Privacy Policy

1. What this covers

This Privacy Policy explains what chud collects, why, how long we keep it, who we share it with, and what you can do about it. It applies to the chud app and website, operated by sparkk.

It doesn't cover other companies' sites or services you reach from chud — for example, a page you open from a web-search result. Their policies govern there.

2. What we collect

We collect three kinds of information:

• Information you give us — your name, email, and the study details you enter (classes, grades, goals), plus everything you send chud: messages, files, and photos of problems.
• Information created by using chud — your conversations and their responses, quiz and flashcard results, streaks, and which features you use.
• Technical information — device and browser type, approximate region derived from your IP address, and error and performance logs. We use this to keep the Service working and secure.

We do not collect precise location, we do not read your contacts, and we do not use third-party advertising trackers.

3. Exactly what we store, and for how long

This is the full inventory. Every category is listed with the reason we keep it, how long we keep it, and how you remove it.

• Account — Your name, email, and plan. Why: To sign you in, save your work to your account, and manage your subscription. Retention: Kept while your account is active. Delete: Delete your account in Settings. It erases your account and the records attached to it. Files you uploaded are removed by hand: email privacy@gosparkk.org.
• Study progress — Classes, courses, quizzes, flashcards, streaks, and grades you enter. Why: To track what you've learned, schedule reviews, and personalize study help. Retention: Kept while your account is active. Delete: Delete individual items in the app, or delete your account to remove all of it.
• Conversations — Your chats with chud, including files you attach. Why: To answer follow-ups with context and let you return to past conversations. Retention: Deleted automatically after 30 days without activity, unless you pin or archive the chat. Delete any chat sooner from its menu. Delete: Delete any chat from its menu, or delete your account to remove all chats. Files you attached are removed by hand when you email us.

4. How we use it

We use your information to run chud and to make it work better for you:

• To answer you — sending your message and relevant context to the AI model that generates the response.
• To personalize — using your classes, goals, and self-identified struggles so answers fit your actual situation instead of being generic.
• To track progress — scheduling reviews, maintaining streaks, and showing what you've learned.
• To operate the business — processing payments, enforcing plan limits, and preventing abuse.
• To keep everyone safe — detecting misuse and responding to safety risks, including crisis situations.
• To improve the product — using aggregated, de-identified usage patterns to see what's working. This never includes reading your conversations to train a model.

5. Legal bases (for users in the EEA and UK)

Where the GDPR applies, we rely on: performance of a contract (to provide the Service you signed up for); legitimate interests (to keep the Service secure, prevent abuse, and improve it, balanced against your rights); consent (for anything optional, such as marketing email — withdrawable at any time); and legal obligation (where the law requires us to keep or produce records).

6. Who we share it with

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share only with service providers who help us run chud, each bound by contract to protect it and use it only for us:

• AI model providers (OpenAI, Anthropic and xAI), to generate responses to your messages. Each message goes to the company that runs the model you're using.
• OpenAI, which also stores the files you add to a project or index for search, so chud can search inside them.
• Voyage AI, which turns text into search embeddings when chud's semantic search is switched on.
• Our hosting and database provider, to store your account and your work.
• Our payment processor, to take payments. They handle card details directly; we never receive your full card number.
• Email and error-monitoring providers, to send account email and to diagnose crashes.

We may also disclose information if legally required, to enforce our Terms, or to protect someone's safety. If we're ever part of a merger or acquisition, we'll give notice before your information becomes subject to a different policy.

7. AI training

We do not use your conversations, files, or schoolwork to train AI models. This is the default and it requires no action from you.

If we ever introduce a program to contribute data for model improvement, it will be strictly opt-in, explained in plain language before you choose, and revocable at any time. Accounts belonging to minors will be excluded from any such program regardless of consent.

8. Children and teens

chud is not for children under 13, and we don't knowingly collect their information. If we learn we have, we delete the account and its data.

Because chud is built for students, accounts we identify as belonging to minors get the strictest treatment automatically: conservative content defaults, exclusion from any data sharing, and exclusion from any future model-training program. Until we collect a birthday, the 18-or-older confirmation is taken on the account holder's word.

If you're a parent or guardian and want to review or delete your child's information, email us at the address below and we'll verify and act on it.

9. Your rights and choices

Wherever you live, you can do all of this from Settings or by emailing us:

• Access and export — download a copy of your data.
• Correct — fix anything inaccurate in your profile.
• Delete — remove individual conversations, or delete your account and everything tied to it.
• Object or restrict — ask us to stop a particular processing activity.
• Withdraw consent — for anything you opted into, at any time.

Depending on where you live you may have additional rights under the GDPR, the UK GDPR, or US state privacy laws including the CCPA/CPRA. We honor these requests for everyone, not only where the law compels it, and we won't discriminate against you for making one. We aim to respond within 30 days.

If you're in the EEA or UK and think we've mishandled your data, you can complain to your local supervisory authority — though we'd appreciate the chance to fix it first.

10. How we protect it

Data is encrypted in transit and at rest. Access to production data is limited to the people who need it to operate the Service, and access is logged. Payment details never touch our servers.

No system is perfectly secure, and we won't claim otherwise. If a breach affects your personal information, we'll notify you and the relevant authorities as required by law.

11. Where your data lives

chud is operated from the United States and your information is processed there. If you use chud from outside the US, you're sending your information to the US, where privacy law differs from your own.

For transfers out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses and the UK Addendum with our providers.

12. How long we keep it

We keep your account data while your account is active. Chats are deleted automatically after 30 days without activity, unless you pin or archive the chat; you can delete any chat sooner from its menu.

When you delete your account we remove your personal data from our production systems, and it ages out of encrypted backups on the ordinary backup cycle. Files you uploaded aren't removed automatically yet; email us and we remove them by hand.

We may keep a limited record longer where the law requires it — for example, transaction records for tax purposes — or where we need it to resolve a dispute or enforce our Terms.

13. Changes to this policy

If we change this policy in a way that materially affects your rights, we'll tell you in the app or by email before it takes effect, and we'll update the version and effective date below. We won't retroactively reduce your rights over data we already collected without your consent.

14. Contact

Email privacy@gosparkk.org for anything about your data — a question, an access or deletion request, or a concern. A person reads that inbox and will answer.