Privacy Policy

Effective: March 24, 2026

This policy explains what data Aelu collects, what it does not collect, and how your information is handled. It is written in plain language because privacy policies should be readable, not endurable.

1. What We Collect

Account information: If you create an account, we collect your email address and a password (stored as a salted hash -- we cannot see your password). If you sign up for the paid tier, your name and billing information are collected by Stripe, our payment processor.

Study progress: Your learning data -- drill scores, session history, reading activity, vocabulary progress, diagnostic results -- is collected to power the adaptive scheduling algorithm and your per-skill diagnostics.

Payment information: If you subscribe to Full Access, payment is handled entirely by Stripe. We receive confirmation of your subscription status, but we never see or store your credit card number, CVC, or full billing details. Stripe's privacy policy governs how they handle your payment data.

Contact form submissions: If you email us or use the contact form, we receive your email address and message content. Contact forms are processed through Formspree.

2. What We Do NOT Collect

This section matters as much as the one above.

• We do not run third-party advertising networks or display ads.
• We do not use tracking pixels from social media platforms.

3. How Data Is Stored

Learning data: Your study progress, drill scores, and reading history are stored using a combination of browser storage and our servers. This data powers the adaptive scheduling algorithm and your per-skill diagnostics.

Account data: If you create an account, your email and hashed password are stored on our servers. This data is used only for authentication and account management.

Payment data: All payment information is stored and processed by Stripe. We do not store payment details on our servers. See Stripe's privacy policy for details on how they handle your payment information.

4. Cookies

Aelu uses first-party cookies only. We do not use third-party tracking cookies.

• Session cookie: Keeps you logged in while you use the app. Expires when you close your browser or after a set period.
• Referral tracking cookie: If you arrive via an affiliate link, a cookie records the referral source so the affiliate receives proper credit. This cookie expires after 90 days.
• Preferences cookie: Stores your display preferences (such as dark mode override, if applicable). Persistent, stored locally.

You can disable cookies in your browser settings. The app will still function, but you may need to log in more frequently.

5. Analytics

We use Plausible Analytics for aggregate usage metrics. Plausible does not use cookies and does not track individual users across sites. It tells us things like page views, referral sources, and general device and browser information.

We use Sentry for error monitoring and crash reporting, which may include technical details about your device, browser, and the state of the application when an error occurred.

We analyze aggregate learning metrics to improve the product. This may include patterns in how users interact with drills, reading passages, and other features -- but always in aggregate, not tied to individual profiles.

6. Third Parties

We use the following external services:

• Stripe -- processes payments for Full Access subscriptions. Stripe receives your payment information directly. Stripe Privacy Policy.
• Plausible Analytics -- provides privacy-focused website analytics. Plausible does not use cookies and does not collect personal data. Plausible Data Policy.
• Sentry -- monitors errors and application crashes. Sentry may receive technical information about your device, browser, and the state of the app when an error occurs. Sentry Privacy Policy.
• Formspree -- processes contact form submissions. Formspree receives your email address and message content. Formspree Privacy Policy.
• Resend -- delivers transactional email (account verification, password resets, progress updates). Resend receives your email address and the content of system-generated messages. Resend Privacy Policy.
• Firebase Cloud Messaging -- delivers push notifications on mobile devices. Firebase receives a device token to route notifications. Firebase Privacy.

Content generation features may use AI models (including local models via Ollama) at build time. These do not process your personal data.

7. Data Retention

Learning data: Retained while your account is active. You can request deletion at any time.

Account data: Retained until you delete your account. When you request account deletion, we delete your email, hashed password, and any associated server-side data.

Payment history: Stripe retains transaction records as required by financial regulations. We retain only your subscription status (active/inactive) and general payment history (dates and amounts) for customer service purposes.

Contact form messages: Retained indefinitely for customer support reference unless you ask us to delete them.

8. Your Rights

You have the right to:

• Access: See what data we have about you. Email us and we will provide it in a reasonable timeframe.
• Export: Export your learning data from the app at any time.
• Delete: Request deletion of your account and all associated data.
• Correct: Update your email address or other account information at any time.
• Object: If you have concerns about how your data is being used, email us and we will address it.

To exercise any of these rights, email hello@aeluapp.com.

9. Children's Privacy

Aelu is not designed for children under 13 and we do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete the account and associated data promptly.

10. International Users

Aelu is operated from the United States. If you are using the service from outside the US, your data may be stored on servers in the United States. By using the service, you consent to the transfer of data to the United States.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with a new effective date. Continued use of Aelu after changes constitutes acceptance.

12. Contact

For privacy-related questions, concerns, or requests, email hello@aeluapp.com. You may request access to or deletion of your personal data by contacting us. We will process requests in a reasonable timeframe.