Privacy Policy

Last updated: September 2026

Orimentis is a free AI tutoring tool for students. We collect as little data as possible and are transparent about what we do collect.

This policy explains what data we collect, why, how we use it, and your rights.

What we collect

Anonymous users (no account)

• A session token (stored in a cookie) to keep your conversation working across page refreshes
• Your conversation messages (stored on our servers)
• Your language preference
• Basic usage data: which mode you chose (exam prep or curious), which board/subject (if exam prep)
• Per-message reactions (thumbs up/down) and end-of-conversation feedback, if you provide them
• Problem reports, if you submit them

We do not collect your name, email, location, or any personally identifiable information from anonymous users.

Authenticated users (with an account)

• Everything listed above for anonymous users
• Your email address (used for login, account management, and optional communications you consent to)
• Your learning progress: mastery state per spec point, phase history, confidence scores, and spaced review schedule
• Your consent preferences (product updates, marketing offers, AI improvement opt-in, set by you, each change stored with a timestamp)
• Your answer to "How did you hear about us?", if you give one at onboarding — it is optional, you can skip it, and we keep it for a limited time (see How long we keep it)
• Photos you take or upload of your schoolwork, if you use the camera in the message box. A photo can show more than the question: your handwriting, a name on a worksheet, or part of your room or someone in it. We keep them for a short time and then delete them — seePhotos of your schoolwork

Why we collect it

How we use it

• To provide the tutoring service
• To improve the tutor's quality (we review conversations and feedback to find patterns)
• To study how the tutor teaches, only if you have opted in to AI improvement: records of what you answered right and wrong — never the words of your conversations — may be pooled with other learners' in pseudonymised research datasets. Opting out excludes you from the next dataset; it does not recall one already produced
• If a message looks like you might be about to hurt yourself, it is flagged and one of our most senior admins may read that message — seeSafety review below
• We do not sell your data to anyone
• We do not use your data for advertising
• Your conversation messages are sent to Anthropic, the AI provider whose models generate the tutor's replies, on every message you send — this is how the tutor works, whether or not you have an account
• If you send a photo, the photo itself is sent to Anthropicso its model can write out the schoolwork in it as text. We ask the model to leave out faces, names and anything that isn't the schoolwork. But the photo it receives still contains whatever was in the picture, so crop or cover anything you don't want to send
• Some of your data also goes to a small number of other companies that help run Orimentis. Each one gets only what it needs for its job:
  • Resend sends our emails, like your sign-in code. It gets your email address and the email we are sending you. If a parent or guardian is linked to your account, the progress summary we email them goes through Resend too, so it gets their email address and that summary
  • Stripe handles payments if you buy a membership. It gets your email address, an ID number for your account, and the payment details you type in
  • PostHog measures how people use the site, but only if you accept analytics in the cookie banner. It gets an ID number for your account (or a random one if you are not signed in), your country and language, which pages you visit, what kind of device and browser you use, and what you click on
  • Sentry collects error reports so we can fix bugs. We do not send it your name or email, but an error report can sometimes include something you were typing when the error happened
  • If you use the dictation button (the microphone in the message box) to speak instead of typing, your web browser sends your voice to its own speech service to turn it into words: Google if you use Chrome or Edge, and possibly Apple if you use Safari. Your browser chooses that company, not us, and we have no contract with it. If you would rather it did not hear you, type instead
  • ElevenLabs is the speech service for voice mode, and only if you use voice mode. It gets your recording so it can write down what you said, and the tutor's reply so it can read it aloud to you
  • Two hosting companies run the computers Orimentis works on.Railway runs our servers and the database where your account and conversations are stored. Cloudflaredelivers our websites to your device, so it sees your IP address (your device's address on the internet), and it stores the file we make when a copy of your data is prepared for you. It also stores the photos you send, in storage we keep separate from everything else, with its own keys. We set that storage up to be held in the EU
• We do not share your data with anyone else

Safety review

The quality review in the list above is not only counting patterns: checking that the tutor behaves properly sometimes means one of our most senior admins opening a conversation and reading it. And there is one thing that deliberately puts a single message you sent in front of a person. We would rather tell you about both than leave you to guess.

Every message is checked automatically for signs that whoever wrote it might be about to hurt themselves. When a message matches that check, two things happen: you are shown a screen with helplines on it, and that message goes into a queue for a safety review. What that check decides is which message is put in the queue — it is not what decides whether anyone can read your conversation. Only our most senior admins are able to open a conversation and read all of it, with the email address on the account beside it, whether or not anything was ever flagged. Other people who work on Orimentis and can sign in to our internal tools cannot open one at all.

The same queue also holds messages flagged for reasons that have nothing to do with how you are feeling — for example when the automatic check could not run, or when a message looked like an attempt to make the tutor break its own rules. So a message of yours can be read this way without you ever seeing a helpline screen, and not seeing that screen does not mean nobody read it.

