EmeLearn

Privacy Policy

Last updated: October 5, 2026

This policy explains how EmeLearn handles information for accounts, learning, AI generation and shared study spaces. What is processed depends on the features you use.

Accounts and learning information

Firebase Authentication handles email/password and Google sign-in, account identifiers, names, email addresses and any profile information supplied by the sign-in provider. EmeLearn does not receive your Google password or request your Google contacts or permission to post.

Ordinary generated quiz history, answer reviews, Smart Review progress and mastery information are stored locally on your device. Using a shared feature sends the information needed for that feature to Firebase. Activity creators can access participant names, submissions, scores and focus-mode event counts. Assessment feedback remains subject to the activity's release rules. Daily Quiz stores attempts, answers, scores and timing; learner names, scores and ranks are used for leaderboards.

Private profile customization

You can optionally choose a bundled avatar and preset accent. These selections are stored with your private Firebase profile to personalize your own Profile and Home screens across devices; they are not published to other learners. EmeLearn does not upload profile photos or use your Google photo for this feature. Your display name identifies new shared content; existing shared records retain their saved names. Account deletion includes these private profile selections.

AI processing of selected material

When you request AI quiz generation, EmeLearn sends selected study material to Google's Firebase AI services to generate questions and explanations using the configured Gemini model. Inputs can include pasted text, file names, PDF contents, selected images, and text and embedded images extracted from Word or PowerPoint files. Generation instructions and questions excluded to reduce repeats can also be included.

The generation flow does not separately upload source files to EmeLearn's Firestore database. That does not mean AI requests are never retained by the service provider. If you share a generated quiz, its content is stored for that shared feature. If you report an AI question, the reported question, answer, explanation, source label, reason and details are sent to EmeLearn's moderation service. Only select material you are entitled to use; avoid unnecessary personal or confidential information. AI output can contain mistakes.

Camera, images, OCR and read aloud

Camera and image-selection features support QR scanning and question-paper import. ML Kit text recognition processes OCR images and recognized text on-device; this OCR step does not send that content to Google. Separately choosing material for AI generation or publishing an imported quiz sends the selected content for that feature.

Google's ML Kit SDK also sends usage and diagnostic metrics to Google, distinct from OCR content. See ML Kit privacy information. Camera permission and selected-file access can be managed through your device. Read aloud passes question and choice text to your device's text-to-speech service; its processing depends on the selected engine and voice settings.

Password recovery and service providers

Firebase Authentication generates password-reset credentials. Resend receives the recipient email address and recovery-email content, including the reset link, to deliver the message. The reset page uses Firebase Authentication to validate the link and set the new password. The new password is not sent to Resend by EmeLearn. Never share reset links, passwords or verification codes.

EmeLearn uses Google/Firebase Authentication, Firestore, Cloud Functions, Hosting, App Check/Play Integrity and Firebase AI services for accounts, storage, server features, website delivery, abuse protection and AI generation. Service requests can involve account, network, device, integrity and diagnostic information. Relevant provider notices include Firebase privacy information, Google's Privacy Policy and Resend's Privacy Policy. Provider handling depends on the service and applicable configuration and terms; this policy does not promise a particular provider retention period or AI-training exclusion.

Study Lounge and regular study groups

Study Lounge is shared with signed-in learners who meet its access requirements. It provides message reporting and tools to hide blocked learners' messages. Blocking is not a guarantee that the other learner cannot see your shared content. Automated restrictions on obvious contact details and links are not a guarantee that all personal information or abuse is detected.

Invite-code groups store member names, messages, shared practice quizzes and live-quiz participation, answers, scores and response times in Firebase. Current members, including members who join later, can read available group history, shared practice questions and answers, and public live-quiz results. Unrevealed live answer keys are not available to clients; answers are revealed after each question closes, and a learner's live answer sheet is restricted to that learner.

Leaving a group does not erase your content. Closing a group stops new participation and posting but leaves history readable to remaining members. Authors and owners can remove messages and shared quizzes; owners can remove members. Regular groups do not currently have the Lounge's in-app report/block tools. Contact support about group abuse. Leaving or removing members requires any active live quiz to finish or be cancelled. Other learners may keep saved practice copies or screenshots outside EmeLearn's control.

Retention, expiry and deletion

Study Lounge messages are assigned expiry after about one hour, Lounge reports after seven days and AI-question reports after thirty days. Scheduled cleanup runs in bounded batches, so expiry is not a promise of immediate erasure. Reports can be removed earlier during moderation or account deletion.

Regular group messages and shared practice quizzes have no automatic time-based expiry. Account, Activity and completed Daily Quiz/leaderboard data are not subject to a general automatic expiry in the current app. Temporary live-room and unfinished-attempt cleanup is separate from shared-content retention; minimal attempt or room records can remain to prevent retakes or stale requests from recreating deleted sessions.

Password-recovery abuse controls retain hashed recipient and request-origin identifiers with an expiry target of about one day; those hashes are not treated as anonymous. These records are cleaned up separately from account deletion. Your account identifier can also remain in another learner's personal blocklist until they remove it or delete their account.

Account deletion removes the Firebase Authentication account and the linked app records described on the Data Deletion page, including owned Activities/groups and identified participation and authored group content. It does not remotely erase other devices' saved copies, original source documents, emails already delivered, or automatically issue erasure requests for every provider log or backup. Provider logs, support correspondence and any legally necessary retention need separate handling; contact support about the records involved. We do not promise a fixed completion deadline or an unlimited right to retain information.

Security record retained after deletion

After successful account deletion, EmeLearn keeps a minimal security record at accountDeletionStates/{uid}. Your Firebase account identifier (UID) remains only as the document ID. The only application data in the document is {"state":"data-deleted"}, recording that the account's data was deleted.

This record contains no name, email, profile data, quiz content, messages, deletion reason, request ID or timestamp written by EmeLearn. Firestore may retain normal infrastructure/document metadata.

This is a pseudonymous internal security record with restricted backend access. It is not anonymous or public profile data. It prevents delayed, retried, background, maintenance or stale backend operations from recreating data associated with your deleted account.

Retention is currently indefinite for security and service integrity, while this protection remains necessary. EmeLearn has no proven finite point after which every delayed operation or operation with privileged backend access can safely be assumed gone; there is no fixed expiry period for this record.

Eligibility, safety and your controls

EmeLearn requires confirmation that you are at least 13. You must also meet any higher age or parental-permission requirements that apply where you live. That confirmation is not identity or parental-consent verification. Do not use the service if you do not meet the applicable requirements.

You can manage device permissions, clear this account's local learning data, use available reporting and safety tools, and request account deletion. Clearing local data or uninstalling is not account deletion. Authentication, access rules, server validation and App Check help protect data, but no system eliminates all security risk. To ask about access, correction, deletion or another privacy concern, contact support below.

Contact

For privacy or account questions, contact bruhhdesu@gmail.com.