remember your preferences and keep the Service secure. We don't use advertising cookies or third-party analytics.

Our public website counts page views for our own use: the page's path (never the query string), the referring site, and a count of visitors that can't identify anyone and resets every day. It sets no cookie and keeps no IP address. If your browser sends Do Not Track or Global Privacy Control, we don't count the view at all. Counts of events such as sign-ups and subscriptions (never who made them) and summaries of errors go to Arcaro Labs' own operations system, so we can keep the Service running.

How long we keep it

• Lessons, drawings and progress: until you delete the study session or your account.
• Security and activity logs: up to 2 years, and failed sign-in records for 30 days. Some security records, which can include your email address, may stay in these logs for that period after you delete your account.
• Notifications: 90 days.
• Scratchpad links: expire after 4 hours, and friend invites after 14 days.
• Partner applications: as long as needed to assess them and manage the relationship.
• Billing records: as long as tax and accounting law requires.

Deleted information may stay in backups for a limited period, and we may keep information longer where the law requires or to resolve disputes.

Your choices and rights

In the Service you can correct your details, delete a study session, mark a topic private, leave any leaderboard, remove a friend, and delete your account.

Depending on where you live, including under laws such as the GDPR and the California Consumer Privacy Act, you may also have the right to access, correct, delete or receive a copy of your information, to object to or limit certain processing, and to complain to your data protection authority. To make a request, email privacy@studynaturally.com. We may need to verify your identity. We won't treat you differently for exercising these rights.

Children and teens

Children under 13 can use the Service only with permission from a parent or guardian, or from a school authorized to give it, and only on a learner account that adult creates. Children can't sign up on their own. If we learn we hold personal information from a child under 13 without that permission, we'll delete it. If you think this has happened, please email privacy@studynaturally.com.

For a learner account we collect a first name or nickname and a rough age range, never an email address or birth date, along with the child's lessons, answers, drawings and activity. We use this to teach the child and keep them safe, and it goes to the service providers above only for that. Learner accounts never appear on leaderboards.

The adult who created a learner account, and others looking after the child, can read the child's lessons and activity, and are told if a message suggests the child may be struggling or unsafe. A parent or guardian can review or change the child's details, stop further collection and delete the account and its information at any time, in the Service or by emailing privacy@studynaturally.com.

Teens need a parent's or guardian's permission to use the Service. A parent or guardian can contact us about their teen's account. Think carefully before joining the public leaderboard, and don't use your real name as a nickname.

Schools

When a school or district uses the Service with its students, it may act as the party responsible for their information, and we handle that information on its instructions. Parents should direct requests about student records to the school first. Schools can contact us about any agreements they need.

Security

We protect your information with measures such as encryption in transit, hashed passwords and tokens, and limits on access. No service can guarantee perfect security. If we learn of a breach affecting you, we'll notify you as the law requires.

International transfers

We're based in the United States, and our providers may process information in the United States and other countries. Where required, we use appropriate safeguards for these transfers.

Changes

We may update this policy. If a change is material, we'll give reasonable notice, such as by email or in the Service, before it takes effect.

Contact

Arcaro Labs LLC, 295 Saint Nicholas Avenue, Hillsdale, NJ 07642. Privacy questions: privacy@studynaturally.com.