Privacy Policy
This Privacy Policy explains how Eura (the "App," "we," "us," or "our") collects, uses, and protects your information. Eura is a math-tutoring application where students draw their work on a canvas and receive AI-assisted feedback from Orion, the App's in-app AI tutor.
The App is operated by Connor Tan, an individual sole proprietor ("we"). If you have any questions, contact us at connorxtan@gmail.com.
Plain-language summary: We collect your email to create your account, and we store the work you create in the App (your drawings, canvases, and chat with the tutor). To give you feedback, images of your work are sent to OpenAI for analysis. We don't show ads, we don't sell your data, and we don't track you across other apps or websites. You can delete your account and all of your data at any time from within the App.
1. Who can use the App (age requirement)
The App is intended for users 13 years of age and older. We do not knowingly create accounts for, or collect personal information from, children under 13. When you sign up, we ask you to confirm you meet the minimum age. If you believe a child under 13 has provided us information, contact us at connorxtan@gmail.com and we will delete it.
If you are between 13 and 18, you should review this policy with a parent or guardian.
2. Information we collect
Information you provide:
- Account information — your email address and a password. Passwords are handled and stored in hashed form by our authentication provider (Supabase); we never see your plain-text password.
- Your content — the math work and materials you create in the App, including freehand drawings/strokes, canvas and folder names, thumbnails of your canvases, and the messages you exchange with the AI tutor ("chat history").
Information collected automatically:
- Technical and usage data — basic technical information needed to operate and secure the service, such as request logs, timestamps, and per-user rate-limiting counts. We do not use third-party advertising or analytics SDKs.
- A unique user identifier assigned to your account so your content is associated with you.
We do not collect your contacts, precise location, health data, financial information, or device advertising identifiers, and we do not use device sensors beyond the touch/Apple Pencil input you draw with.
3. How we use your information
We use your information only to provide and improve the App:
- to create and manage your account and sign you in;
- to store, sync, and display your canvases, drawings, and chat history across your devices;
- to process images of your work through our AI provider so the App can read your handwriting, check your steps, and generate hints and answers;
- to send you essential account emails (sign-up confirmation, password reset) via our email provider;
- to maintain security, prevent abuse, and enforce rate limits; and
- to comply with legal obligations.
We do not sell your personal information, we do not use it for advertising, and we do not use it to track you across other companies' apps or websites.
4. AI processing (OpenAI)
To give you feedback, images of your handwritten work and related text are sent to OpenAI (the OpenAI API) for optical character recognition and step analysis. Important points:
- We use OpenAI's API, not the consumer ChatGPT product. Under OpenAI's API terms, your inputs are not used to train OpenAI's models by default.
- OpenAI may retain API data for a limited period for abuse and misuse monitoring, after which it is deleted, per OpenAI's policies.
- You should avoid drawing or typing sensitive personal information (such as full legal names, addresses, or ID numbers) into your work, since that content is transmitted for processing.
5. Service providers (subprocessors)
We rely on a small number of trusted third-party providers to run the App. They process data only on our behalf to deliver the service:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Authentication, database, and file storage | Email, hashed password, user ID, canvases/folders, drawings, thumbnails, chat history |
| Amazon Web Services (AWS) | Backend application hosting (App Runner, US East region) | Requests and content passed to the backend in transit |
| OpenAI | AI processing (OCR, step analysis, hints) | Images of your work and related text |
| Resend | Transactional email delivery (confirmation, password reset) | Your email address |
We do not permit these providers to use your information for their own marketing.
6. Where your data is stored
Your data is stored and processed in the United States. If you access the App from outside the U.S., you consent to your information being transferred to and processed in the U.S.
7. Data retention
We keep your account information and content for as long as your account is active. When you delete your account (see Section 9), your account and associated content are deleted from our database and file storage. Backups and provider logs may persist for a limited period before being overwritten or expired. OpenAI's limited-retention period for processed content is governed by OpenAI's policies.
8. How we protect your data
We use industry-standard safeguards, including encryption of data in transit (HTTPS/TLS), authenticated API access using signed tokens (JWT), and database-level access controls (row-level security) so that each user can only access their own data. No method of transmission or storage is completely secure, but we work to protect your information.
9. Your rights and choices
- Access and correction — you can view and edit your content directly in the App, and update your email/password in your account settings.
- Account and data deletion — you can delete your account at any time from within the App ("Delete Account" in settings). This permanently deletes your account and associated content from our systems.
- Privacy requests — depending on where you live (for example, under the EU/UK GDPR or the California CCPA/CPRA), you may have additional rights to access, correct, delete, or port your data, and to object to or restrict certain processing. To make a request, email connorxtan@gmail.com. We do not "sell" or "share" personal information as those terms are defined under U.S. state privacy laws.
10. Children's privacy
As stated in Section 1, the App is for users 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. We do not show third-party advertising or use third-party tracking in the App.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" above and, for material changes, provide notice in the App or by email. Your continued use of the App after an update means you accept the revised policy.
12. Contact us
Questions or requests about this policy or your data:
Connor Tan
Email: connorxtan@gmail.com