Privacy Policy

AILE is operated by AILE LLC, located at 9251 West 22nd Street, Minneapolis, MN 55426. For any privacy question or request, email us at learnailesupport@gmail.com. AILE is the data controller for the personal information described here.

AILE is a learning app for iPhone. You can use most of it without an account, in guest mode, and then everything below that is marked as syncing simply stays on your device.

• Account and authentication data: your email address and, if you set one, a display name. If you create a password we store it securely hashed, never in readable form. If you use Sign in with Apple or Google, we receive the email address that provider gives us (Apple may give us a private relay address) and never see your password. Session tokens are stored encrypted on your device in the iOS Keychain. If you subscribe or start a free trial without signing up, we create an account for you with no email, name, or password, so your purchase is saved to it and what the app saves to an account, such as your onboarding answers, goes to it too. You can add an email to it, or delete it, in the app under You.
• Learning progress and assessment data: XP, streaks, gems, lessons and modules completed, quiz and lesson scores, badges, and daily goals and quests. This is what lets your progress survive a reinstall and follow you across devices.
• Answer history and skill rating: which practice questions you answered, when, how quickly, whether you got them right, and, when a question asks, how sure you were. From those answers we compute a single skill rating, one number, that decides which question or lesson to show you next and when to bring something back for review. Your skill rating is never used to decide what you pay or to grade a credential.
• Onboarding answers: how you describe yourself, your main goal, how comfortable you feel about AI, the paths that interest you, what holds you back, the result you want in your first week, when and how long you want to learn, and your age range, from the welcome questions. We also keep what we work out from your answers (the kind of work you do, how often you use AI, a fluency score from your answers and any ask you typed, and your first-week target date), that you committed to your daily time, that you signed that commitment, and which version of the welcome questions you saw. Your signature is drawn on your device and is never stored or sent: we keep only the fact that you signed. Once you have an account, including the one we create when you subscribe, these sync to our database to personalize your learning; without one they stay on your device. While usage analytics is on, the options you pick for these questions (never anything you type) are also sent to PostHog as part of usage analytics.
• Ask Spark messages: what you type to our AI tutor, and its replies. These are held on our server for up to 24 hours and then deleted. Section 4 explains exactly how, including the messages we never store or send anywhere at all.
• AI usage records: for each AI request we keep a count, token totals, and an estimated cost on your account, so we can apply fair rate limits and control cost. These records never contain your words.
• The onboarding try-it: if you type your own ask during onboarding instead of tapping an example, it is sent to our AI provider to be graded and improved, and it is not stored. To limit abuse we keep a count of these requests under a salted hash of your network address, for two days. Tapping an example sends nothing.
• Try it feedback (AILE Pro): some lessons ask you to try a prompt in an AI assistant you already use and then paste the reply it gave you back into AILE. When you ask for feedback, we send the reply you pasted, together with that lesson's prompt and the points it checks, to our AI provider so it can return a few short lines on what the reply did well, what it missed, and one follow up to try. This is feedback, not a grade: it does not change your progress or scores. We do not store the reply you paste. It is not written to our database, not kept in our logs, and not sent to our analytics provider. Because what you paste is whatever your own assistant wrote, please do not paste anything you would not want an AI provider to read, such as passwords, financial details, health information, or other people's private information. To keep the feature fair and safe, each request counts against a usage limit for your account and for a one way, salted hash of your network address (never the address itself). If anything you paste or send suggests you may be in crisis, we show crisis support resources instead of feedback and record only that a crisis resource was shown, never the text.
• Credential assessment submissions: when you submit a build for a credential, we store what you submitted with your account and send it to our AI provider to grade against the published rubric. A person reviews borderline results before a credential is granted or refused. Submissions and grades are kept with your account and deleted with it.
• Work briefs and plans (AILE Pro, only if you use Bring Your Own Work): the kind of task, how often you do it, how long it takes, the tools you use, and your own description of the task, up to 1,200 characters. We store this with your account and send it to our AI provider to build your Work Plan, and we store the plan. When you try a step in your plan, the prompt you wrote is sent to our AI provider to be graded, and that prompt is not stored; to limit abuse we keep a count of your grading requests, under a salted hash of your account id, for two days. Please leave out names, client details, and anything confidential. Your brief is never used for analytics, can be read only by you and our servers, and is deleted with your account.
• Help and feedback notes: if you write to us from Help and feedback in the app, we store your message, the subject you chose, your app version and platform, and your account id, so a person can answer you. We keep it until your request is resolved and for one year after that.
• Reports and safety records: what you send us when you report an answer, and short labels describing safety events. Section 5 covers both.
• Subscription and purchase data: whether you have an active AILE Pro subscription, which plan, and the related purchase events. Section 6 covers this.
• Usage analytics (only while you leave it on): which screens you visit and which learning events happen, for example a lesson started or finished, sent to PostHog and tied to your account id so we can see how the app is used and where it fails. Unlike the analytics on this website, these events are not anonymous. They include the options you pick in onboarding (never anything you type). Your messages to Spark and the text of your answers are never included. You can turn them off at any time in the app under You, then Privacy & data, with the "Share usage analytics" switch, and they are off for anyone under 13.
• Crash reports: if the app crashes or hits an unexpected error, a report goes to Sentry with the device model, iOS version, app version, and a technical trace of what the code was doing. Crash reports carry no name, no email address, and nothing you typed.
• Technical and log data: standard server logs (such as request times and error information) used to operate and secure the service.

