Privacy.

What this service stores about you, where, for how long, and who can read it.

What is stored

The service holds four kinds of data.

• Account data. There is a single account, the operator's. It consists of a username and a password hash and lives in the server configuration, not in the database.
• Texts you submit. A passage you paste for analysis, a drill answer, or a Desk piece is sent to the server to be evaluated. For anonymous visitors the text is used for the request and is not written to the database. For the signed-in account, saved readings, Desk pieces and the full call log, including the submitted text and the model's answer, are stored until the account removes them.
• AI evaluations. The answer the model returns is shown to you. It is stored only for the signed-in account, as part of the call log above. For anonymous visitors only the shape of the call is recorded, that is the time, the provider and model used, the duration, the character counts and whether it succeeded. The text itself is replaced by a fixed placeholder.
• Access logs. Every request to the server is logged with its time, method, path, status, duration, your IP address, the forwarded-for header, your user agent, the referer and the host name.

Your browser also keeps some state locally, such as your provider choice, any API key you enter, your faculty scores and unsaved Desk drafts. That state stays in your browser's storage and is never sent to the server except as part of a request you make.

Where

On the operator's own servers. The service may be hosted on a rented virtual server in the European Union, where the hosting provider has physical access to the machine.

How long

Access log rows and the anonymous call log rows are deleted after 60 days. The purge runs automatically every day. Account data, saved readings, Desk pieces and the account's call log are kept until the account deletes them.

Who can read it

The operator. In addition, the model provider you select receives the text you submit at the moment it is evaluated, under that provider's own terms. The providers offered are Anthropic, OpenAI and DeepSeek, or the operator's own Claude subscription when the operator is signed in. Nobody else has access to the data.

Cookies and third parties

There are no third-party analytics and no tracking cookies. The only cookie is the session cookie set when the operator signs in. Every script, stylesheet and typeface is served from this server. No third-party resource is loaded.

Export and deletion

A signed-in account can download everything stored under it as one JSON file with the Export my data action on the History page, and can erase all of it with the Delete my account action on the same page. Deletion removes saved readings, Desk pieces and the call log in a single transaction. The credentials themselves are server configuration and are removed by the operator.

Anonymous visitors have no stored data beyond the access log rows described above, which expire on their own. To ask for an earlier removal, or for a copy of what the log holds about an address, write to renatobritto.professional@gmail.com. Requests are answered within thirty days.

Legal basis

This page is written to satisfy the General Data Protection Regulation (GDPR) of the European Union and the Lei Geral de Protecao de Dados (LGPD) of Brazil, and the same terms apply to every visitor regardless of location.

Last revised 2026-09-07.