Privacy Policy

Last updated October 27, 2026

This policy explains what StuFlex collects, why, and what you can do about it. StuFlex is run by Rehaan Irfan in the State of Washington, USA.

What we collect

• Your email address and password, to sign you in. Your password is stored scrambled (hashed) by Supabase, our sign-in provider; StuFlex never sees it. If you sign in with Google, Google shares your name, email address and profile picture with us.
• Your date of birth, to check you’re old enough and whether you need a parent or guardian’s agreement, and for students under 18, that a parent or guardian agreed.
• Your lessons: the questions you ask, Ollie’s replies, any photos of problems you add, and pictures of your student board work when you ask Ollie to check it.
• Your phone number, only if you choose to add one on your Account page. We don’t use it to sign you in or to take payments, and you can remove it at any time.
• Usage records: how much of your monthly allowance each lesson and voice clip uses.
• Your plan’s status from Stripe (for example active or cancelled). We never see or store your card number.
• Voice recordings, if you talk to Ollie. They’re sent to be turned into text and aren’t stored by StuFlex.
• Your IP address, which every website receives. We use it for security and to stop abuse, and our hosting providers see it when they deliver the site.
• Browser storage on your device: your sign-in session, your lesson settings and your age answer while you sign up. We don’t use advertising or tracking cookies.
• Your personal whiteboard is saved only in your browser. It isn’t sent to StuFlex unless you press Ask Ollie, which adds a picture of the part you choose to your message. Signing out doesn’t erase it; clearing your browser’s site data does.

How we use it

To run the tutor, keep your lessons so you can pick up where you left off, enforce the plan’s allowances, bill you, and answer your questions. Your information is not sold, and it isn’t shared for advertising. We don’t show ads and don’t use your information for targeted advertising or profiling.

Do Not Track

StuFlex doesn’t track you across other websites, and we don’t allow third parties to collect information about your activity across websites through StuFlex. Because there’s no such tracking to switch off, StuFlex works the same whether or not your browser sends a Do Not Track signal.

Who processes it for us

• Anthropic runs the AI that powers Ollie; your questions, photos and lessons are sent to it.
• ElevenLabs produces Ollie’s voice and turns your voice recordings into text.
• Supabase handles sign-in (including your password) and stores your account and lessons.
• Google, only if you choose to sign in with Google.
• Resend sends your sign-in emails, so it receives your email address.
• Sentry receives error reports when something breaks: which page and what went wrong, with your browser type. We remove your questions, emails, IP address and anything typed before reports are sent.
• Stripe (through Link) takes payments and keeps payment records.
• Cloudflare provides our domain’s address lookup (DNS) and the “I’m human” check on the sign-in pages, which runs a Cloudflare script in your browser and sends Cloudflare your IP address and browser details.
• Render hosts the website and the server.

They use your information only to provide their part of StuFlex.

How long we keep it

We keep your account and lessons until you delete your account. Stripe keeps its customer and payment records, including your email address, for as long as the law requires, even after you delete your StuFlex account.

Your choices

• Delete your account and everything we store about you yourself, at /account (once any plan has ended).
• To see or correct what we hold about you, contact us at rehaan_irfan@outlook.com.

Children

StuFlex isn’t for children under 13, and we don’t knowingly collect information from anyone under 13. If we learn that someone under 13 has an account, we delete it and its information. Parents who think their child under 13 has an account can contact us at rehaan_irfan@outlook.com.

A parent or guardian of a student aged 13 to 17 can contact us at rehaan_irfan@outlook.com to see or delete their teen’s information. We’ll check that the request really comes from that parent or guardian before acting on it.

Security

Your information is sent over encrypted connections and stored with access limited to running StuFlex. No service can promise perfect security, but we take reasonable steps to protect it.

Changes and contact

If we change this policy in a significant way, we’ll tell you in the app or by email. Questions? Contact us at rehaan_irfan@outlook.com. You can also read our Terms of Service.