We do not collect precise location, your contacts, photos, biometrics, health data, or advertising identifiers. The app contains no advertising SDK and does not track you across other companies' apps or websites; the analytics and crash-reporting tools it uses work for us alone (section 9). Reminders are off by default. If you turn them on, your device schedules up to eight local notifications over the 28 days after you stop practicing, then goes quiet. No push token or device identifier is sent to us.

• Waitlist details: your email address or US mobile phone number (whichever you choose), the page or source you signed up from, and a timestamp. We also store a one-way hashed version of your IP address to prevent spam and abuse (we do not keep your raw IP for the waitlist), and a record of the exact consent language you saw when you joined.
• Technical and log data: standard server logs used to operate and secure the site.

We do not knowingly collect special-category data and we ask you not to send us sensitive information through the waitlist.

When you ask Spark a question, or request a hint, your message is sent to our AI provider, Anthropic, which processes it to generate a reply. Per Anthropic's commercial terms, it does not use API data to train its models. Our AI keys live on our server and are never shipped inside the app. Text you type also reaches our AI provider in four other places, each described in section 2: the onboarding try-it, Try it feedback, credential assessments and Work Plans.

So a conversation holds together from one turn to the next, our server keeps both sides of an Ask Spark chat, your messages and Spark's replies, for up to 24 hours from the start of that conversation. After that they are deleted automatically. The 24-hour limit is enforced rather than merely promised: expired messages are filtered out on every read, purged on your next request, and swept globally by an hourly job. Nobody else's account can read your transcript, and deleting your account deletes it immediately.

Crisis messages are the exception. If what you write reads as a crisis disclosure, AILE answers you itself with support resources we wrote in advance. That message is never sent to our AI provider and is never stored: it stops before the transcript is written and before any model is called. Nothing about it is attached to your account. We count only the number of times crisis resources were shown, as a daily total with no identifier and no text (see section 5).

You can turn AI answers off. In the app, under You, the "AI answers" switch turns them off. With it off, Spark's chat, generated hints, generated explanations, Work Plan generation, Work Plan prompt grading, and Try it feedback all stop, so nothing you type or paste in those places is sent to our AI provider. Lessons, quizzes, and the hints we wrote ourselves keep working, because none of those involve AI. Two things sit outside this switch: credential grading, which only runs when you choose to submit a build, and the onboarding try-it, which runs before you can reach the switch (tap an example there and nothing is sent).

AI output can be wrong or incomplete. Spark is for learning only and is not professional, legal, medical, or financial advice. Always verify anything important with a trusted source.

Reports. If you report an answer in the app, we store Spark's reply so a person can review it, the reason you picked, and anything you type in the report. Your own question is included only while the "include the question I asked" option stays ticked. A report is linked to your account so we can follow up on a pattern. If a report reads as a crisis disclosure, we drop your words and keep only the reply being reported. We keep reports until a person has reviewed them and for one year after that, then delete them automatically.

Safety telemetry. When a safety filter declines a request or blocks a reply, we record what kind of event it was as short labels on your account. We never store the text of the message, only the labels. This is how we tell a filter that is working from one that has started misfiring.

