Privacy Policy

Last updated 8 October 2026

Erumore is a learning app: you take AI-graded tests and study with an AI tutor. This policy explains what we collect to run it, why, who helps us, and what you can do about it.

In short: we collect only what the app needs. We do not sell your data, show ads or follow you across other sites; we count visits without cookies. You can download or delete everything under Settings → Privacy and data. Erumore is for people aged 16 and over.

1. Who is responsible

Erumore is run by Erumore (“we”). We run the websites erumore.com and app.erumore.com and the Erumore phone app, and we are the controller of your personal data: we decide why and how it is used.

For anything about your data, write to contact@explar.space. We have not appointed a data protection officer; this address reaches the person who handles privacy.

2. Age: 16 and over

Erumore is for people aged 16 and over. We ask you to confirm your age when you create an account; an account made before we asked is asked the first time it is opened after this policy took effect. We cannot check your age beyond asking, so you promise that your answer is true.

We do not knowingly keep the data of anyone under 16. If someone tells us they are under 16, or we learn that an account belongs to such a person, we delete the account and its data. If you are a parent or guardian and believe your child has an account, write to us and we will delete it.

3. What we collect, why, and on what legal basis

What	Why	Legal basis (GDPR)	How long
Account: your email address, your password (kept only as a hash by our sign-in provider), the name and nationality you give, how you sign in, and when you accepted these documents and confirmed your age.	To create and secure your account, sign you in, and keep a record of your agreement.	Contract, art. 6(1)(b). The record of your agreement: our legal obligation and our legitimate interest in proving it, art. 6(1)(c) and (f).	Until you delete your account.
Profile: display name, nationality, app language, plan, teaching style, and the closed-book rules you accepted.	To run the service and show your place on the leaderboards. Other learners see your display name, country, points, level and number of tests.	Contract, art. 6(1)(b).	Until you delete your account.
Learning activity: the topics you ask to be tested on, questions, your answers, grades and feedback, mastery, distinctions, review reminders, short notes on your strengths and mistakes, and daily usage counters.	To run tests and lessons, grade and rank you, remind you what to review, and keep the daily limits of your plan.	Contract, art. 6(1)(b).	Until you delete your account.
Test integrity signals: how often you left a test, how long you were away, and whether you pasted text.	To keep the rankings fair and to prevent cheating.	Our legitimate interest in fair rankings, art. 6(1)(f). You may object (see section 9).	Until you delete your account.
Voice calls (Adept Whisper): your voice while you talk to the voice tutor.	To hold the call. You start each call and allow the microphone yourself.	Contract, art. 6(1)(b).	We do not record or keep the audio. See section 6 for the provider.
Technical data: IP address, device and browser details, and the time of requests.	To deliver the service, keep it secure, find faults and prevent abuse.	Our legitimate interest in a secure, working service, art. 6(1)(f).	Short periods, set by our hosting and database providers.
Visit statistics: which pages are opened, the referring site, country, type of device, browser and operating system, and how fast pages load. Counted by Vercel Web Analytics and Speed Insights without cookies and without storing anything on your device. A visitor is told apart only by a code made from the request, which changes every day; your IP address is not kept.	To see which parts of the websites people use and to find and fix slow pages.	Our legitimate interest in improving the service, art. 6(1)(f). You may object (see section 9).	We see only totals, never one visitor. Vercel keeps the figures for the period its service sets.
Messages to us: what you write when you contact us.	To answer you.	Contract or our legitimate interest in answering, art. 6(1)(b) and (f).	As long as needed to answer you and to deal with any later claim.
Payments, once paid plans are on sale: what the app store or payment provider tells us about your subscription (never your card number).	To give you a paid plan and keep accounting records.	Contract, art. 6(1)(b); accounting law, art. 6(1)(c).	As long as the law requires.

We do not ask for more than this: no phone number, address, date of birth, government ID or payment card number. Providing the account data is needed to use Erumore; without it we cannot give you an account.

4. How AI uses your data

Questions, grading, tutoring and Open Discussion are written by AI models. To do this we send an AI provider the topic you chose, the questions, your answers, the conversation of the lesson you are in, a short summary of your progress and mistakes, your teaching style and your language. We do not send your name, email address or country.

AI providers process this on our behalf, as our processors. We use their business (API) services and do not give them permission to use your data to train their models. Which provider answers a request depends on how the service is set up; section 6 lists those that may be used.

AI can be wrong. Grades, feedback and explanations are generated automatically and are not checked by a person. Your score, mastery and place on the leaderboard are calculated automatically from those grades. This has no legal or similarly significant effect on you, but if you think a grade is wrong, write to us and a person will look at it.

5. What other people can see

Other learners can see your display name, your country (if you set one), your knowledge points, level and number of tests on the leaderboards. They never see your email address. Choose any display name you like; it does not have to be your real name, and you can leave the country leaderboards by removing your nationality in Settings.

