Privacy Policy

The short version

• We collect what we need to run your account and make your study packs: your name and email, your classes and study material, and your study activity.
• Your material goes to our AI provider, Anthropic, PBC, only after you allow AI processing, and only to make the study pack you asked for. Anthropic does not use it to train its AI models.
• We don't sell your personal information, share it for advertising, show ads, or track you across other companies' apps and websites.
• Other students see only your display name, handle, avatar and streak, plus your study time on exams you race together. They never see your email, notes, study packs, uploads or quiz results.
• Chomp is not for children under 13.
• You can delete your account, and the information that goes with it, from inside the app at any time.

Who we are

Chomp is operated by FILL_IN (legal name of the person or company that runs Chomp), FILL_IN ("an individual", or e.g. "a limited liability company organized in [state]") ("we", "us" or "our"). This Privacy Policy explains how we handle personal information in the Chomp app and its related websites and services (together, "Chomp").

Questions? Email hello@feedchomp.com, call FILL_IN (contact phone number), or write to FILL_IN (legal name of the person or company that runs Chomp), FILL_IN (mailing address: street, city, state, ZIP).

Information you give us

• Account details: your name, email address and password. Your password is stored by our authentication provider in hashed form, so we can't read it.
• Profile: your display name, handle and avatar choices.
• Classes and exams: the classes you pick or add, and the exams you create (their names, dates and classes, and which friends you invite to race).
• Study material: the photos, files, Google Drive documents and pasted notes you add to make a study pack.
• People: the friend requests you send and accept, and the people you block.
• Reports and messages: reports you make about other students (the reason and any details you add), and anything you send us when you contact support.

Information created when you use Chomp

• Study packs made from your material (summaries, key terms, study guides, flashcards, quizzes and test tips), along with the name, type and size of the file each came from, and your flashcard review progress.
• Study activity: focus sessions (how many minutes, when, and for which class or exam), reviews and quizzes completed, streaks, XP, levels, medals and daily quests.
• Your plan, your free-trial dates, and whether and when you allowed AI processing.
• A count of the study packs you've requested and how much material each one included (not the material itself), which we use to apply daily limits.
• Reports that other students make about your account.

Information from Apple and Google

• Sign in with Apple: an identifier for your Apple Account and, the first time only and only if you choose to share them, your name and email address. If you choose Hide My Email, we receive a private relay address instead. Apple also gives us a token that lets us disconnect Chomp from your Apple Account when you delete your Chomp account.
• Google sign-in: your name, email address and Google account identifier.
• Google Drive: if you add material from Google Drive, you choose the files in Google's own picker, and Chomp gets permission to open only those files. That permission expires within an hour and isn't stored.
• Age range: where the law requires app stores to check age, Apple may tell Chomp your age range (for example, 13 to 15). We use it only to decide whether you can use Chomp, and keep only that yes-or-no result, on your device.
• Purchases: if you buy a subscription, Apple processes the payment. We receive information about the subscription (the plan, when it started and renews, and whether it's active), but never your payment card details.

Information collected automatically

When the app talks to our servers, our systems and service providers record technical information such as your IP address, device and operating system type, app version, the time of each request and any errors. We use it to keep Chomp secure and working, to prevent abuse (for example, limiting how fast study packs can be requested) and to fix problems.

We don't use advertising identifiers, and we don't collect your precise location, contacts, microphone audio, browsing history or health information. Chomp doesn't contain analytics or advertising software from other companies.

Chomp uses your camera only when you tap to take a photo, and reads only the photos you choose from your library. Photos you take in Chomp aren't saved to your photo library.

Information that stays on your device

Some information never leaves your phone: the result of the age check, your crumbs and avatar items, your reminder time and scheduled reminders. The birth month and year you enter are used once to work out whether you can use Chomp and aren't saved. Chomp also keeps a copy of your account data on your phone so it works when you're offline.

How we use information

• To create and run your account and keep your data in sync across your devices.
• To make study packs from the material you add (see "AI processing").
• To run the features you use: flashcard scheduling, the focus timer, streaks, rewards, friends and study races.
• To keep Chomp safe: checking names, handles and exam names for words that aren't allowed, reviewing reports, enforcing blocks, preventing spam and abuse, and applying plan and rate limits.
• To give you support and send service messages, such as confirming your email address. We don't send marketing emails.
• To keep Chomp secure, find and fix bugs, and protect against fraud and misuse.
• To comply with the law and enforce our Terms of Use.