Crisis referrals. Moments where we show crisis support resources are counted only as a daily total. There is no user identifier, no message text, and nothing to join a count back to a person. We keep that aggregate so we can report the number where law requires it.

AILE Pro is an auto-renewable subscription, offered weekly, monthly, and yearly, and sold through the App Store. Apple processes the payment and the billing. We never see or receive your card details.

We use RevenueCat to manage subscription status and validate purchase receipts, so your Pro access follows you across your devices. RevenueCat and Apple tell us the state of your subscription (whether it is active, which plan, and the purchase, renewal, or cancellation events behind it). We store an entitlement record on your account and a log of those purchase events.

You manage or cancel a subscription in your App Store account settings, not here. If you delete your AILE account, the entitlement record goes with it; the purchase event log is kept as a financial record with your account identifier unlinked, so it can no longer be traced to you.

Email from AILE is off until you turn it on, either on the screen where you create your account or later in the You tab. When it is on, we may send you short notes about learning with AILE, some of them tied to what you have been doing, such as a lesson you started, a plan you set, or a purchase you started or made. How often depends on where you are: there are more in your first week, including a short welcome series, a few if you start a purchase and do not finish it or after you buy, and fewer after that. Our server is built to wait at least 20 hours between these notes.

To decide whether a note is due and what it says, we use your account's email address, the answers you gave when you started (such as your goal), your recent activity in AILE, and whether you have AILE Pro. Most of these notes are timed by our analytics provider, PostHog, from the usage analytics it already receives, as described above. A few are timed by our own server instead, such as a note when an AILE Pro plan ended about 30 or 90 days ago; those can still arrive if you have turned usage analytics off. We never send PostHog your email address. Each time we decide whether a note should go out, our server looks up your email address and checks a one way, hashed form of it against our unsubscribe list. Your address leaves our systems only when we send, or try to send, a note, and then it goes only to our email provider, Resend, which delivers the message for us.

If you are 18 or older, a note may include an offer or a price. We decide whether you are 18 or older from the age range you chose when you started, never your exact age. If we do not know your age range, we treat you as under 18, and you will not receive offers.

We keep a short record of each email decision: which email it was, when, what happened to it (sent, skipped, a test run, or failed) and why, and the message ID our email provider gives a sent email. That record never contains your email address, the subject, or the message, and it is deleted with your account. We use it to make sure we never send you more than we say here, and to trace a bounce or complaint back to the email it came from.

We never sell your email address, and we never share it with anyone for their own marketing. You can turn these notes off at any time in the You tab or with the unsubscribe link in every email; an unsubscribe takes effect right away and stops every marketing note. Every marketing email names us and gives our postal address.

Emails about your account, such as sign in codes, password resets, billing problems, and confirmations of changes you make, are sent whether or not this switch is on.

AILE is not currently offered on the App Store in the European Union. Where the GDPR or UK GDPR applies, for example to visitors to this website, we rely on the following legal bases:

• Consent: to send you waitlist and launch emails, or, if you join by phone, a single launch text message. You can withdraw consent at any time by unsubscribing (email) or replying STOP (text). Message and data rates may apply to texts. We record the time of your consent, a hashed IP, and the version of the consent language you saw; we will not send recurring marketing texts, and we send nothing at all until launch. Practice reminders in the app are also consent based, off until you turn them on. We also rely on consent to send you Email from AILE notes, which you can withdraw at any time in the You tab or with the unsubscribe link.
• Contract: to give you an account, run the app, save and sync your progress, answer your questions with the AI tutor, and provide the subscription you bought.
• Legitimate interests: to keep the service secure, prevent abuse, apply fair rate limits and control cost, review the reports you send us, and understand and improve how the product works, including through the app's usage analytics (which you can switch off) and crash reports, balanced against your rights. It is also our legitimate interest to check, before any note, whether you have turned Email from AILE on or unsubscribed, and to keep a short record of each email decision, so we send no more than we promise and keep email working.
• Legal obligation: to comply with applicable law, including keeping financial records and reporting aggregate safety statistics where required.

