Privacy
What we collect, what we send elsewhere, and what we throw away. In plain terms, because a policy nobody reads protects nobody.
Last updated 29 August 2026
What we hold about you
An email address, a password stored only as an Argon2id hash, and a record of your subscription. That is the account. We do not ask for your name, your institution, or your course.
We keep a usage ledger — how many checks you ran and when — because the limits and the billing depend on it. The ledger records that a check happened, not what was in it.
What happens to your work
A snip or typed working is sent securely for analysis, and the result is returned to you. Your image is held in memory for the length of that one request and then discarded. We do not write it to disk, we do not write it to our database, and there is no bucket of student snips anywhere.
Your work is never used to train models — not by LearnFastAI, and not by the service that analyses it.
Your session history and weak-area tracking are stored on your own machine by the desktop app. They are not uploaded.
What the desktop app can see
Nothing, until you press the hotkey. The app has no background capture, no timer, and no always-on recording. It sits in the tray inert; pressing Alt+C is what causes a single still image of the region you drag to be captured.
It never captures video, never captures audio, never reads other windows, and never captures anything outside the box you drew.
Cookies
One cookie, holding your sign-in session. It is httpOnly, so no script on the page can read it. There is no analytics cookie, no advertising cookie, and no third-party tracker on this site.
Payments
Stripe handles checkout and card details. We never see or store your card number. We keep the Stripe customer and subscription identifiers so we know what you are entitled to.
Security records
We log sign-ins, device links, and requests that trip our abuse protections, along with the IP address they came from. These records exist to stop account takeover and quota abuse, and are kept for 90 days.
Your choices
Everything is on your account page: sign out everywhere, unlink devices, cancel, and delete. Deleting removes your account, your usage records and every linked device, and cancels any live subscription in the same step. It is immediate and cannot be undone.
Something wrong?
Email the CEO directly at [email protected] — it goes straight to the founder's inbox.