Privacy policy
Last updated November 5, 2026
The short version: your prompts are private. We use them only to run your exercises and show your progress. We never sell them, never show them to other people, and never use them to train AI. You can delete your prompts, or your whole account, any time.
What we collect
- Your account: when you sign in with Google, we receive your name, email address and a Google account ID. We don't get your Google password.
- Your practice: the prompts you write, the AI's answers to them, and your scores.
- Early-access list: if you join it, your email address and the plan you picked.
- Abuse protection: to limit how often the exercises can be run, we store a scrambled, one-way code made from your IP address (a keyed hash), not the address itself. Our hosting providers keep standard server logs, which include IP addresses.
- Visit counts: to see how many people visit, each page view records the page, the site you came from, and a one-way code made from your IP address and browser that changes every day, so visits can't be linked across days or to you. No cookies are used for this. Page view records are deleted after 90 days.
- On your device: your browser stores your sign-in session and your light or dark theme choice. We don't use advertising or analytics cookies, and we don't track you across other sites.
How we use it
- To run your prompt, grade the result, and show your scores and progress.
- To keep the service fair and working: rate limits and preventing abuse.
- To email you about launch, only if you joined the early-access list.
We don't sell or rent your personal information, we don't share it for advertising, and we don't show your prompts to other people. To answer identical prompts faster, we may reuse a stored AI answer when someone types exactly the same text for the same exercise. That never reveals who wrote it.
AI processing
To run and grade an exercise, your prompt and the exercise material are sent to our AI provider, Anthropic, through its commercial API. Under Anthropic's commercial terms, data sent through its API isn't used to train its models. We don't use your prompts to train AI either.
Who helps us run the service
- Supabase: database and sign-in.
- Netlify: website hosting.
- Anthropic: the AI that runs and grades exercises.
- Google: sign-in with your Google account.
- Stripe: payments, if you upgrade. Card details go directly to Stripe; we never see or store them.
They process data only to provide their service to us.
How long we keep it, and deleting it
- Signed in: your prompts and scores are kept until you delete them. When you delete them, the prompts, answers and scores are erased; we keep only the time of each attempt so daily free limits stay fair. Use the Account button to delete all your prompts or delete your account. Deleting your account removes your prompts, scores, and early-access sign-ups.
- Not signed in: prompts are deleted automatically after 30 days.
- Early-access list: kept until launch or until you ask us to remove you.
Security
Data is encrypted in transit (HTTPS). Access to the database is restricted: each signed-in person can read only their own practice history, and only our servers can write to it. No system is perfectly secure, but we work to protect your information and collect as little as we need.
Age
AI Exercises is for people 13 and older. If you're under 18, please ask a parent or guardian before signing up. We don't knowingly collect information from children under 13; if we learn we have, we'll delete it.
Your rights
Depending on where you live, including California and other US states, you can ask to access, correct, or delete your personal information, and you can't be treated differently for asking. You can delete your data yourself from the Account button, or contact us below.
Changes
If we change this policy, we'll update the date above, and for significant changes we'll tell signed-in users.
Contact
Questions or requests: privacy@aiexercises.ai.