Skip to content
How it worksWhat you getFree creditsLive tutorBlogOpen Porphy
Legal

Privacy Policy

Plain language, no dark patterns. Here is exactly what we collect, why, and how to get rid of it.

Last updated
13 September 2026

This policy covers porphy.app and the Porphy apps. It explains what data we hold, the legal basis for holding it, and the controls available to you. It applies to everyone, not just users in regions that require it.

01What we collect

We collect the minimum needed to build your courses and keep your account working. Concretely:

  • Account data, name, email, and a hashed password (or your identity-provider ID if you sign in with Google).
  • Learning data, the topics you ask for, the courses generated for you, quiz answers, flashcard results and mastery scores.
  • Tutor sessions, transcripts of what you and the tutor said, and whiteboard strokes, so a session can be resumed.
  • Technical data, device type, browser, IP address and error logs, used for security and debugging.
  • Billing data, handled by our payment processor. We never see or store your full card number.

02How we use it

Your data is used to deliver and improve the product you are paying for, nothing else:

  • Generating, personalising and scoping your courses.
  • Generating flashcards and quizzes, answering questions about the materials in your Projects, and scoring the concept map there.
  • Preventing abuse, fraud and automated scraping.
  • Sending transactional email (receipts, password resets, security alerts). Marketing email is opt-in only.
We do not sell your personal data, and we do not share it with advertisers.

03AI and your content

Porphy sends your topic prompts and lesson context to third-party model providers in order to generate courses and run the live tutor. Those providers process the content to return a response.

Your private learning content is not used to train our models or theirs unless you explicitly opt in from Settings → Privacy. Aggregate, de-identified statistics (for example, “how often quizzes are retried”) may be used to improve the product.

04Cookies

On this website, nothing beyond the essential group loads until you allow it, not in the EU, not anywhere. Before you answer, the scripts are never fetched, so no analytics or advertising provider sees your visit at all. The groups you choose between are:

  • Essential, One cookie, holding the choice you make here, so you are not asked again on every page.
  • Analytics, Which pages get read, where people stop scrolling, which link they were on when they left.
  • Advertising, Lets an ad platform see that its click led to a sign-up, so a campaign can stop paying for clicks that lead nowhere.

The cookie policy lists every cookie by name, who sets it and how long it lasts. You can change your answer at any time: . Signing in to the app also sets session cookies, which are essential to staying signed in.

05How long we keep it

Learning data is retained while your account is active. If you delete your account, courses, tutor transcripts and graph data are purged within 30 days, except where we are legally required to keep billing records (typically 7 years, and limited to invoice data).

Backups roll off on a 35-day cycle.

06Your rights

Wherever you live, you can exercise the following from Settings → Privacy, or by emailing us:

  • Export everything we hold about you, in JSON.
  • Correct anything inaccurate.
  • Delete your account and its data.
  • Object to analytics processing, or withdraw consent.

Requests are actioned within 30 days. If you are unhappy with our response, you may complain to your local data protection authority.

07Children

Porphy is not intended for children under 13. If you believe a child has created an account, contact us and we will remove it and its data.

08Contact

Questions about this policy, or a data request? Reach us at privacy@porphy.app or through the contact page. We answer privacy mail within one business day.