When someone opens a flagged message, they see the message, the two messages either side of it so it makes sense in context, and the email address on your account if you have one. They record whether the flag was right, and they can write a short note about it for the team — you will not see that note if you download your data. Only our most senior admins can record that decision. Reading the message, recording that decision and writing that note is all they are allowed to do with a flag.

Opening it is itself recorded. We keep an internal record of which staff account opened a flagged message, a conversation, or what our system has worked out about you — and when. It holds the account and the time, never the message and never what was worked out, and it is there so that we can tell afterwards who read what.

This review is internal. A flagged message is not sent to a parent, a guardian, a school, or anyone outside Orimentis.

It is also not a way of getting help, and you are better off knowing that than assuming otherwise. We do not promise that anyone will read a flagged message within any particular time, there is nobody on duty overnight or at weekends, and nobody on our team will contact you, your family, your school or emergency services about it. If you need to talk to someone now, use the helplines we show you in the app — that is exactly what they are for.

Error logging

We use Sentry for error logging to help us fix bugs and improve reliability. We do not send your name, email or account ID to Sentry, but an error report can sometimes include something you were typing when the error happened.

Data storage and security

• Conversations are stored in a database, not in plain text files
• We use HTTPS for all connections
• Session tokens and magic links are generated using cryptographically secure methods

How long we keep it

If you answered "How did you hear about us?" at onboarding, we keep that answer for 13 months — 400 days from the day you created your account — and then erase it from your account. It happens on its own: you do not have to ask, nothing else about your account changes, and we will not put the question to you again. If you skipped the question, there is nothing to erase.

We set that limit because the answer tells us which ways of reaching students actually work, and that is not something we need for as long as we need what you are learning. The tutor never uses it.

Photos of your schoolwork

A photo you send is kept for 30 days and then deleted automatically. You do not have to ask. If you delete your account it goes sooner than 30 days. We keep it that long so that if you tell us the tutor read your question wrong, we can look at the photo and see what it actually read.

Our record of what we read from the photo is blanked after the same 30 days. The safety check on those words keeps a note of its decision, not the words themselves.

The words we read out of the photo are only a suggestion until you send them. Once you send them they are a message like any other, and they are kept as long as your other messages. A photo that could not be used — one the tutor turned down because it was not schoolwork, or one where reading it did not work — is not kept at all.

A parent or guardian linked to your account never sees your photos, just as they never see your messages.

Deleting your account removes your data on a separate timetable — seeYour rights below.

Your rights (GDPR)

You have the right to:

• Access your data: contact us and we'll provide a copy
• Delete your data: use the "Delete my account" button in Account Settings, or contact us
• Correct your data: change your email in Account Settings
• Object to processing: contact us

When you delete your account:

• Your data becomes invisible immediately (soft delete)
• After 30 days, your data is permanently and irreversibly deleted (hard delete)
• Deletion is final once you confirm it: we cannot restore your account
• If you have a membership, it ends immediately, with no refund for the rest of the paid period. At permanent deletion we also remove your saved payment methods from Stripe

One small thing is left behind, and we would rather tell you than have you find out: a record of each time your progress on a topic changed. It holds the topic, what the change was, and the date — and nothing else. When you delete your account we remove what said those records were yours, and we delete them entirely two years after they were written, whether you have deleted your account or not.

We keep them because they are how we tell whether the tutor is actually working: removing one person's history would change what we had already measured about everybody else's. Nothing you wrote is in them. No message, no conversation, and nothing the tutor worked out about you as a person.

Cookies

We use the following cookies:

• Session cookie (essential): identifies your session so your conversation works. Expires after 30 days (authenticated) or 7 days (anonymous).
• Analytics cookie (optional): set only if you accept analytics in the cookie banner. Used by PostHog to measure site usage. See our Cookie Policy for full details.

We do not use advertising cookies, tracking cookies, or third-party cookies.

Children and minors

This product is designed for students aged 14 to 19, preparing for GCSE, A-level or the Romanian Baccalaureate. We apply the same privacy and safety protections to every user, regardless of age. We do not ask for your date of birth. The only age-adjacent detail we ever collect is an optional school year added during onboarding: it helps us personalise your experience in the product, and — like your country and language — it's included in the usage analytics we send to PostHog (see our Cookie Policy). We collect only an email address (for authenticated users) and do not knowingly collect data from children under 13.

This doesn't change a separate legal requirement: if you are under 16 and in the UK or EU, please ensure you have parental consent before creating an account. Anonymous use (without an account) does not require personal data.

Changes to this policy

If we make significant changes, we'll update this page and note the date at the top. We won't change how we use your existing data without giving you notice.

Contact

If you have questions about this policy or your data, contact us at:privacy@orimentis.com