Privacy Policy

Last updated 27 October 2026

This policy explains what [set CHARON_LEGAL_NAME] ("we") collect when you use Sullivo, why, who we share it with, and the choices you have. We do not sell your data, show ads, or use third-party analytics or tracking.

1. What we collect

Your account

Your username, email address and a scrambled (hashed) form of your password, which we cannot read. If you sign in with Google, we receive your Google account's identifier, email address and name, and nothing else from your Google account.

Your learning ("interaction data")

What you ask to learn and anything you tell us about your goals and background; your answers to the placement question, the starting test and every in-chapter check and chapter test, including how sure you said you were; how far you have got; and the plans, chapters and figures written for you. Also: what you write when you explain a chapter back in your own words, the questions you ask Sullivo about what you are reading (with any passage you selected), the notes and drawings you make on the page, and any document you upload to read with Sullivo, with the notes written for it.

What Sullivo learns about you

From your interaction data Sullivo keeps a memory of you as a learner: short notes on how you like to learn, what you know, where you slip and what you are aiming for, with what each is based on, and an estimate of how well you know each concept you have met. You can see, correct and delete the notes, pause the memory, or wipe it, from "What Sullivo knows about you". When you finish a chapter we also schedule two short re-tests (a week and a month later) and keep your answers to them.

Payments

Payments are handled by Dodo Payments. We never see your card or bank details; we receive what you bought, its status, amount and currency, and identifiers for the payment, subscription and customer.

Asking to teach

If you ask to teach on Sullivo from our home page, we keep what you write in that form (your name, email, what and where you teach, and about the classes you would run), to read it and reply to you. Write to [set CHARON_CONTACT_EMAIL] to have it deleted.

Technical data

Your IP address and the requests your browser makes, kept briefly in server logs and used to keep Sullivo secure (for example, to limit repeated login attempts). When you sign in, and which addresses and browsers your account is used from, kept for 90 days so accounts can be protected against misuse. We set one cookie that keeps you logged in, plus a short-lived one during Google sign-in; both are strictly necessary, and we use no other cookies.

2. How we use it

• To teach you: to write and adapt your course, which is the core of the service and needs your interaction data.
• To run your account: logging you in, your plan and its allowance, credits, receipts and support.
• To keep Sullivo safe: preventing abuse, fraud and attacks.
• To meet legal duties: tax and accounting records, and lawful requests.
• To improve Sullivo, as described next.

3. Improving Sullivo with interaction data

We may use interaction data to make Sullivo teach better: for example, to see where courses start too fast, which explanations and questions work, and how accurately the starting test places learners. This may include using it, in de-identified form wherever practical, to evaluate, adjust and train the methods and AI models behind Sullivo. We will not publish anything that identifies you, and we will not sell it.

You can opt out at any time by writing to [set CHARON_CONTACT_EMAIL]. Opting out does not change the service you get; data from your account is excluded from this use from then on.

3a. Research, only if you choose

You can opt in, at sign-up or later from "What Sullivo knows about you", to help improve how Sullivo teaches. If you do, we also record how long you spend on each section, when you go back to re-read, and when you use a figure, and we keep your answers, re-test results and these records in research tables under a pseudonym (a coded identifier that is not your name or email). Some of your chapters may then explain one section in one of two ways, chosen at random, so we can learn which works better. Your memory notes and anything you type are never part of research data. Turning research off deletes your research data.

Separately, and only if you also opt in to it, pseudonymised research data may be shared with other organisations studying how people learn, such as AI developers. Data already shared cannot be recalled. People under 18 cannot use Sullivo, so no child's data is ever included.

4. Who we share it with

Only the service providers that run Sullivo for us, under agreements to protect it and use it only for that purpose:

• AI model providers, reached through the gateway aicredits.in, which receive what is needed to write your course and answer you: your request, your answers, your progress, your questions and explanations, and the text of any document you upload, but not your password, your email address or payment details. These providers may process data in India, the United States, China and other countries.
• Dodo Payments, our merchant of record, for purchases, under its own privacy policy.
• Google, if you choose to sign in with it.
• Our email provider, which delivers the emails we send you, such as an invite or a message about your account.
• Our hosting and backup providers, who store the service's data.

If, and only if, you opt in to sharing (section 3a), pseudonymised research data may also go to organisations studying how people learn.

We may also disclose data if the law requires it, to protect people's safety, or as part of a sale or merger of Sullivo, in which case this policy continues to apply to it.

5. Where it is kept, and for how long

Your data is stored on servers we rent and may be processed in other countries by the providers above. We keep your account and courses for as long as your account is open. When you ask us to delete your account, we delete it within 30 days, and it leaves our backups within a further 35 days. We keep payment records for as long as tax and accounting law requires. De-identified data already used to improve Sullivo may be kept.

6. Your choices and rights

You can ask us to give you a copy of your data, correct it, delete it, or stop using it to improve Sullivo, and you can withdraw any consent you have given. Write to [set CHARON_CONTACT_EMAIL]; we reply within 30 days. If you are in India, this address also reaches our grievance officer under the Digital Personal Data Protection Act, 2023, and you may complain to the Data Protection Board of India. If you are in the EU or UK, you may complain to your data protection authority.

7. Security

Connections to Sullivo are encrypted, passwords are stored only in hashed form, and access to the servers is restricted to the people who run Sullivo. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

8. Children

Sullivo is for people aged 18 and over. We do not knowingly collect data from children; if you believe a child has an account, tell us and we will delete it.

9. Changes

If we change this policy in a way that matters, we will tell you by email or in the app before the change applies. The date at the top shows when it last changed.

10. Contact

[set CHARON_LEGAL_NAME], [set CHARON_LEGAL_ADDRESS]. [set CHARON_CONTACT_EMAIL].