If you share your profile, the link carries a signed copy of your name, country, score, ranks, strongest subjects and distinctions as they were on the day you shared it. Anyone with the link can see it. We cannot recall a link once it has been shared, and it does not update.

6. Who receives your data

These companies help us run the service. Most act as our processors: they handle your data only for us, for the purpose shown, under a contract. Google, Apple, Meta and the app stores run their own sign-in and billing, as independent controllers under their own privacy policies. We do not sell your personal data and do not share it for advertising. We may disclose data when the law requires it, for example to a court or authority, or to protect our rights.

Who	What for	Which of your data
Supabase	Database and sign-in: keeps your account, profile, tests and progress, and verifies who you are.	All the account and learning data described above.
Vercel	Hosts the websites and the server that runs Erumore, and counts visits and page speed (Web Analytics, Speed Insights).	Every request to Erumore: IP address, device and browser details, and what you send. For the statistics: pages opened, referring site, country, device type and load times, without cookies.
OpenAI	AI model: writes questions, grades answers, tutors you and takes part in discussions.	The topic you chose, questions, your answers, lesson messages, a short summary of your progress and mistakes, your teaching style and language. Not your name, email or country.
Anthropic	AI model (only if used): the same work as above.	The same as for OpenAI.
DeepSeek	AI model (only if used): the same work as above. Its servers are in China.	The same as for OpenAI.
Google (Gemini API)	Voice tutor calls (Adept Whisper), through Google's Gemini Live.	Your voice while you talk, plus the study context and progress summary the voice tutor needs.
Google, Apple, Meta (Facebook)	Only if you choose “Continue with Google / Apple / Facebook”.	They send us your name, email address and a sign-in identifier.
Apple App Store, Google Play	Billing of Adept and Adept Whisper subscriptions bought in the phone apps, once payments are open.	Purchase and subscription status; we never receive your card number.

7. Transfers outside the European Economic Area

Some of these providers are in, or process data in, the United States or other countries outside the European Economic Area. Where that happens, the transfer relies on an adequacy decision of the European Commission, the EU–US Data Privacy Framework or the Commission’s standard contractual clauses, as the provider offers. You can ask us for a copy of the safeguards in use.

Providers marked “only if used” are used only if the service is set up to use them; if one is, your data reaches it as described above.

8. How long we keep data

Account and learning data: until you delete your account. Deleting removes it from the live service at once.
Backups: our database provider keeps backups for a short time and overwrites them on its normal schedule. Deleted data is never restored into the live service.
Technical logs: for the short periods set by our hosting and database providers.
Records the law requires us to keep, such as invoices once paid plans are on sale: for as long as the law requires.

9. Your rights

Under the GDPR you have the right to:

Access your data and get a copy: Settings → Privacy and data → Download my data gives you a file (JSON) with everything we hold about you, ready to move to another service (portability).
Correct your data: change your name, nationality, language and email in Settings, or write to us.
Erase your data: Settings → Privacy and data → Delete my account, or the page /delete-account. It deletes your account and everything in it; type DELETE to confirm.
Restrict or object to processing that rests on our legitimate interest, for example the integrity signals: write to us and we will stop unless we have compelling reasons that outweigh your interests.
Withdraw consent where we rely on it. We do not currently rely on consent for any processing beyond the permissions you give your device, such as the microphone.
Complain to a data protection authority. In Poland that is the Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, Poland (uodo.gov.pl). You may also complain to the authority of the country where you live or work.

We answer requests within one month. We may ask you to prove it is you, for example by writing from your account’s email address.

10. Cookies and similar storage

We use only what is needed to run the app and remember what you asked for. We use no advertising or analytics cookies and no trackers. The visit statistics in section 3 need no cookies and store nothing on your device, so there is no cookie banner.

Name	What it holds	How long
Sign-in session (local storage, sb-…-auth-token)	Keeps you signed in. Needed for the app to work.	Until you sign out or it expires.
estratos-language (cookie)	The language you chose.	1 year.
sidebar_state (cookie)	Whether the side menu is open.	7 days.
adept-preferences (local storage)	On your device only: a copy of your display name, topics you saved, your banner and avatar choices, including a profile photo if you pick one.	Until you clear your browser data.
estratos-language-pending, estratos-seen-notifications (local storage)	A language chosen before you signed in; which reminders you have already seen.	Until used or cleared.

The phone app keeps the same kind of data in its own storage on your device.

11. How we protect your data

Connections are encrypted. Passwords are stored only as hashes by our sign-in provider. The database accepts requests only from our server, with a key that never reaches your browser or phone; every learner’s rows are tied to their own account. Hidden grading guidance stays on the server. Access to production systems is limited to the people who need it. No system is perfectly secure; if a breach puts your rights at risk we will tell you and the authority as the law requires.

12. Changes to this policy

We change this policy when Erumore or the law changes. The version date is at the top. For changes that matter to you we ask you to read and accept the new version the next time you open the app. Earlier versions are available on request.

13. Contact

Erumore. Email: contact@explar.space.