YOUR INFORMATION. YOUR STUDY SPACE.
Privacy Policy
Effective October 28, 2026
Super Smart Buddy (SSB) is an individually operated study service run by its founder. This policy covers our public website, demo, invited study spaces, interest list, and request forms. The current pilot is intended for U.S. students age 13 and older and their families.
Privacy and deletion requests come to SSB’s founder for review. Use the private privacy-request form. Submitting a request does not automatically delete information, export records, or change account access. We check identity and authority before taking action involving account records.
Information we collect
- Account and access details: email address, display name or nickname, account identifiers, invitation status, study-space permissions, and age confirmation. We record confirmation that a student is 13 or older, not their birth date. When email/password sign-in is used, we store a username and protected password-verification data, not a readable password. Google sign-in supplies identity and profile details needed to identify the account; it does not give SSB access to Gmail or Google Drive.
- Class materials and conversations: course and textbook details, authorized notes, photos, documents, assignments, returned tests, questions, tutor responses, and summaries or topics extracted from uploaded material.
- Study activity: answers, scores, mistakes, confidence responses, hints used, response timing, study plans, saved drafts, and tentative learning summaries. We use these to tailor study help. They are not diagnoses, measurements of intelligence, or official school records.
- Technical information: session cookies, browser-storage identifiers and preferences, request and device/browser information, and security or usage-limit records. Our hosting providers also process technical information to operate and protect their services.
- Communications: interest-list details and consent, access-email delivery records, feedback and code proposals you choose to send, privacy requests, and copyright concerns.
Please remove unnecessary identifying details from uploads. Do not submit another student’s private records, passwords, financial identifiers, ID documents, or unnecessary health information.
How we use information
We use information to provide and secure accounts; organize coursework; explain concepts and mistakes; create fresh practice; adapt study sessions; save progress across signed-in devices; operate and improve the pilot; respond to requests; investigate misuse or rights concerns; and meet legal obligations. Saved learning summaries are tentative and can be wrong.
We do not sell student study records or use them for targeted advertising. We do not publish a student’s uploaded schoolwork in a public demo or marketing without separate permission and the necessary rights. We do not use uploaded schoolwork to build a general-purpose model-training dataset. Service-provider processing is described below.
Pilot/product updates are separate from access, security, support, and request-handling communications. Submitting a privacy or copyright request does not add you to the interest list.
Who can see study information
Study spaces are access-controlled, not public document libraries. Access depends on the signed-in account and the people authorized for that space. Authorized SSB administrators may access information when needed to operate the service, provide support, investigate safety or rights concerns, or comply with law. A study-space conversation is not confidential from every authorized administrator or family member.
The current invitation process is not a verified-parental-consent service. A parent or guardian does not automatically receive access to every student account, and a claimed relationship in a request form is not proof of authority. We do not disclose a student’s information solely because someone knows an email address or says they are a parent.
Service providers and outside services
- Hosting and storage: SSB uses Sites hosting and Cloudflare services for website execution, database records, and private file storage. Providers may process technical information and store backups or operational records. We do not promise that all processing or storage occurs only in the United States.
- OpenAI: relevant questions, conversation context, course summaries, and selected documents or images may be sent to OpenAI to provide tutoring, analyze material, or run safety checks. Our tutoring integration requests that response objects not be stored for later retrieval. This is not a promise of zero retention: provider safety monitoring, temporary processing, and legal exceptions can still apply. OpenAI describes its API training defaults and retention controls in its data-handling documentation.
- Sign-in and textbook searches: Google may provide sign-in. Book-search terms or ISBNs may be sent to Google Books and Open Library to identify a textbook. Identifying a book is separate from uploading its contents.
- Email delivery: Resend handles configured access emails and request notifications. Interest-list notifications use FormSubmit; request notifications can also use FormSubmit when configured as the fallback. These services receive the details needed to deliver the corresponding message to its intended recipient. Privacy requests and contact details are stored privately and forwarded to the founder for review.
- Optional device/browser features: photo selection, camera access, dictation, and read-aloud use device or browser facilities. Depending on the device, voice or text may be processed by those providers under their own terms. We do not represent dictation as always happening entirely on your device.
