Privacy policy

Landry Chouambe c/o Block Services Stuttgarter Str. 106 70736 Fellbach, Germany Email: kontakt@xgaudi.com

At registration

Email address, password (stored only as a hash, never in plain text), a self-chosen display name, birth year, and your preferred communication language. For users under 16, additionally a parent or guardian's email address.

While using the app

Uploaded files and the text extracted from them, the generated summaries and quiz questions, your answers, and the resulting assessments.

Technical

Each visit produces server logs at the service providers used (IP address, timestamp, requested address). These serve operation and abuse prevention.

Processing serves to provide the learning features. The legal basis is Art. 6(1)(b) GDPR (performance of the usage agreement) and, for technical logs, Art. 6(1)(f) GDPR (legitimate interest in secure operation). For users under 16, processing is based on parental/guardian consent under Art. 6(1)(a) in conjunction with Art. 8 GDPR.

Supabase (database, sign-in, file storage)

Server location Frankfurt am Main. Account and learning data, as well as uploaded files, are stored here.

Anthropic (generating quiz questions and assessments)

The text extracted from your document is sent to Anthropic PBC, USA, to generate questions and assessments from it. The transfer is based on the EU Standard Contractual Clauses. According to the provider, content submitted via the API is not used to train models.

Resend (email delivery)

Sends emails related to your account and organisation — such as guardian consent requests, invitations, and notifications about membership and billing; processing takes place in the EU (Ireland region).

Vercel and Railway (running the application)

Delivery of the website and operation of the programming interface.

Only upload material you are yourself allowed to use, and avoid documents containing other people's personal data — such as class lists or classmates' work.

The content of uploaded files is sent to Anthropic to generate questions. Please do not upload anything you do not want to share.

Your data remains stored until you delete it. You can remove individual topics and attempts at any time. Deleting your account under "Account" irreversibly removes all associated data and files.

You have the rights to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). Consent given can be withdrawn at any time with effect for the future. Please contact the email address above for this.

You can also file a complaint with a data protection supervisory authority, such as the data protection commissioner of Baden-Württemberg.

No cookies are set for advertising or analytics purposes. Sign-in uses a technically necessary browser storage entry so you stay signed in.

The service is aimed at school students. For users under 16, parental/guardian consent is required. The account stays locked until this has been confirmed via the link sent by email.