Stemio← Back to Stemio

Privacy Policy

Last updated: May 13, 2026

This policy explains what personal data we collect and how we use it. Contact: support@stemio.ai.

Data we collect

  • Account: your email address, and — if you sign in with Google — your Google account identifier and basic profile.
  • Session content: the problems you work on, your whiteboard drawings and any photos you add to them, and the chat history between you and the tutor.
  • Usage data: events about how you use the app (e.g. sign in, send message, mark problem solved), keyed to your account, together with standard request metadata (browser, operating system, approximate location from IP).

You are in control of what you share. The only personal information we require is your email address. We do not ask for, and Stemio is not designed to handle, sensitive personal data (such as government IDs, health, financial, or biometric information). You are responsible for what you choose to write or photograph on the whiteboard or send in chat — please do not include sensitive personal information in your sessions.

How we use it

  • To run the tutor and generate responses.
  • To sync your sessions across your devices.
  • To operate, secure, and improve the service.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not train AI models on your data.

Who we share it with

We share data only with service providers that help us run Stemio:

  • Anthropic (AI model provider) — receives your whiteboard snapshot and chat history to generate tutor responses.
  • Supabase — authentication and database.
  • Vercel — application hosting.
  • Mixpanel — product analytics.
  • Google — only if you choose to sign in with Google.

We may also disclose information if required by law, or to protect the rights, property, or safety of Stemio, our users, or others.

International transfers

Our service providers may process your data outside your country, including in the United States, under standard contractual clauses or equivalent safeguards.

Retention and your rights

We retain your data for as long as your account is active. After you delete your account, we remove your personal data from our active systems within approximately 30 days, except where retention is required by law or for routine backups, which are purged on rolling cycles.

Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your personal data, to object to certain processing, or to withdraw consent. To exercise any of these rights, email support@stemio.ai. EEA/UK users may also lodge a complaint with their local data protection authority.

Cookies

We set authentication cookies to keep you signed in, and our analytics provider may set a first-party identifier (cookie or local storage) to distinguish sessions. We do not use advertising or cross-site tracking cookies.

Children

Stemio is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us personal data, contact support@stemio.ai and we will delete it. Users between 13 and the age of digital consent in their jurisdiction should use Stemio only with the involvement of a parent or guardian.

Changes

We may update this policy; material changes will be reflected by a new "last updated" date above.