Who we are

Thetaghorus is an educational application that gives students an AI tutor trained on their teachers' lesson content. Students access the app through an access code issued by their school.

Information we collect

• Student name — to personalize the experience and let your school identify your account.
• Phone number — used as your account identifier when registering and signing in.
• Your access code — the code your school issued you, and the date it was activated.
• Chat history — the questions you ask the AI tutor and its answers, so conversations stay coherent and your school can support you.
• Answer feedback — whether you marked an answer with a thumbs up or thumbs down.
• Learning progress — which lessons you opened and when, the last lesson you opened, and the level you have reached.
• Quiz and boss-fight results — your score and whether you passed, for each chapter.
• Lesson-access records — which lesson file was served to you and when, kept as an anti-piracy audit trail.
• Uploaded screenshots — images you choose to attach to a question (for example, a photo of a homework problem). Location and device metadata (EXIF) are stripped from images before they are stored.
• Device identifiers — on Android the system device ID, on iPhone the vendor identifier, and on the web an identifier stored in your browser. We use these for the two-device limit and session security.
• Notification identifiers — a push token, issued by Expo, that identifies this installation of the app so notifications can reach it.
• Update-check identifier — a random identifier sent to Expo each time the app checks for an update.
• Basic usage logs — records of requests to our service, used for reliability and abuse prevention.

How we use your information

We use your information solely to operate the AI tutoring service: to authenticate you, address you by name, and verify what your access code entitles you to; to answer your questions using your teachers' content, including any image you attach; to keep your conversation history available to you, showing your rating on any answer you rated; to show your progress, your level, and your quiz and boss-fight results, and to unlock later chapters; to keep an audit record of which lesson file was served to you and when; to enforce the device limit and keep your session secure; to send you notifications and deliver app updates; and to monitor and improve reliability and safety. We do not sell your personal data, and we do not use it for advertising.

Third-party sub-processors

To provide the service we share the minimum necessary data with the following providers, who process it on our behalf:

• Anthropic (Claude) — receives the text of your question and any image you upload, in order to generate the tutoring answer.
• OpenAI — receives question and lesson text to generate numerical embeddings used to find the most relevant lesson content (semantic search).
• Supabase — hosts our database and file storage, holding your account data, chat history, and uploaded images.
• Upstash — stores short-lived rate-limit and session records used to protect the service from abuse. When you sign in, your phone number and IP address are themselves used as the keys those records are stored under.
• Expo — issues the push token that identifies your app installation, delivers our push notifications, and serves over-the-air app updates, receiving an identifier each time your app checks for one.
• Google and Apple — their notification services (FCM on Android, APNs on iPhone) deliver push notifications to your device.
• Railway — hosts our backend. It handles every request and retains application logs that include your student ID.
• Vercel — hosts the web version of the app and this site, and sees request details including your IP address.

These providers may process data on servers outside your country. Each is bound by its own data-processing terms.

Data retention

We keep your personal data for as long as your account is active with your school. When your account is deleted, your student record, saved chat history, AI interaction logs, quiz attempts, lesson-access records, session tokens, notification registrations, and uploaded images are removed. Some data is not deleted; what is kept, and why, is set out in “Deleting your data” below. Aggregated, non-identifying statistics may be retained for reliability and capacity planning.

Deleting your data

You can delete your account and all associated data at any time:

• Delete it yourself inside the app — open Thetaghorus, go to the YOU tab, and tap ‏حذف الحساب‏ (Delete account) at the bottom of the screen, then confirm. This is the fastest route and takes effect immediately.
• Email us at aiteacherproject@gmail.com — use this if you have already uninstalled the app or cannot sign in. Include the phone number your account is registered with. Requests are actioned manually.
• Contact your school administrator, who can delete your account on your behalf.

Full step-by-step instructions, and the complete list of what is removed, are on our account deletion page.

Deletion removes your student record and cascades to your saved chat history, AI interaction logs, quiz attempts, lesson-access logs, session tokens, and push-notification registrations, and explicitly purges your uploaded images from storage. Some data is deliberately kept rather than deleted. The access code issued by your school is unlinked from you and carries none of your personal data. Our answer cache keeps the text of questions and of the answers given, so a repeated question does not have to be sent to the AI again; a cached entry is stored against the AI tutor and carries no student identifier of any kind. The question itself is kept as you typed it, so any personal detail you put into a question stays in that text — which is why it is best not to include personal details in the questions you ask. Deleting your account does not remove the cached entry. The whole cache for a tutor is cleared whenever that tutor's instructions are updated. Separately from the above, our hosting provider keeps application logs of requests to our service; those logs include your student ID, and deleting your account does not remove them. Deletion is permanent and cannot be undone.

Children's privacy

Thetaghorus is used by school students. We collect only the data needed to deliver tutoring and rely on schools to obtain any consent required for their students. If you believe a child's data has been collected without proper authorization, contact us and we will delete it.

Contact us

For any privacy question or request, email aiteacherproject@gmail.com.