The public website sets no advertising or analytics cookies and stores nothing persistent on your device. We use two privacy-respecting, cookieless analytics tools: Vercel Analytics (aggregate page statistics, no cookies or device identifiers) and PostHog in memory-only mode (no cookies, no local storage, a fresh anonymous identifier on every page load). Analytics events describe interactions, for example "waitlist form submitted", and never contain your email address or phone number. We use no advertising trackers and no cross-context behavioral advertising.

On-device storage is limited to session-only flags (whether the intro animation has played, and which feedback posts you have upvoted) plus strictly necessary login cookies in the signed-in admin area. Because nothing non-essential is stored on your device, we do not show a cookie consent banner. Because we do not sell or share personal information, a Global Privacy Control signal has nothing to switch off; we treat it as an opt-out request should that ever change. If we ever add advertising or tracking that stores data on your device, we will update this policy and present a consent choice first.

The AILE iOS app is different, and we want to be plain about it. The app sends usage events to PostHog tied to your account id, so we can follow how the product is used over time rather than page by page. These events describe interactions, such as a lesson finished or a screen opened, plus the options you pick in onboarding (never anything you type), and they are never used for advertising. You can turn app analytics off at any time under You, then Privacy & data. Crash reports go to Sentry with device and app version details and a technical trace, and carry no name, email address, or typed text.

The app carries no advertising SDK. Its analytics and crash-reporting tools work for us alone: the app does not read the advertising identifier and does not track you across other companies' apps or websites.

We do not sell or share your personal information, and we do not use it for cross-context behavioral advertising (as those terms are defined under the CCPA/CPRA). We share data only with the service providers (subprocessors) that help us run AILE:

• Supabase: Database, authentication, and hosting of application data (United States). Data terms.
• Vercel: Website hosting, content delivery, and cookieless aggregate site analytics (United States). Data terms.
• PostHog: Product analytics: cookieless and anonymous on this website (nothing stored on your device); in the iOS app, usage events and the options you pick in onboarding (never anything you type), tied to your account id, with an in-app opt-out under You, then Privacy & data (United States). Data terms.
• Sentry: Crash reporting for the iOS app (device model, iOS and app version, and a technical trace; no name, email address, or typed text) (United States). Data terms.
• Anthropic: AI model processing for learning features: AI tutor messages, onboarding try-it asks, credential submissions, work briefs, Work Plan prompts, and the reply you paste into a Try it step when you ask for feedback (does not train on API data) (United States). Data terms.
• RevenueCat: Subscription management and App Store purchase receipt validation for AILE Pro (United States). Data terms.
• Resend: Delivers the emails we send you. It receives your email address and the message we send, only at the moment we send it (United States). Data terms.
• Cloudflare: Turnstile bot protection on the waitlist and feedback forms (United States). Data terms.
• Formspree: Form delivery fallback for waitlist and feedback (when enabled) (United States). Data terms.

Apple also processes App Store payments and billing for AILE Pro as an independent party under its own privacy policy. We receive the resulting subscription status, never your payment details.

The current list is also on our subprocessors page. We may also disclose information if required by law or to protect rights, safety, and the integrity of the service.

We are based in the United States and our providers process data in the United States. If you are in the EEA, the UK, or Switzerland, your data is transferred to the US under appropriate safeguards, including the European Commission's Standard Contractual Clauses with our subprocessors.

• Account, progress, answer history, skill rating, and onboarding answers: for as long as your account exists. Deleted when you delete your account.
• Ask Spark chat: up to 24 hours from the start of the conversation, then deleted automatically.
• Crisis messages: never stored at all, so there is no retention period.
• Try it replies: a reply you paste is never stored.
• AI usage records (counts, tokens, cost): kept with your account for rate limits and cost control, and deleted with it.
• Email decision records: while your account exists, deleted with it.
• Unsubscribe records: if you unsubscribe, we keep a one way hashed form of that address, with the channel, how you unsubscribed (the link or one click), and the time, not linked to your account and with no time limit, so the unsubscribe keeps working even after you delete your account.
• Credential assessment submissions and grades: with your account, deleted with it.
• Work briefs and plans: with your account, deleted with it. The prompt you grade inside a plan is not stored; the hashed count of grading requests is deleted after two days.
• Help and feedback notes: until your request is resolved and for one year after that.
• Reports: until a person has reviewed them and for one year after that, then deleted automatically.
• Safety telemetry: label-only records, kept while we need them to monitor the safety filters. When you delete your account, the user identifier is removed and only the unlinked labels remain.
• Crisis referral counts: kept as daily totals. They carry no identifier and never did.
• Usage analytics and crash reports: held by PostHog and Sentry under their retention settings. Email us to have the analytics tied to your account id removed sooner.
• Purchase records: your entitlement is deleted with your account. The purchase event log is retained as a financial record, with your account identifier unlinked.
• Waitlist information: until the product launches plus a reasonable window, then deleted if you have not become a user.
• Server logs: kept only as long as needed to operate and secure the service.

