Privacy Policy

Last updated: October 2, 2026

This Privacy Policy explains what information Studyfin ("we", "us") collects, how we use it, and your choices. We designed Studyfin to collect the minimum personal information needed to run the service, and we never sell personal data.

Jump to:
What we collect How we use it Children's privacy Tutor screening data Who we share with What our AI sends Google data Your rights Security & retention

1. Information we collect

Account info: name, email, and the role you choose (student, parent, school, tutor). We use Google, Microsoft, or Apple sign-in, so we receive basic profile details from those providers.
Learning activity: the lessons, quizzes, and practice a student completes, and the resulting progress and mastery signals.
Tutoring: bookings, session times, ratings/reviews, and (for tutors) profile, credentials, and payout setup.
Payment info: processed by Stripe. We receive confirmation and limited details (e.g. last 4 digits) but not your full card number.
Technical data: standard logs needed to operate and secure the service.

2. How we use information

We use information to provide and improve the service: generate and adapt lessons, show progress to parents/teachers, match and run tutoring sessions, process payments, provide support, keep the platform safe, and meet legal obligations. We do not use children's personal information for behavioral advertising.

3. Children's privacy (COPPA & similar)

Studyfin is designed for K–12 learners, including children under 13. We follow the principles of the U.S. Children's Online Privacy Protection Act (COPPA) and comparable laws:

We ask a learner's age with a neutral screen before they start. A learner under 13 must be added by a parent, guardian, or school, who provides consent — until then, the child can't access lessons.
A parent or guardian gives consent when they link the child on the parent dashboard (we record who consented and when). Schools may provide consent on behalf of parents for school-managed accounts.
Parents can control the curriculum for each child — blocking any subject or topic they prefer the child not see.
We collect only the information needed for the educational service and the safety of tutoring sessions.
Parents and schools can review, export, or delete a child's information and revoke consent — directly from the parent dashboard (Download data / Delete data) or by contacting us. We delete the account and associated personal data unless we must retain it by law.
We do not condition a child's participation on disclosing more information than is reasonably necessary, and we do not use children's data for behavioral advertising.
For under-13 tutoring, a parent must be present in the session (see Terms), adding a layer of parental oversight.

4. Tutor screening data

Background checks for tutors are conducted by our partner Checkr, Inc. Sensitive details required for a check (such as SSN and date of birth) are provided by the applicant directly to Checkr; Studyfin does not collect, view, or store them. We receive only the outcome of the check (e.g. "clear" or "consider"). See the background-check disclosure.

We share information only with service providers who help us run Studyfin, under contract and only as needed:

Google Cloud / Firebase — hosting, database, authentication, and the read-aloud voice (Google Cloud Text-to-Speech, which receives the words being read out).
Google Gemini — the AI behind our generated lessons and our AI features. Lesson, quiz, and practice prompts carry only a subject, topic, grade, and difficulty — nothing that identifies a learner. Other features send more than that, including a child's name in some cases, and section 6 sets out exactly which.
OpenAI or Anthropic — only in the two situations described in section 6: when a school or center chooses to run Studyfin's AI on its own API key, or when Google Gemini is unavailable and a lesson, exam draft, or tutor answer would otherwise fail.
Stripe — payments and tutor payouts.
Checkr — tutor background checks.
Daily.co — secure video for tutoring sessions.
Resend — delivering our email. Anything in a message we send you passes through them, which for a progress email or session recap includes your child's name.

We may also disclose information if required by law or to protect the safety of users. We do not sell personal data.

6. What our AI features send, and what they don't

We'd rather be specific here than reassuring, because the answer genuinely differs from feature to feature.

