What we keep, for how long, and how to make us delete it.

Parents. You create the account, you hold the password, and your child studies on your session. We never ask a child to sign up, sign in, or tell us anything about themselves.

• Your account: a username and password, held by AWS Cognito. We do not store your password.
• What you upload: the photos or PDFs of study guides you choose to send us. Please crop out your child's name, school, or teacher first; the study content is all that is needed.
• What we build from it: the summary, flashcards, games, pictures and practice tests, and every attempt your child makes at them, so the results page can show progress.
• Optional settings: a grade level, and a nickname if you choose to enter one. A first name is not required and we suggest a nickname instead.

• No advertising, and no ad networks or trackers on any page.
• No analytics SDKs. We look at server logs to keep the site running, nothing more.
• No selling, renting, or sharing of anything you upload.
• No contact with your child. All email goes to the parent.

To turn a photographed page into practice, the page is sent to Anthropic's Claude API, under Anthropic's commercial terms. Their published policy for API customers is that inputs are not used to train their models and are retained for a limited period (currently up to 30 days) for safety monitoring, then deleted.

Pictures and the read-aloud voice are produced through OpenRouter. Those requests contain only the study text the app wrote — a description like “a rain gauge” or a quiz question — and never your uploads.

• Uploaded photos and PDFs: deleted automatically 400 days after upload (long enough to cover a full year of “add more pages”), or immediately when you delete the study set.
• Study sets, pictures and scores: kept while your account exists, deleted when you delete the set or the account.
• Generation job records: deleted automatically after 30 days.

Any study set can be deleted from inside the app, and its uploads, pictures and scores go with it. The whole account can be deleted from Settings (“Delete this account”) — it removes every set, upload, picture, score and setting, then the login itself, right away. If you can no longer sign in, email hello@sophiastudies.com and it will be done by hand within seven days. Our database backups roll off within about 35 days, so a deleted account can linger there that long before it is gone from everywhere.

On Amazon Web Services in the United States. Sessions end when you close the browser or after fifteen minutes without activity, so a shared computer does not stay signed in.

If any of this changes, the change will be written here and dated. This page was last updated on 8 September 2026.