We don't use your information to show ads, we don't sell it, and we don't use it to make decisions about you that have legal or similarly significant effects. We don't use your material to train AI models, and neither does our AI provider.

AI processing

Chomp uses AI from Anthropic, PBC ("Anthropic") to turn your material into study packs. Chomp asks for your permission before it sends anything.

• What is sent: the text, photos and file contents you add for that pack (including files you pick from Google Drive), the names of the file and the class, and instructions for writing the pack. Your name, email address, handle and account ID are not sent.
• When: only when you tap "Chomp it" to make a pack, and only while AI processing is turned on.
• What Anthropic does with it: it processes the material to write your pack and sends the result back to us. Anthropic does not use it to train its AI models. Anthropic generally deletes it within 30 days, though material flagged for breaking its usage policies can be kept longer so misuse can be investigated.
• What we keep: the finished study pack and the name, type and size of the file it came from. We don't store the photos, files or text you sent. They're used to make the pack and then discarded.
• Your choice: you can turn AI processing off at any time in Account → AI processing. While it's off, nothing is sent to Anthropic and you can't make new study packs. Packs you already have stay.

Material you upload can contain personal information about you or other people. Please leave out things like health details, ID numbers, passwords and other people's private information.

AI can get things wrong. Our Terms of Use explain the limits of AI-made study material.

What other students can see

• When you send a friend request, the person you sent it to sees your display name, handle, avatar and streak, so they can decide whether to accept. You see theirs once they accept.
• Friends see each other's display name, handle, avatar and streak.
• Everyone racing on the same exam sees that exam's name and each racer's display name, handle, avatar, streak, and study minutes and reviews logged for that exam.
• Other students never see your email address, classes, study packs, notes, uploads, quiz results or plan.
• When you block someone, they can no longer see your profile or send you requests, and you're both removed from each other's races.

Who we share information with

We share personal information only in these situations:

• With service providers that run parts of Chomp for us: Supabase, Inc. (accounts, database and storage), Anthropic, PBC (AI processing, when you allow it), the company that hosts our servers, and the service that delivers account emails.
• With Apple and Google, when you use Sign in with Apple, Google sign-in, Google Drive or App Store purchases. Their own privacy policies cover what they collect.
• With other Chomp students, as described in "What other students can see".
• For safety and legal reasons: when we believe in good faith that it's needed to comply with the law or a valid legal request, to protect someone from harm, to investigate fraud or abuse, or to enforce our Terms, including reporting apparent child sexual exploitation to the National Center for Missing & Exploited Children, as the law requires.
• In a business transfer: if Chomp is involved in a merger, acquisition or sale of assets, your information may pass to the new owner, who must keep protecting it as this policy describes. We'll tell you before that happens.
• With your permission, in any other situation.

Every service provider that handles personal information for us is bound by contract to give it the same or equal protection as this Privacy Policy, and to use it only to provide its services to us.

We don't sell personal information, we don't share it for cross-context behavioral or targeted advertising, and we don't let other companies track you in Chomp.

Google user data

Chomp's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Google sign-in gives us your name, email address and Google account identifier, which we use only to create your account and sign you in.
• Google Drive files you pick are downloaded to our server only to make the study pack you asked for, sent to Anthropic for that purpose while AI processing is on, and then discarded.
• We don't use Google user data for advertising, don't sell it, don't use it to train AI or machine-learning models, and don't let people read it unless you ask us to (for example, when you share a file with support), it's needed for security, or the law requires it.
• You can remove Chomp's access to your Google Account at any time at https://myaccount.google.com/permissions.

