Pilot privacy notice · Updated 30 September 2026

Your practice, your control.

This notice describes the current ExplainSchool pilot for adult learners and tutors. The operator must complete institutional agreements and publish its legal identity and privacy contact before an institutional rollout.

What the platform stores

We store explanations, transcripts, uploaded source material, feedback, saved drafts, review schedules, class memberships, assignments, tutor reviews and support requests. Sign-in is handled by Clerk. We do not keep raw audio recordings in our application storage; audio is sent for transcription when you choose that feature.

Where your work goes

Cloudflare hosts the application and uploaded files; Convex stores practice records and runs background jobs; Clerk handles authentication. Google Gemini receives the reference text and your explanation when AI assessment is enabled. OpenAI receives audio when transcription is used. Free-practice report emails use Resend when configured. These providers have their own processing and retention terms. Do not upload confidential or institution-restricted material during the pilot.

Sharing with a tutor

Joining a class shares your display name and membership. Submitting an assignment shares that explanation, its feedback and follow-up answer with the class owner. Your other work stays private. You can withdraw an individual submission or leave a class to remove that tutor's access in the app. Previously downloaded copies cannot be recalled.

Retention, export and deletion

Practice data stays in your account until you delete it. Data & support provides a JSON export and a permanent deletion action covering practice records, drafts, reviews, memberships, your classes and support requests. Uploaded file deletion retries every five minutes if storage is temporarily unavailable. Provider logs and backups may have separate retention periods; deletion from active application storage does not certify removal from those systems.

Your Clerk sign-in account is separate: delete practice data first, then manage or delete the sign-in account from the account menu. Daily quota counters expire seven days after their quota window closes. A minimal account security marker prevents stale saves from restoring deleted work while your sign-in account remains active. Account-deletion webhook automation and verified backup retention are launch requirements.

Feedback and recordings

AI feedback can be wrong. Course feedback checks that quoted evidence occurs in the explanation; that does not prove the model's judgement is correct. Provisional pattern feedback does not certify understanding. Audio feedback in free practice analyses the transcript, not pitch, prosody or actual listener comprehension.

Questions and corrections

Use the signed-in support form to report a data concern or challenge feedback. Support requests are stored for the pilot operator. A published privacy contact and support response policy are required before general launch.