Privacy

• Your account: your e-mail address, your name as your sign-in provider gives it, your role, and how many puzzles you created this month. Kept in our accounts database only; e-mail addresses are never put in the learning graph, logs, or prompts.
• Your learning: the puzzles you play, your answers, your mastery of each concept, and the Coach's recommendations with the reasons behind them. Kept in the learning graph, linked to an account id, not your e-mail.
• What you upload or describe: the text you paste or upload, and the subject you describe when creating a puzzle, with the passages and questions made from it. Your sources are private: only you can read them, unless you share a puzzle with someone and choose to include its source.
• Sharing: when you share a puzzle by e-mail, we record who can play it. The person must already have signed in once.

Concept names and short descriptions taken from your material become part of a shared map of concepts that every learner uses. The text of your material does not.

Sign-in is handled by Amazon Cognito, with Google or with an e-mail address and password. Graph Coach never stores your password. When you continue with Google, Google shares your name and e-mail address with us, nothing else.

• Amazon Web Services (United States, us-east-1): hosting, databases, backups, and sign-in (Cognito).
• AI models: to create puzzles, the text you upload or describe is sent to a language model, first one run by the site owner, otherwise through OpenRouter to the model provider (currently OpenAI's gpt-4o-mini). Text is also sent through OpenRouter to an embedding model (Qwen) so related passages can be found. No account details are sent with it.
• Usage tracing (Langfuse), when enabled: only counts of model calls and tokens, never your text.

One sign-in cookie keeps you signed in. It is encrypted and cannot be read by scripts on the page. Your browser also remembers your light or dark theme choice and an unfinished puzzle, on your device only. There are no advertising or analytics cookies.

Until you ask us to delete it, or until the demonstration is reset or shut down, whichever comes first. Backups are kept for up to 30 days.

To see, correct, or delete your data, including your account, e-mail thiagoramos@gmail.com from the address you sign in with. We answer within 30 days. Please upload only material you have the right to use.