How long we keep information

• Account, profile, classes, study packs, exams and study activity: for as long as your account exists. When you delete your account, they're deleted from our systems right away.
• Backups: copies in our providers' encrypted backups roll off within 30 days.
• Material you upload: not stored. It's discarded once your study pack is made. Anthropic generally deletes it within 30 days, though material flagged for breaking its usage policies can be kept longer so misuse can be investigated.
• Study pack request counts: for as long as your account exists.
• Blocks: until you unblock the person or either account is deleted.
• Reports: while we handle them, then for up to 12 months after they're closed so we can deal with repeated abuse, even if an account involved is deleted. Then they're deleted.
• Apple sign-in token: until you delete your account, when we use it to disconnect Chomp from your Apple Account and then delete it.
• Server logs kept by our service providers: generally no more than 90 days.
• Information we must keep for legal reasons, such as a legal claim: only as long as that requires.

Your choices

• See and edit your display name, handle and avatar in Account.
• Turn AI processing on or off in Account → AI processing.
• Delete study packs and exams at any time.
• Report or block people from your Squad, and unblock them in Account.
• Delete your account in Account → Delete account. This deletes the information described above and disconnects Sign in with Apple.
• Turn notifications, camera and photo access on or off in your device's Settings.
• Remove Chomp from your Apple Account under Sign in with Apple in your device's Settings, or from your Google Account at https://myaccount.google.com/permissions.

Your privacy rights

Wherever you live, you can ask us to:

• tell you what personal information we have about you, and give you a copy in a portable format;
• correct information that's inaccurate;
• delete your information;
• stop using your information for a particular purpose, where you have that right.

Depending on where you live (for example California, Colorado, Connecticut, Texas, Virginia and other states with privacy laws), these may be legal rights, and we honor them for everyone. We don't sell or share personal information for targeted advertising, so there's nothing to opt out of there. We won't treat you differently for using your rights.

To make a request, email hello@feedchomp.com from the email address on your account, or use the in-app options above. We may need to confirm it's really you first. We'll respond within 45 days, or tell you if we need more time as the law allows. A parent or legal guardian can make a request for their teen, and an authorized agent can make one for you where the law allows, with proof they're allowed to act for you.

If we turn down your request, you can appeal by replying to our decision within 60 days, and we'll answer within the time your state's law requires. If you're not satisfied with the result, you can contact your state attorney general.

Teens and children

Chomp is not for children under 13. We check age before anyone can create an account, and we don't knowingly collect personal information from children under 13. If we learn we have, we delete it. If you believe a child under 13 has given us information, email hello@feedchomp.com and we'll delete it.

Many students who use Chomp are teenagers, so everyone's information gets the care a teen's deserves:

• no ads, no selling of personal information, and no targeted advertising or profiling;
• no precise location tracking;
• friends have to accept each other before seeing anything, and anyone can be blocked or reported;
• names, handles and exam names are checked for words that aren't allowed, and reports are reviewed within 24 hours;
• study reminders stay off unless you turn them on.

Parents and guardians can email hello@feedchomp.com to ask what information we have about their teen, to have it corrected or deleted, or to have the account closed.

California residents under 18: if you've posted something in Chomp that other students can see, such as your display name, handle or an exam name, you can change or remove it yourself in the app, or ask us to remove it by emailing hello@feedchomp.com. Removal doesn't guarantee that copies other people made are gone.

How we protect information

We use safeguards designed to protect your information, including encryption in transit between the app and our servers, encryption at rest by our database provider, database rules that keep each account to its own data, restricted access to our systems, and short-lived permissions for Google Drive. No system is perfectly secure, so we can't promise information will never be accessed, disclosed or changed without permission. If a breach affects your information, we'll notify you as the law requires.

Where information is processed

Chomp is offered in the United States. We and our service providers process and store information in the United States, and service providers may also process it in other countries where they operate, with protections consistent with this policy.

Do Not Track and Global Privacy Control

Chomp doesn't track you across other companies' apps or websites, so there's no tracking for a Do Not Track signal to turn off, and we don't respond to those signals differently. Because we don't sell or share personal information for targeted advertising, a Global Privacy Control signal has nothing further to opt you out of.

Changes to this policy

We'll update this policy when our practices change, and the effective date at the top will show the latest version. If a change is material, such as collecting a new kind of information or sharing it in a new way, we'll tell you in the app or by email before it takes effect, and ask for your consent where the law requires it.

Contact us

FILL_IN (legal name of the person or company that runs Chomp)

• Email: hello@feedchomp.com
• Phone: FILL_IN (contact phone number)
• Mail: FILL_IN (mailing address: street, city, state, ZIP)