1. Introduction
This policy describes how Theory of Pi collects, uses and protects information. Contact [email protected].
2. Information We Collect
We collect account and communication information you provide, a parent or legal guardian’s name and consent declaration when purchasing for a student under 18, learning and technical usage data, and account or subscription status from service providers. Stripe handles card details.
Signing in with Google
If you choose Google sign-in, Google provides our authentication provider, Clerk, with your Google account identifier, email address and verification status, and basic profile information such as your name and profile picture, where supplied. Google handles your Google password; we do not receive it.
We use this information to create or connect your Theory of Pi account, sign you in, secure your account and check email verification for trial and reward eligibility. Clerk stores your authentication profile and session information. Our application, hosted on Railway, stores your Clerk account identifier and associated profile, learning and access records. For rewards, we also store a protected fingerprint derived from your email to prevent duplicate claims.
Clerk and our hosting providers process this information to operate and protect your account. We do not sell Google account data or use it for advertising. Google sign-in is separate from our internal, aggregate visitor counts; it does not enable Google Analytics.
Google-linked account information is subject to the account retention and deletion rules below. You can request access, correction or deletion at [email protected]. You can also revoke the connection in your Google Account. Revoking Google access does not by itself delete your Theory of Pi account or learning records. Manage your Google connections.
3. How We Use Information
We use information to provide, secure and improve the Service, process payments, personalize learning, answer tutor requests and meet legal obligations.
4. Third-Party Service Providers
Clerk, Stripe, OpenAI, Railway and Cloudflare process only the information needed for authentication, payment, AI responses, hosting and security. Data may be processed in the United States.
5. Data Retention
Account data is kept while active and normally deleted within 30 days of closure. Payment records may be kept seven years; conversations and server logs up to 90 days.
6. Your Rights
You may request access, correction, deletion or portability, and withdraw applicable consent. Email [email protected]; we aim to respond within 30 days.
7. Quebec Residents (Law 25)
Quebec residents have rights under the Act respecting the protection of personal information in the private sector, including information about automated decisions and data portability where applicable.
8. European Residents (GDPR)
EEA, UK and Swiss residents may have GDPR rights and may complain to their data protection authority.
9. California Residents (CCPA)
California residents may have CCPA rights. We do not sell personal information.
10. Children’s Privacy
The Service is for people aged 13 and older. Contact us if a child under 13 provided information.
11. International Transfers
Information may be stored outside your country, including in the United States, using appropriate protection mechanisms.
12. Security
We use encryption, access controls and provider reviews, but no system is completely secure.
13. Cookies
We use cookies for authentication and preferences. Disabling them may prevent the Service from working.
14. Changes to This Policy
Material changes will be announced at least 30 days before taking effect.
15. Contact
Theory of Pi · [email protected] · Mailing address provided upon request.