Making lessons, quizzes, and practice questions. The prompt contains a subject, a topic, a grade level, and a difficulty — and nothing else. No name, no account, nothing tied to a particular child. One generated lesson is then cached and reused for every student who reaches that topic.
Writing about one named child. A few features exist to produce a piece of writing about a particular student: a progress report for a parent, an end-of-term report card, a tutoring session recap, a parent digest, a home-practice plan for a parent, a tutor's progress summary, and the note sent home after a live class activity. For these, the child's name is part of the prompt — the output is a letter that opens "Dear parent/guardian of …" and refers to the child by name throughout, so the model is given the name. A teacher's class comment bank sends the names of every pupil in that class. The name comes either from what a teacher, tutor, or parent typed in, or from the child's Studyfin profile.
Reading a child's own work. Writing feedback, language-conversation practice, questions asked inside a lesson or a live class, discussion posts, and help requests send the words the child wrote. Our handwriting feature sends an image of the child's handwriting — so if they wrote their name on the pad, their name is in that image. We keep a one-way fingerprint of the image so an identical re-submission isn't charged twice; we don't keep the image.
Safety checks. Free text that is about to be shown to other people — a review, a discussion post, a live-class message, a school application — is sent to the model first to be checked for anything that doesn't belong around children. A school application is checked with the child's and parent's names in it.

When a school or center uses its own AI key. A school or center can connect its own OpenAI, Anthropic, or Google API key, after which its staff's AI features run on that account instead of ours. When that is switched on, the prompts described above — including the ones carrying a child's name — go to OpenAI or Anthropic rather than to Google Gemini. Handwriting images are the one exception: they always go to Google Gemini and never to another provider. If your child is at a school or center, you can ask us which AI provider it has configured and we will tell you.

When Gemini is unavailable. Three features — the lesson/tutor engine, exam creation, and our internal content review — can fall back to Anthropic or OpenAI on Studyfin's own account if Google Gemini is out of capacity, so that a child mid-lesson gets an answer instead of an error. The same prompt is sent, which for a lesson chat means the question the child typed. This never happens for images.

What each AI provider is permitted to do with a prompt — how long they may keep it, and whether they may use it to improve their own models — is set by our contract with that provider rather than by this page. If you need that in writing for a school or district agreement, ask us and we will send you the current terms.

7. Google user data (Calendar & Classroom)

If you choose to connect your Google account, Studyfin requests only the Google data needed for the specific feature you turn on, and only after you grant consent on Google's own screen:

Google Calendar (calendar.events, calendar.freebusy) — to create, update, and cancel your tutoring/coaching session events on your calendar, and to read your busy times so we don't double-book you. We access only event and free/busy data needed to schedule sessions.
Google Classroom (classroom.courses.readonly, classroom.coursework.students, classroom.rosters.readonly, classroom.profile.emails) — for teachers who link Classroom: to list your classes, sync your class roster, post and pass back assignment grades, and match students by their class email.

How we handle it: Google data is accessed only to provide the features you request, is transmitted over encrypted connections, and is stored only as needed to keep those features working (for example, OAuth tokens are encrypted at rest, and a session's linked calendar-event ID is stored so the event can later be updated or removed). We do not sell Google user data, do not use it for advertising, and do not use it to train generalized AI/ML models. You can disconnect at any time from your Studyfin settings, or revoke access at myaccount.google.com/permissions — either stops further access and deletes the stored tokens.

Limited Use. Studyfin's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. Your rights & choices

You can access, correct, export, or delete your information, and (for parents/schools) that of children you manage. Parents can do this themselves from the parent dashboard: Download data exports the child's profile, progress, and quiz attempts as a file, and Delete data permanently erases them. You can also use the in-app assistant or a support ticket. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; we honor applicable requests.

9. Security & retention

We use industry-standard safeguards (encryption in transit, access controls, and trusted infrastructure) to protect your data. We keep personal information only as long as needed to provide the service or meet legal requirements, then delete or anonymize it. No method of transmission or storage is 100% secure, but we work to protect your information and to respond promptly to any incident.

Who we are, and how to reach us

Studyfin is operated by Contribute AI LLC. If you are a parent or guardian and you want to review, correct, export or delete your child’s information, or you have any question about this policy, contact us by any of the routes below and we will respond.

Contribute AI LLC
12234 Queenston Blvd, Suite 200
Houston, TX 77095
United States
Telephone: +1 210-595-9414
Email: support@studyfin.ai

You can also use the in-app assistant or open a support ticket. See also our Terms of Service and our handwriting data policy.