OmniTaught / Privacy
What we collect, why we need it, who else sees it, and how to have it deleted.
Effective September 16, 2026 ยท OmniTaught LLC, a Louisiana limited liability company
OmniTaught LLC, a Louisiana limited liability company, operates OmniTaught and decides how the information described here is used. Questions, requests, and complaints go to [email protected].
| What | Why we have it | How long |
|---|---|---|
| Your email address | It identifies your account and is how we reach you about your account, a purchase, or a price change. | Until you delete your account. |
| Your password, hashed | So you can sign in. We never keep the password you typed. It is scrambled into a code that cannot be turned back into the original, so nobody can read your password, us included. | Until you delete your account. |
| Your first name, if you give one | So the app can greet you and so check-ins are not anonymous to us. | Until you delete your account. |
| Study progress: lessons passed, quiz scores, streaks, flashcard review schedule | It is the product. Spaced repetition cannot schedule reviews without knowing what you got wrong and when. | Until you delete your account. Kept if you cancel, so you can pick up where you left off. |
| What you do in the app: which courses and lessons you open and finish, your reviews, Topic Genie use, changes to how the app looks, and when the app opens, goes to the background, or comes back | To see where people get stuck and fix it. Each entry has a time, which is how we estimate how long a lesson took. It is tied to your account. It never includes what you type, what you search for, or how you answered a question. | 180 days, then deleted automatically, or sooner if you delete your account. |
| How you found us: the invite code in a friend's link, and the click identifier in the link from one of our ads | So we know who to thank for an invite and which ads and campaigns bring people in. We may also record the site or campaign that sent you when you create an account. | Until you delete your account. |
| Purchases: what you bought, when, whether a subscription is active, and the reference number the payment company or app store gives us | So your plan works and so we can handle refunds. | Until you delete your account. Stripe, Apple, and Google keep their own payment records under their own policies. |
| A push address for each phone or browser where you turned reminders on, with that device's time zone and browser type | So a reminder reaches that device at the hour you usually study. The address comes from your browser's push service, or from Apple in our iPhone app. It only exists if you turn on Reminders in Settings. | Until you turn reminders off, sign out on that device, or the push service tells us the address no longer works. Deleting your account removes them all. |
| Question totals: how many people answered each question, how many got it right, and which answer they picked | It is how we find broken questions. A question nearly everyone misses is usually our mistake. These are plain counts with no account attached, so they cannot be traced back to you. | For as long as the question exists. Because they carry no account, they stay after you delete yours. |
| Reports you file on a question | So we can fix it. A report holds the question, what you said was wrong, and your account. It is also emailed to our support inbox with your name and email, so we can ask you about it. | We keep reports after the fix as a record. Deleting your account does not remove them. Email us and we will. |
| Courses you build with the Topic Genie, and the wish that produced them | To deliver the course, let you download it again, and let you edit it. The finished course may appear in the public Wish Library. Your wish text never does. | Until you ask us to remove it. |
| Check-in answers, and any screenshot you attach | To find out what is working and what is not. We use Anthropic to summarize them, as described below. | Until you delete your account. |
| With a check-in only: your browser and operating system, and a shortened one-way hash of your IP address | So we can tell whether a bug affects one browser or everyone, and so one person cannot flood the form. The hash cannot be turned back into your address. | With the check-in, until you delete your account. |
| Which app you signed in from (the website, the Play app, or the iPhone app), its version, and a one-way hash of an id your browser or phone keeps for this app | So we know how many people are still on an older iPhone app before we change something older versions cannot handle. The hash tells one of your devices from another and cannot be turned back into the id. | Until you delete your account. |
| In the iPhone app only: a one-way hash of the id the app's updater keeps on your phone, linked to your account | So a fix to the app can reach your iPhone without waiting for a new App Store version, and so our own accounts get it to check before everyone else does. Each time the iPhone app opens, it asks our server whether there is an update, sending that id, the app and iOS versions, and whether it is running on a simulator. We use those to answer and do not keep them. | Until you delete your account. If you sign in to a different account on the same phone, it moves to that account. |
| Error reports when something breaks: the error, the screen it happened on, and the app version. If you are signed in, also your account and browser type | So we can find and fix the bug. | 90 days, or until you delete your account. |
| Emails you send us | So we can answer you. | Until we have dealt with your message, or longer if it is about a purchase or refund. Ask and we will delete it. |
| A session token in your browser | So you stay signed in for 90 days instead of typing your password every visit. | 90 days, or until you sign out. |
We do not collect your date of birth, home address, phone number, government identifiers, or payment card numbers, and we do not store your IP address. Card details go to the payment companies named below and never reach our servers.
If you are only reading the public pages, we keep daily counts for each page: how many times it was opened, how far people scrolled, and how many tapped through to the app. We also count which site sent visitors, by site name only, such as google.com. These counts carry no identifier, and we keep them.
One thing on the public pages is stored in your browser. If you arrive through one of our ads or a friend's invite link, we keep the code from that link so it can be attached to your account if you sign up.
We do not respond to Do Not Track signals.
OmniTaught works offline. Your lessons, your progress, and any course you built are stored in your browser's local storage so the app keeps working without a connection.
Clearing your browser data removes that copy. If you have an account, your progress is also on our server, so signing in on a new device brings it back.
Three features send text to Anthropic, the company behind the Claude models.
The Topic Genie. When you build a course, the goal, background, and context you typed are sent so the lessons can be written.
My Words. The app carries a dictionary and answers almost every lookup offline. When you look up a word it does not have, that word and the sentence it appeared in are sent, so the definition fits the meaning you met. The sentence comes from the lesson, not from anything you wrote. This is capped at twenty lookups a day.
Check-in summaries. To spot patterns across check-ins, we send the answers along with the first name given, if any, and the week of the check-in.
None of these include your email, your account id, or your progress.
Anthropic processes this for us under its commercial terms, and does not use data sent through its business API to train its models.
Please do not put anything into a wish, a check-in, or a word list note that you would not want processed by a third party: no client details, no patient information, nothing covered by HIPAA or FERPA. OmniTaught is a study tool, not a clinical system, and it is not built to hold protected health information.
We do not set cookies. Turnstile, the signup check, may use its own browser storage while it runs.
We store a few things in your browser: a session token so you stay signed in, your app data so it works offline, an invite code if a friend sent you a link, and an ad click identifier if you came from one of our ads. The invite code and the ad identifier are sent to us when you create an account. Clearing your browser data removes all of it.
The site follows your device's reduced-motion and dark-mode settings. It reads them on your device and never sends them to us.
No system is perfectly secure. If we discover a breach that affects your information, we will email you promptly and tell you what happened and what to do.
If you find a security problem, please report it to [email protected] before disclosing it publicly.
Download and delete are buttons in the app, so they happen at once. For anything else, email [email protected]. We aim to answer within a few days and will not charge you.
Depending on where you live, you may have more rights under laws such as the California Consumer Privacy Act or the GDPR. We give everyone the choices above wherever they live.
OmniTaught is built for adults and for students preparing for college entrance and professional exams. It is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has created an account, email us and we will delete it.
If you are between 13 and 18, please get a parent's or guardian's permission before creating an account.
If we change how we handle your information in a way that matters, we will email account holders before the change takes effect and update the date at the top of this page.
Privacy questions, data requests, and security reports go to [email protected].
See also our Terms and Refund Policy.