Privacy Policy

This summary describes our principal data practices. The remainder of this Privacy Policy provides additional details.

• Account and identity data. We collect it from you and sign-in providers to create, secure, and administer accounts. We disclose it to authentication, email, infrastructure, and support providers as needed to operate the Service.
• Learner and tutoring data. We collect it from learners and adult account managers to provide personalized tutoring, generate learning materials, and report progress. We disclose relevant portions to AI, speech, document-processing, and infrastructure providers acting for us.
• Voice and recording data. Live microphone audio is processed for transcription and is not retained by Pythago after transcription. Profile-recording audio and generated transcripts are retained as learner content until deleted.
• Usage and device data. We collect it automatically to operate, secure, analyze, and improve the Service. PostHog provides product analytics and session replay, except for managed accounts used by children under 13. On public marketing pages only, Whop provides campaign measurement and attribution.
• Sale and advertising. We do not sell personal information, share it for cross-context behavioral advertising, or use learner content for advertising. The Whop campaign pixel measures Pythago's own marketing campaigns and does not load in signed-in or private tutoring areas.
• Model development. We do not use identifiable learner content to train models that serve other users. We may use aggregated or de-identified learning signals to improve and train specialized educational models that help Pythago teach better.

This Privacy Policy applies to the Pythago website, live AI tutoring application, and related features and services that link to it (collectively, the “Service”). It describes how Optimistic Software LLC, doing business as Pythago, collects, uses, discloses, and retains personal information.

The Service is currently offered to users in the United States. A school or district may use Pythago only under a separate written agreement. That agreement may include additional student-privacy terms and controls and will govern if it conflicts with this Privacy Policy.

Personal information you or an adult account manager provide

• Account information, including name, email address, profile image, and the date and version of legal terms accepted or acknowledged.
• Learner profile information, including a learner's name, age or grade level, goals, subjects, preferences, learning context, and information supplied by an adult account manager.
• Tutoring and learning content, including messages, transcripts, uploaded documents and images, source materials, lesson-canvas activity, answers, progress, generated lessons, reports, session notes, and other learning artifacts.
• Voice and profile-recording content. During live tutoring we process microphone audio, generated speech, captions, and transcripts. An adult account manager may also submit a profile recording after obtaining consent from everyone recorded.
• Communications, including support requests, feedback, and other messages exchanged with Pythago.
• Subscription information, including plan, billing status, credit usage, and subscription dates. Payment processors collect payment-card and billing information. Pythago does not store full payment-card numbers.

Information collected automatically

• Device and network information, such as IP address, approximate location derived from IP address, browser, operating system, device type, language, and unique identifiers.
• Online activity information, such as pages and screens viewed, features used, navigation paths, button and link interactions, access times, referring pages, errors, and performance information.
• Campaign-attribution information, such as public marketing pages viewed, referring pages, campaign identifiers, and associated device, network, and browser signals used to measure Pythago advertising and creator campaigns.
• Session replay information, as described in the Cookies, Analytics, and Session Replay section below.
• Security and diagnostic information, including authentication events, system status, and technical logs used to detect abuse, investigate errors, and protect the Service.

Information obtained from third parties

• Sign-in providers, such as Google, may provide the name, email address, profile image, and other account details that you authorize them to provide.
• Payment processors provide transaction status, subscription, and limited billing details.
• An adult account manager may provide information about a learner and create or administer the learner’s account.
• Service providers may provide fraud, security, delivery, and technical information connected with their services to Pythago.

Pythago uses cookies and similar technologies to authenticate users, remember preferences, maintain security, measure product use, and operate the Service. Disabling necessary browser storage may prevent parts of the Service from working.

We use PostHog for product analytics. PostHog may receive device, network, account, and online activity information. We use this information to understand feature use, diagnose problems, and improve the Service. We do not use PostHog for targeted advertising.

On public marketing pages, we use a Whop campaign pixel to measure page visits and attribute performance to Pythago advertising and creator campaigns. Whop may receive public-page activity, referring-page, device, network, browser, and campaign information for this purpose. The Whop pixel does not load on sign-in pages, family or learner dashboards, private rooms, or live tutoring pages, and it does not receive learner content from those areas.

Session replay is disabled by default and begins only after a signed-in user has accepted the current Terms and acknowledged this Privacy Policy. A replay may capture navigation, clicks, visible app content, and lesson-canvas activity. Form inputs are masked, and content marked as sensitive is masked or blocked. Pythago does not enable analytics or session replay for managed accounts used by children under 13.

We use personal information for the following business and operational purposes:

• Provide, operate, and personalize live voice and text tutoring, lesson canvases, source processing, lesson generation, learner profiles, and reports.
• Create and administer accounts, authenticate users, process subscriptions, and keep learner and family workspaces separated.
• Communicate about accounts, tutoring activity, security, support, transactions, and material changes to the Service or applicable terms.
• Monitor performance, analyze product use, troubleshoot errors, conduct research, evaluate teaching quality, and develop new features.
• Measure visits and attribute performance from Pythago advertising and creator campaigns on public marketing pages.
• Protect the Service, users, and Pythago from fraud, abuse, unauthorized access, security incidents, and unlawful activity.
• Enforce our Terms of Service, establish or defend legal claims, comply with applicable law, and respond to lawful requests.

We do not sell personal information, share personal information for cross-context behavioral advertising, use learner content for third-party advertising, or discriminate against a person for exercising applicable privacy rights.

