Privacy Policy

We use data only as needed to provide and maintain Socratopia, including to:

• Authenticate sign-in, manage devices, provide account entitlements, process payments, and answer support requests
• Generate companion replies, post-lesson summaries, flashcards, journals, and other learning features you choose to use
• Provide online learning, Cloud Sync, device handoff, conflict protection, and history recovery
• Meter text and voice usage and prevent fraud, attacks, automated registrations, and reward abuse
• Monitor errors, availability, performance, security, and service stability
• Improve teaching rules and software performance through automated quality signals within the strict boundaries in the next section

Learning conversations can contain deeply personal experiences, thoughts, and uncertainties. We treat the original text as sensitive learning data and make these commitments:

• Without your explicit permission, our employees, contractors, and researchers will not read, label, quote, summarize, or manually distill your conversations. This does not include content you voluntarily send to support or specifically authorize us to inspect. Access required by law, a serious security incident, or the protection of someone's vital interests is limited to what is strictly necessary
• We do not use conversations to train or fine-tune models, create training datasets, conduct academic research, publish papers, or carry out other research activities. We will not use them for research without your explicit permission even if we first plan to anonymize or de-identify them
• Our systems may perform automated quality processing without showing the original conversation to a person—for example, checking whether a teaching flow operated as intended, measuring error and feature-success rates, or producing quality signals that contain no identifiable excerpts—to improve teaching rules and software performance
• Automated quality processing does not create advertising or personality profiles, provide conversations to outside researchers, or turn the original text into a human-readable analytics corpus
• If we ever need to use conversation content beyond these boundaries, we will explain the new use clearly in advance and obtain separate or explicit permission where applicable law requires it; we will not bury a material change in fine print

We do not sell or rent personal information, and we do not serve targeted advertising based on learning content. The following categories of providers may process data only as needed to perform their services:

• AI model providers receive the classroom context needed to generate a reply. The commercial APIs we select state that these requests are not used to train their models
• Voice providers receive companion text that must be converted to speech when you enable Companion Voice
• Cloud and network providers: Alibaba Cloud hosts core account, cloud-learning, sync, and model-proxy services; Cloudflare provides DNS and network services; Vercel hosts the official website
• Email providers deliver sign-in codes, support replies, and necessary account notices
• Payment providers: Stripe and the payment methods it supports process subscriptions and top-ups

The official website does not use advertising cookies. The Desktop App and online learning services use necessary local storage, session cookies, or operating-system secure storage for sign-in state, device identity, interface preferences, and feature state. These technologies operate the product and are not used for cross-site advertising tracking.

SocraLab LLC operates in the United States, and our core account and cloud-learning infrastructure is currently located in Hong Kong. AI, voice, email, payment, and network providers may process data in other countries or regions. We limit transfers and use contractual, security, or consent mechanisms as required by applicable law.

Depending on where you live, you may have rights to access, correct, export, or delete personal information; withdraw consent; object to or restrict certain processing; and complain to a supervisory authority. You can turn off Cloud Sync on a desktop computer so future data on that computer remains local. Turning the switch off does not automatically erase data already in the cloud; delete it in the product or contact us if you want it removed.

Socratopia is not intended for children under 13. A user who is below the age of independent consent where they live should use the service only after a guardian has read and agreed to this policy; for example, a user under 14 in mainland China requires guardian consent. If we learn that we collected a child's personal information without required guardian consent, we will take steps to delete it or stop processing it.

We use HTTPS, access controls, operating-system secure storage, file-path isolation, sync-version protection, backups, and security logging. Human access to original cloud conversation text is restricted to authorized circumstances and the minimum necessary scope. No internet service can guarantee absolute security; if a security incident may affect your rights, we will take remedial and notification steps required by applicable law.

We may update this policy as the product and legal requirements change. Updates appear on this page with a revised Last updated date. We will provide additional notice for new categories of data, material new purposes, or other significant changes, and will obtain consent before processing when applicable law requires it.

To exercise a data right or ask about privacy, automated processing, or security, contact:support@socratopia.app