This privacy policy explains how Aqtisoft (“we”), the developer of the Apredia mobile app for iOS and Android, processes the personal data of people who use the app and this website. We apply Costa Rica’s Law No. 8968 on the Protection of Individuals with Regard to the Processing of Their Personal Data and its regulations.
Controller and contact
The data controller is Aqtisoft, based in Costa Rica. For any privacy question or request, write to [email protected].
Data we collect
Account data. Your email address and the identifier Google or Apple provides when you sign in with them. If you use email and password, the password is handled by our authentication provider and we never see it in plain text.
Eligibility declaration. Your age group (under 18, or 18 and older), your country of residence, the date and time of the declaration, and the policy version applied. We do not verify your age with documents.
Credits and purchases. Your credit history (welcome bonus, purchases, unlocks, refunds, and Tutor AI usage) and the transaction identifiers confirmed by the App Store or Google Play. We never receive or store your card or payment-method details.
Exam access. The free trials and unlocks for each exam, with their start and expiration dates.
Tutor AI conversations. The questions you write, the generated answers, the context of the card or question you opened Tutor AI from, and the measured usage used to calculate the charge.
Technical diagnostics. If the app fails, we receive error reports with technical codes, app version, operating system, and device model. These reports do not include your answers, exam content, payment data, or your identity.
Connection data. Like any internet service, our servers and providers log technical data for each request, such as IP address and date and time, to operate and protect the service.
Data that stays on your device. Your lesson progress, language, visual theme, and tutorial state are stored only on your phone and are not sent to our servers. Your answers in Practice and simulations are not stored on the server either.
We do not ask for access to your contacts, location, microphone, or camera.
How we collect data
- Directly from you, when you create your account, make your eligibility declaration, write to Tutor AI, or contact us.
- From Google or Apple, when you choose to sign in with them.
- From the App Store, Google Play, and RevenueCat, which confirm your purchases and refunds.
- Automatically, when the app communicates with our servers or records an error.
How we use your data
- To create and secure your account, verify your email, and recover access.
- To confirm that you meet the eligibility requirements.
- To give you access to the exams you started or unlocked.
- To credit purchases, process refunds, and keep an accurate credit history.
- To answer in Tutor AI and calculate its cost.
- To detect and fix errors, prevent fraud and abuse, and keep the service secure.
- To handle support requests and meet legal, tax, and app-store obligations.
We do not use your data for other purposes without asking for your consent again. We do not sell your personal data, show ads, build advertising profiles, or track your activity across third-party apps or websites.
Legal basis and consent
We process your data with the consent you give when creating your account, to provide the service you request, and to meet legal obligations. You can withdraw your consent at any time by deleting your account in the app or by writing to [email protected]. If you only want your questions not to be sent to an AI provider, simply do not use Tutor AI; the rest of the app works without it.
Who we share data with
We share data only with providers that process it on our behalf, following our instructions and only to deliver the service:
| Provider | Purpose | Data |
|---|---|---|
| Supabase | Authentication, database, and storage | Account, eligibility, credit, access, and Tutor AI conversation data |
| Google Cloud | Running our server and background tasks | Data processed by the server and connection data |
| Apple and Google | Sign-in and in-app payments, under their own policies | Sign-in identifier and purchase data |
| RevenueCat | Verifying store purchases | App user identifier and transaction identifiers |
| Sentry | App error reports | Technical diagnostics without identity data |
| AI model providers, such as OpenAI | Generating Tutor AI answers | The text of your questions, that conversation’s history, and the related study content |
| Email provider | Sending verification codes and security notices | Your email address |
| Cloudflare | Website hosting | Website connection data |
Tutor AI and third-party AI providers. Tutor AI sends information to a third-party AI provider only when you write a question. It sends the text of your question, that conversation’s history, and the study content of the card or question; it does not send your name, email, or payment data.
We require all of these providers to protect your data at a level the same as or equal to the one described in this policy, and we do not allow them to sell your data or use it for their own purposes. We may also disclose data when required by law or a competent authority.
International transfers
Some providers process data outside your country, for example in the United States. In those cases we apply the same protection requirements described above.
Retention and deletion
We keep your data while your account is active.
When you delete your account, we erase your sign-in, your identity data (such as your email), your exam access, your credit balance, and the text of your Tutor AI conversations. Deletion from the app is immediate; email requests are completed within 30 days at most. See how to delete your account.
We keep only the following, de-identified:
- Financial records of purchases, refunds, and credit activity, for at least three months, and longer when required by legal, tax, app-store, refund, chargeback, or dispute obligations.
- Product history that does not identify you.
- An irreversible value (a keyed hash) derived from your sign-in identity, used only to prevent the welcome bonus from being claimed again. It cannot be used to read or recover that identity.
Error reports and connection data do not contain your identity and are deleted according to each provider’s retention periods.
Your rights
You can request access to, rectification, update, or deletion of your data, and object to its processing. You can change your email and delete your account directly from Profile in the app. For any other request, write to [email protected] from your account email. We will respond within the legal deadlines. If you disagree with our response, you can contact Costa Rica’s Data Protection Agency (PRODHAB).
Minors
Apredia is intended for people aged 18 or older who live in a country where it is available, and it is not directed to children or teenagers. We do not admit accounts belonging to minors. If we receive credible information that an account belongs to a minor, we block new purchases on that account. If you believe a minor has given us their data, write to [email protected].
Security
All communication between the app and our servers is encrypted (HTTPS/TLS). We also use per-user database access controls, separated environments, and restricted staff access. No system is completely secure; if you find a vulnerability, report it to [email protected].
This website
This website does not use tracking cookies or third-party analytics tools. Our hosting provider may log technical data, such as IP addresses, to operate and protect the site.
Changes
We may update this policy. We will publish the new version on this page with its update date and, if the change is significant, we will notify you in the app.