Privacy notice

Who we are

Pobilo is run by Saygin Saman, an individual based in the United States (“Pobilo”, “we”, “us”). This notice covers the Pobilo website and app at pobilo.app. For any privacy question or request, email saygindoruksaman@gmail.com.

What we collect

• Your account: your email address and records of your sign-ins (such as the time and your device's IP address). If you sign in with Google, Google shares your name, email address, and a link to your profile picture with us.
• Your profile: the display name you choose (it starts as your Google name if you signed in with Google), your school level, your time zone, and your confirmation that you are 18 or older. We don't ask for your date of birth.
• Your notes: the files you upload and the notes you paste, and the text we extract from them. To read scanned pages, we create images of those pages.
• Your learning: lessons, questions, your answers, hints, feedback, grades, progress, and the transcript of each lesson (your messages and the tutor's replies).
• Problem reports you send us from the app.
• Technical information: server logs with request ids and error codes, and records of which features are used (for example, that a lesson started or finished). These never contain the text of your notes, answers, lesson titles, or transcripts.

We don't collect passwords (there are none), payment card numbers (Pobilo has no paid plans yet), or voice recordings (voice lessons aren't available yet).

Cookies and browser storage

We use only what the app needs to work: cookies that keep you signed in, a short-lived cookie (10 minutes) that remembers where to take you after Google sign-in, and a setting saved in your browser that remembers whether you chose to show the tutor robot. We don't use advertising cookies, third-party analytics, or tracking pixels.

How we use it

• To run Pobilo for you: store your notes, prepare lessons from them, tutor you, check your answers, and track your progress.
• To sign you in, keep accounts secure, and prevent abuse (for example, daily limits on new lessons).
• To find and fix problems, and to understand which features are used so we can improve them.
• To send you sign-in codes and important messages about your account or these documents.

We don't sell your personal information, share it for advertising, or use your notes, answers, or transcripts to train AI models.

How AI is used

Pobilo's lessons, tutor replies, and grading are produced by AI models from OpenAI. To do that, we send OpenAI the parts of your notes a task needs, images of scanned pages, and your messages and answers during a lesson. Under OpenAI's terms for its API, data sent this way isn't used to train OpenAI's models, and OpenAI may keep it for up to 30 days to monitor for abuse before deleting it. AI can make mistakes; see the Terms of use.

Who processes your data

We use these service providers, each only to provide its part of Pobilo:

• Supabase: database, file storage, sign-in, and sign-in emails.
• OpenAI: AI models for lessons, tutoring, grading, reading scanned pages, and search within your notes.
• Vercel: hosting for the website and app.
• Fly.io: servers that process your uploaded files and prepare lessons.
• Google: sign-in, only if you choose “Continue with Google”.

Your data is stored and processed in the United States. We may also disclose information if the law requires it, or to protect the safety of our users or others. If Pobilo is ever transferred to someone else, your data would move with it under this notice, and we would tell you first.

How long we keep it

• Your account, profile, notes, lessons, answers, and progress: until you delete them or your account.
• Lesson transcripts: deleted automatically 90 days after the lesson ends.
• Uploads that never finish: removed automatically.
• Records of which features were used: when you delete your account, they are separated from your account so they no longer identify you.
• Server logs: kept by our hosting providers for a short time.
• Backups we take before updating Pobilo: deleted after 30 days. If we ever restore one, we delete again any account that was deleted after the backup was taken.

Your choices and rights

• Download your data: Settings → Download my data gives you a file with your profile, courses, the text of your notes, lessons, transcripts, answers, and progress.
• Delete your account: Settings → Delete your account. Your account is blocked immediately, and your files and data are removed within minutes.
• Correct or ask about your data: email saygindoruksaman@gmail.com.

We answer requests within 30 days. Some U.S. states give their residents specific privacy rights; we honor these requests for everyone, wherever you live, and we won't treat you differently for making one.

Security

Data is encrypted in transit and at rest by our providers, and access rules in the database let only you read your notes and lessons. We access account data only to run and fix the service or when you ask us to. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

Age

Pobilo is only for people 18 and older and isn't directed to children. If we learn that someone under 18 has an account, we will delete it.

Do Not Track

We don't track you across other websites, so we treat browsers the same whether or not they send a Do Not Track signal.

Changes to this notice

When we change this notice, we update the date at the top. If a change matters for how your data is used, we will tell you by email or in the app before it takes effect. Voice lessons and paid plans aren't available yet; before they are, we will update this notice to say what they collect and who processes it.