Pythago uses artificial intelligence to provide tutoring, plan lessons, analyze source material, generate content, and personalize the learning experience. To perform these functions, we send relevant content and instructions to AI, speech, document-processing, and infrastructure providers acting on our behalf.

Our providers may process and, where needed to operate or protect their services, temporarily retain information under their agreements with us. We do not permit AI or speech providers to use personal information or learner content to train their general-purpose models.

Pythago does not use identifiable tutoring messages, transcripts, recordings, uploaded files, or canvas content to train models that serve other users. We may create and use aggregated or de-identified learning signals to evaluate teaching effectiveness, improve the Service, and develop or train specialized educational models that help Pythago teach better. We maintain de-identified information in de-identified form and do not attempt to re-identify it except as required by law.

AI output may be inaccurate, incomplete, or unexpected. Pythago is a learning aid and not a substitute for the judgment and supervision of a parent, guardian, educator, or qualified professional.

We may disclose personal information to the following recipients for the purposes described in this Privacy Policy:

• Adult account managers and organizations. An administrator may access the learner accounts, workspaces, tutoring activity, and progress that the administrator is authorized to manage.
• Service providers. Providers support hosting, per-user compute environments, authentication, AI inference, speech processing, document processing, analytics, campaign measurement and attribution, error monitoring, email, support, and payment processing.
• Professional advisers. Lawyers, auditors, insurers, accountants, and other professional advisers may receive information where reasonably necessary to provide their services.
• Authorities and others. We may disclose information when we reasonably believe disclosure is required by law or necessary to protect rights, privacy, safety, property, users, the public, or Pythago.
• Business transaction participants. Information may be disclosed in connection with diligence, financing, merger, acquisition, reorganization, bankruptcy, or sale of some or all of Pythago's business or assets.
• Recipients you direct. We may disclose information at your direction or with your permission.

A person under 13 may use Pythago only through a managed learner account created by a parent or legal guardian. Children under 13 cannot create self-managed accounts. We provide the parent a direct Child Privacy Notice and obtain consent before creating an under-13 account.

The parent or guardian supplies the learner’s name and email address from the signed-in family account. The learner then signs in using a code sent to that email address.

Our Child Privacy Notice explains the information collected from children, how we use and disclose it, retention, and parent controls.

• We collect from children under 13 only information reasonably necessary to provide the Service.
• We do not condition a child’s participation on providing more personal information than is reasonably necessary.
• We do not sell children’s personal information or use it for targeted advertising.
• We do not enable PostHog product analytics or content telemetry for managed accounts used by children under 13.
• Schools and districts may use Pythago only under a separate written agreement that addresses applicable student-privacy requirements.

A parent or guardian may ask to review or delete a child's personal information, revoke consent, or stop further collection by contacting privacy@heypythago.com. Revoking consent may require us to disable the learner's account if the information is necessary to provide the Service.

Depending on applicable law and the nature of your relationship with Pythago, you may request:

• Information about the categories and specific pieces of personal information we have collected, the sources of that information, the purposes for using it, and the recipients to which it was disclosed.
• Access to and, where applicable, a portable copy of personal information.
• Correction of inaccurate personal information.
• Deletion of personal information, subject to legal and operational exceptions.
• An appeal of our decision on a privacy request where applicable law provides that right.
• Withdrawal of consent where our processing depends on consent.

To make a request, use available account controls or email privacy@heypythago.com. We may request information reasonably necessary to verify your identity, authority, or relationship to the account. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and direct confirmation from the person concerned.

Some requests may be limited where fulfillment would impair another person’s rights, prevent us from providing a requested service, interfere with security or fraud prevention, or conflict with legal obligations. We will not discriminate against you for exercising a privacy right.

The Service may link to or integrate with websites, applications, and services operated by third parties. Their privacy practices are governed by their own policies, not this Privacy Policy. A link or integration does not mean that Pythago endorses or controls the third party.

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including encrypted network connections, tenant-aware access boundaries, authentication controls, and limited staff access for support and operations. No system or transmission method is completely secure, and we cannot guarantee absolute security.

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, taking into account the amount, nature, and sensitivity of the information, the risks of unauthorized use or disclosure, legal requirements, and whether the purpose can be achieved through other means.

• Tutoring messages, transcripts, uploaded sources, learner profiles, generated learning artifacts, and lesson-canvas content are generally retained until the applicable session or account is deleted.
• Live microphone audio is streamed for transcription and is not retained by Pythago after transcription.
• Profile-recording audio and generated transcripts are generally retained with the applicable learner record until deleted through an available account control, a valid deletion request, or account deletion.
• PostHog session replays are retained for no more than 30 days. Other product-analytics data is retained for no more than 24 months.
• Operational logs are generally retained for 30 days. We minimize learner content in these logs and do not log full AI requests or responses.
• Information may be retained longer when required by law, necessary to resolve a security, fraud, payment, or legal matter, or present in backups that expire on their normal schedule.

The Service is currently offered to users in the United States. Pythago and its service providers may process personal information in the United States and other locations where they operate. Those locations may have privacy laws that differ from the laws where you live.

We may update this Privacy Policy to reflect changes in the Service, our practices, or applicable law. We will post the updated policy and revise the effective date. If a change is material, we will provide appropriate notice and, when appropriate, require signed-in users to acknowledge the updated policy.

Optimistic Software LLC is responsible for the processing described in this Privacy Policy. Questions, concerns, and privacy requests may be sent to privacy@heypythago.com. Security reports may be sent to security@heypythago.com.