Privacy policy

Last updated October 28, 2026

Amos turns your questions and your own lecture notes into lessons. To do that it has to store what you upload and send it to an AI model. This page says exactly what we keep, who else handles it, and how to get it removed. We don’t sell your data and we don’t show ads.

What we collect

Your account

Your email address, your password (stored only as a one-way hash by our sign-in provider, never readable by us), and the name you choose, if any. If you joined the waitlist, the email, name and subject you gave us.

Your course material

Files you upload (PDFs, Markdown, text and images, up to 15 MB each) and the text we read out of them, organised into your courses.

Your learning

The questions you ask, the lessons and chats that come back, your answers to practice questions, and what the app works out about your progress: which concepts you know, what’s due for review, and how you like to learn. These follow you between devices.

Usage and billing

A record of each request to the AI model (when, what kind, how many tokens and what it cost), so we can apply your plan’s allowance. If you subscribe, your plan, its status and renewal date, and the id Stripe gives your customer record. Card details go straight to Stripe and never reach our servers.

Feedback

Anything you send with Send feedback, with the page you were on. If you tick Share this lesson, it also notes which lesson you were on, so we can open it.

Error reports

When something breaks, a report of the error: what failed and where in our code, the page or feature it happened on, your browser and device type, your plan, and your account’s id (a random identifier, not your name or email). Reports never include your questions, your course material, your lessons or your email address; we strip those out before a report leaves the app.

How we use it

  • To make lessons: your question, and the relevant parts of your course material, are sent to the AI model that writes the lesson.
  • To keep your courses, chats and progress in your account and in step across devices.
  • To apply usage allowances and run subscriptions.
  • To improve the app: we read feedback, and we review questions the visual library couldn’t show well to decide which visuals to build next. When you share a lesson with your feedback, we read that lesson, its follow-ups and what you asked in it, to look into what you reported. We don’t open lessons you haven’t shared, and a lesson you delete is gone from that view too.
  • To find and fix bugs, from error reports.
  • To keep the service secure and stop abuse, such as automated sign-ups.

We don’t use your data for advertising, we don’t sell or rent it, and we don’t use your uploads to train AI models.

Who else handles it

A few services run parts of the app for us. Each only gets what it needs for its job:

  • Anthropic runs the main AI models (Claude). It receives your questions and the course material a lesson draws on. Under its commercial terms for the API, Anthropic doesn’t train its models on this data.
  • OpenAI runs a second AI model (GPT-6.1 Sol), which writes some lesson pages in the background and stands in when Claude is unavailable. It receives the same things for those lessons. Under its API terms, OpenAI doesn’t train its models on this data, and we ask it not to store responses.
  • Supabase hosts our database, sign-in and file storage.
  • Vercel hosts the app itself and counts visits to our public pages.
  • Stripe processes payments for Pro and Max, and keeps your billing details.
  • Sentry receives the error reports described above, so we can see and fix what broke. It deletes them after 90 days at most.
  • An email provider sends account emails (confirming your address, resetting your password).

These services may process data in the United States and other countries. We’d only share data with anyone else if the law required it.

Cookies and browser storage

We use cookies to keep you signed in. If you arrive from one of our own links (a post, an email or a poster), a cookie also remembers that link’s labels, such as “poster” or “launch”, for 30 days, and we save them with your waitlist entry or new account. That tells us which of our posts brought people. It holds nothing about you and isn’t shared. There are no advertising cookies. Error reports don’t use cookies, and they don’t record your screen.

Vercel Web Analytics counts visits to our public pages (the home page, pricing, help, sign-up and these policies) without cookies and without identifying you. It doesn’t see the pages inside the app.

The app also keeps a working copy of your chats, your theme and a few view settings in your browser’s local storage, so it loads quickly and works offline for a while. Signing out or clearing site data removes it from that browser; your account keeps its own copy.

How long we keep it

We keep your account data for as long as you have an account. You can delete courses, files and chats yourself at any time, and they’re removed from our storage.

You can delete your whole account in Settings → Delete account. That cancels any subscription straight away and deletes your account, courses, files, chats, progress, feedback and waitlist entry. Copies in our hosting provider’s backups are gone within 30 days. If you ask us to delete your account instead, we do it within 30 days.

Two things stay after an account is deleted, with nothing linking them to you: the usage records described above (when, what kind of request, tokens and cost), which keep plan-wide allowances and our costs accurate; and shared caches of course plans and visuals, which never recorded who asked. Stripe keeps its records of your payments for as long as tax and accounting law requires.

Your choices and rights

You can delete your account yourself in Settings, as described above. You can also ask us for a copy of your data, to correct it, or to delete your account for you. Depending on where you live, you may have further rights, such as objecting to how we use your data or complaining to your local data protection authority. To make a request, sign in and use Send feedback in the app; we’ll answer within 30 days.

Security

Data is encrypted in transit and at rest, and only our server can reach the database and file storage. The security page has the details.

Children

Amos is for students aged 13 and over. If you’re under 18, use it with a parent or guardian’s permission. If you believe a child under 13 has given us personal information, sign in and use Send feedback in the app and we’ll delete it.

Changes

If we change this policy, we’ll update the date at the top, and for significant changes we’ll tell you by email or in the app before they take effect.

Contact

For anything about your privacy, sign in and use Send feedback in the app.