We may share information when reasonably necessary to respond to lawful process, protect safety or security, or investigate legal or rights-related concerns. Any disclosure must be appropriate to its purpose. Outside websites and independent services have their own policies.
Demo, cookies, and browser storage
The demo does not require an account, but it is not data-free: a visitor identifier, demo interactions, and usage information may be saved. Do not enter real student records, sensitive personal details, or restricted assessment content into demo questions.
Study spaces use session cookies and browser storage to keep you signed in, identify devices, remember views, and support continuity. Clearing browser storage does not delete server-side study records. Blocking necessary cookies may prevent sign-in or other features from working.
SSB’s application does not change its behavior in response to a browser’s Do Not Track signal. We do not embed advertising pixels or build cross-site advertising profiles from student coursework. Independently operated services such as Google may recognize you across their services when you choose to sign in or visit them; their own policies apply.
Retention and deletion
We retain information according to its purpose: account and study records support continuing study and account administration; demo records support the trial and usage protection; interest-list details support the updates you requested; and request, security, or legal records support handling, misuse prevention, and documentation of relevant obligations. The need to retain a record depends on whether its purpose remains active, a request has been resolved, an account is closing, or a legal or safety exception applies. Information no longer needed for these purposes should be removed or appropriately de-identified through our review process.
Privacy and deletion requests are reviewed individually by the founder, not executed automatically. SSB does not automatically erase coursework because a request is submitted or an account becomes inactive. A request may require clarification, identity or authority checks, and review of any legal exceptions. We respond according to applicable law and explain where more information, an extension, or a limited exception is needed. We do not promise a fixed automatic deletion or backup-expiry period.
Available file controls let you remove certain uploads. Removing one file does not necessarily erase earlier chats, extracted summaries, or every learning record derived from it. A full account or information-deletion request should identify what you want reviewed.
Deleted information may remain temporarily in restricted backups, service-provider records, or records we are permitted or required to retain for a specific purpose. We cannot remotely erase copies someone independently downloaded or stored on their own computer. Closing an account, withdrawing marketing consent, and deleting all information are separate actions.
Your choices and requests
Use the privacy-request form to ask questions, request access or a copy, seek a correction or deletion, close an account, or stop pilot/product emails. You can submit without signing in. The form keeps the founder’s receiving email out of public pages and gives you a reference to keep.
The request is stored privately and its notification is sent to the founder. It is not posted publicly, sent to the tutor, or treated as marketing consent. We use the supplied details to contact you, assess and verify the request, prevent misuse, and document the response. Do not submit passwords, private access links, schoolwork, birth dates, or ID documents. We may request proportionate follow-up through an appropriate channel.
Your privacy rights and any applicable exceptions depend on your circumstances and the laws that apply. We will not unfairly penalize you for making a lawful privacy request. Authorized representatives and parents/guardians may contact us, but access or deletion affecting another person requires appropriate authority. Where an appeal or additional review is available, use the same form and include the original reference.
For marketing opt-outs, choose “Stop pilot and product emails” or reply to an update. Necessary account, security, or request-handling messages may still be sent where appropriate. A form reference is proof of submission—not proof of account ownership or that a requested action is complete.
Students and families
The current pilot is intended for U.S. students age 13+ and their families. Students under 18 should involve a parent or guardian. SSB does not currently offer an under-13 signup or verified-parental-consent program. A parent’s involvement does not by itself waive applicable children’s privacy requirements.
If you believe information from a child under 13 has been collected, contact the founder through the privacy-request form without adding further sensitive information. We will review the situation, address further collection as appropriate, and handle the information in accordance with applicable requirements. SSB is not presented as a school’s official student-record system; school or district use requires a separate assessment and suitable agreements.
Security and policy updates
We use access controls and private file retrieval to protect study spaces. No service can guarantee absolute security, and this is not a claim of end-to-end encryption. Keep credentials and invitation links private and report suspected unauthorized access through the request form.
We will post changes here with a new effective date. For material changes, we will provide a prominent notice or contact affected account holders where appropriate or required. A changed policy is not blanket permission to reuse previously collected information for an incompatible purpose.
Super Smart Buddy