Privacy Policy

Last updated September 2026

1. Who we are

Socratis is a learning app. In this policy "we" and "us" mean the operator of Socratis, which decides how your data is used. Questions about your data: hello@socratis.app.

2. What we collect

• Account: your email, name and username, and your birthdate and gender if you choose to give them. Your password is stored hashed by our sign in provider; we never see it. If you sign in with Google or GitHub, we receive your name and email from them.
• Learning: your goals, answers, scores, skill progress, notes and session history, and any documents you upload.
• Subscription: your plan and whether it is active. Payments are handled by Apple, Google or Stripe. We never see your card number.
• Technical: your IP address and request logs, kept by our hosting provider for security, and error reports when something breaks. If you signed up on our website from a tracked link, the campaign it came from.

We do not collect your location, your contacts or advertising identifiers, and we do not track you across other apps or websites.

3. How we use it

• To build your learning path, run your quests and track your progress.
• To manage your subscription.
• To send emails about your account, such as password reset codes and trial reminders. No marketing emails without your consent.
• To keep Socratis secure and to fix errors.

We do not sell your data and we do not show ads.

4. AI

Socratis uses Claude, made by Anthropic, to write your learning content and mark your answers. Your answers and uploaded documents are sent to Anthropic for this. Under Anthropic's commercial terms they are not used to train its models. See Anthropic's privacy policy.

5. Who we share it with

Only the providers that run Socratis for us, each under a data processing agreement:

• Supabase: database and sign in
• Railway: servers
• Anthropic: AI
• Resend: email
• Sentry: error reports
• Apple, Google, RevenueCat and Stripe: payments
• Google and GitHub: only if you sign in with them

Some of these providers process data outside the UK, including in the United States, under the UK's approved safeguards for international transfers.

6. How long we keep it

For as long as your account exists. When you delete your account, your data is deleted at once, and removed from backups within 30 days. Documents you uploaded that became shared course material are kept, with your name removed from them.

7. Your rights

Under UK GDPR you can access, correct, export or delete your data, and object to how we use it.

• Export your data: in the app, Profile, then Account, then Export my data.
• Delete your account: in the app, Profile, then Account, then Delete account. Without the app, see Delete your account.
• Anything else: write to hello@socratis.app. We reply within 30 days.

You can also complain to the Information Commissioner's Office at ico.org.uk.

8. Children

Socratis is not for children under 13. We do not knowingly collect their data. If you think a child has made an account, write to hello@socratis.app and we will delete it.

9. Changes

We will email you at least 14 days before any material change to this policy.