We delete or anonymize personal data when it is no longer needed, and sooner on a valid deletion request, unless we must retain it to meet a legal obligation.

If you are in the EEA, the UK, or Switzerland, you may have the right to access, correct, delete, restrict, or object to our use of your data, to data portability, and to withdraw consent (GDPR/UK GDPR). Section 14 sets out the rights of United States residents state by state, and we honor those rights for everyone, wherever you live.

• Export: in the app, You then "Export my data" gives you the data held on your device (progress and onboarding answers) as a file. For a copy of what we hold on our servers, email us and we will send it.
• Delete your account: in the app, You then "Delete account". It is immediate and irreversible. It hard-deletes your account and everything that hangs off it: progress and scores, your answer history and skill rating, synced onboarding answers, your work briefs and plans, your credential submissions and grades, any Ask Spark transcript still inside its 24-hour window, your reports, your AI usage records, and your entitlement. The only things that survive are records stripped of any link to you: safety labels with the user identifier removed, aggregate crisis counts that never had one, and the purchase event log kept as an unlinked financial record, and, if you unsubscribed from our email, the one way hashed form of that address kept so the unsubscribe keeps working.
• Use it without an account: guest mode keeps your progress on your device.
• Turn AI off: the "AI answers" switch stops Spark, generated hints and explanations, Work Plans, and Try it feedback (section 4).
• App analytics: the "Share usage analytics" switch under You, then Privacy & data, stops analytics events (section 9).
• Reminders: off by default, and you can turn them off again at any time in the app or in iOS Settings.

To exercise any right, email learnailesupport@gmail.com. Section 14 explains how we verify requests and the timelines we hold ourselves to. You may also unsubscribe from any marketing email using the link in its footer. EEA/UK users may lodge a complaint with their local data protection authority.

Depending on where you live, you may have the right to know what personal information we hold about you and receive a copy, to correct it, to delete it, to obtain it in a portable format, to opt out of targeted advertising, sale, sharing, and profiling that produces legal or similarly significant effects (we do none of these), and to not be discriminated against for exercising these rights. Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island have some or all of these rights under their state laws, and Minnesota residents also have the right to question the result of any profiling and to obtain a list of the specific third parties we have shared their data with. We honor these rights for everyone, regardless of where you live.

To exercise a right, use the controls in the app (You, then Export my data or Delete account) or email learnailesupport@gmail.com. We will confirm receipt within 10 days, verify that you are the account holder by sending a confirmation to the email on your account, and respond within 45 days, extendable once by 45 days where the law allows if we tell you why. An authorized agent may act for you with your written permission. If we decline a request, you may appeal by replying to our decision; we will answer the appeal within 45 days and tell you how to contact your state Attorney General if you disagree.

AILE is intended for people aged 13 and older. The first time you open the app we ask your age. If the answer is under 13, the app does not open and no account is created. We keep only a broad age range, never the age you typed. We do not knowingly collect personal information from children under 13. If we learn that a user is under 13, we delete the account and its data promptly and confirm the deletion to a parent who contacted us. If you believe a child has provided us data, contact us at learnailesupport@gmail.com and we will delete it.

We use industry-standard safeguards including encryption in transit (HTTPS/TLS), database row-level security so an account can only ever read its own rows, session tokens stored encrypted on your device in the iOS Keychain, AI keys held server-side and never shipped in the app, least-privilege access, multi-factor authentication on administrative accounts, and regular security review. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant authorities as required by law.

We may update this policy as AILE evolves; we will revise the “Last updated” date and, for material changes, give prominent notice; in the app, a material change asks you to accept the new version before you continue, as the Terms describe. Questions or requests: learnailesupport@gmail.com or AILE, 9251 West 22nd Street, Minneapolis, MN 55426.

Effective date: October 26, 2026.