Privacy Policy

1. Who we are and what this covers

This Privacy Policy describes how Tummel ("Tummel," "we," "us," or "our") handles personal information when you use tummelai.com, Tummel accounts, and the related study, billing, sharing, and email features (the "Service"). It does not cover websites or services that have their own privacy policies.

Questions or privacy requests can be sent to support@tummelai.com.

2. Information we collect

• Account and profile information. Email address, authentication identifiers, account dates and status, education level, field of study, study goals, unit preferences, and accessibility or display preferences.
• Study content. Prompts, conversations, images, uploaded files and extracted text, notes, courses, exam schedules, flashcards, practice sets, tests, answers, scores, feedback, learning patterns, and other material you choose to create or submit.
• Billing information. Plan, trial and renewal dates, subscription status, promotion or referral information, and Stripe customer or subscription identifiers. Stripe collects and processes payment-card details; Tummel does not store full card numbers.
• Email information. Email preferences, consent timestamps, course reminder settings, delivery status, and provider identifiers. Optional product updates and exam reminders default off.
• Usage, device, advertising, and security information. A random anonymous browser identifier, hashed IP address, session and request identifiers, pages and features used, timestamps, outcomes, quotas, model and token usage, approximate cost, referral attribution, Reddit click identifiers and campaign parameters, and security or abuse signals. If Reddit ad measurement is active, Reddit receives page visits and the completion of a free solve or new-account signup, together with the IP address, user agent, source URL, conversion identifier, and available Reddit click identifier. For a completed signup, Reddit also receives a one-way SHA-256 hash of the canonicalized account email and Supabase user ID. By default, PostHog receives sanitized page routes, marketing button labels, campaign attribution, and ordinary request information in cookieless mode so it can produce aggregate website measurements using a daily rotating privacy hash. If you allow optional account-linked product analytics, PostHog also receives a pseudonymous browser or account identifier, feature events, broad outcomes and timing, plan or billing status, and ordinary browser or device properties attached by its software. PostHog may receive the IP address and referring-site information involved in delivering an analytics request. Our hosting and infrastructure providers may also process ordinary request and log information such as IP address, browser headers, and error data.
• Public shares. If you create a public share link, we store the shared snapshot, its link token, and basic view or referral events. Anyone with an active link may be able to view that snapshot until you revoke it.

3. How we use information

• Provide, personalize, maintain, and troubleshoot the Service.
• Generate tutoring responses, practice material, explanations, study notes, and learning insights.
• Remember your work and learning preferences when you ask us to.
• Authenticate accounts, process subscriptions, apply limits, and prevent fraud or misuse.
• Send required account messages and the optional messages you enable.
• Measure aggregate page visits and marketing interactions in PostHog's cookieless mode so we can understand the website funnel and improve Tummel.
• With your permission, link pseudonymous page and feature use to a browser or account so we can better understand the product funnel.
• Measure and optimize Tummel's Reddit advertising by attributing page visits, completed free solves, and completed new-account signups.
• Maintain necessary operational records for quotas, billing, security, reliability, and abuse prevention whether or not you allow optional PostHog analytics.
• Comply with law, enforce our Terms, and protect users, Tummel, and others.

4. AI processing

Tummel sends the prompts, relevant conversation context, and attachments needed for an AI feature to OpenRouter. OpenRouter routes requests to third-party model providers selected by Tummel. Those providers may process prompts, outputs, images, or extracted document text to produce a response. Provider availability and the models Tummel uses can change.

OpenRouter states that it does not use inputs or outputs to train its own models, but individual model providers have different logging, retention, and training practices. Do not submit information that is highly sensitive, regulated, confidential to someone else, or unnecessary for your study request. See OpenRouter's privacy policy and provider-logging information for more detail.

Anonymous prompts and results are not added to a Tummel account or learning history. Tummel still processes limited anonymous identifiers, quota records, and operational analytics to provide and protect the anonymous preview.

5. When we disclose information

We disclose information only as needed for the purposes above, including to:

• Infrastructure and authentication providers, including Vercel and Supabase.
• AI providers, including OpenRouter and the model provider that handles a request.
• Payment and email providers, including Stripe and Resend.
• Website and optional product analytics, including aggregate cookieless PostHog measurement by default and pseudonymous account-linked analytics only after you choose to allow it. The configured PostHog service processes this information in the United States.
• Advertising measurement, including Reddit through its Pixel and Conversions API, unless Global Privacy Control or your stored advertising opt-out is active.
• Login providers, such as Google or Microsoft, when you choose that login method.
• Other people, when you create a public share or direct us to share information.
• Authorities or transaction parties, when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or complete a financing, sale, merger, or similar business transaction.

We do not sell personal information. We use Reddit's measurement tools only to attribute and optimize Tummel's own advertising, and provide the opt-out described below.

6. Cookies and browser storage

Tummel uses cookies and browser storage that are necessary or useful for authentication, security, anonymous limits, referrals, saved display choices, feature preferences, and first-party campaign attribution. The anonymous browser cookie lasts up to one year. A referral-capture cookie lasts up to 30 days. Authentication cookies have durations set by Supabase and the session configuration.

By default, PostHog measures aggregate page visits and marketing interactions in cookieless mode. This mode does not use cookies, local storage, or session storage and does not identify a browser or account. PostHog derives a short-lived privacy hash from request information to group events for the same site during a single day; the hash changes daily.

If you choose Allow linked analytics, PostHog may use first-party local browser storage for a pseudonymous analytics identifier and link product events to that browser or account. Tummel also stores your choice and the corresponding pseudonymous identifier in first-party, HTTP-only cookies for up to one year. For signed-in users, we save the choice in the account's settings so it can be respected by product events recorded on the server. Choosing Use anonymous only returns PostHog to cookieless aggregate measurement and resets the local PostHog identity.

Tummel configures PostHog without automatic click capture, session replay, console capture, performance capture, or automatic exception capture. We send manual, sanitized page and feature events; we do not send prompts, answers, conversation text, uploaded file contents, file names, email addresses, or raw public-share tokens to PostHog. Campaign parameters may be sent as attribution fields, but other page query strings are not included in PostHog pageview URLs.

Reddit measurement is on by default. Tummel stores a validated Reddit click identifier and campaign parameters in a first-party, HTTP-only attribution cookie for up to 30 days. Browser Pixel and server Conversions API events use the same random conversion identifier so Reddit can deduplicate them. Automatic form-field or advanced browser matching is disabled. Tummel never sends Reddit prompts, answers, conversation text, uploaded files, course data, detected mistake patterns, or verification results.

You can opt out of Reddit advertising measurement in Settings or the site footer. Tummel also detects Global Privacy Control before loading the Reddit Pixel. When either signal is active, we do not load the Pixel, persist Reddit attribution identifiers, or send Reddit conversion events, and we delete previously stored Reddit attribution state in that browser. Browser "Do Not Track" signals are not consistently defined, so the Service does not respond differently to them.

7. Retention and deletion

We generally keep account and study information while your account is active so the Service can remember your work. You can delete individual chats, sets, notes, memories, learning insights, shares, and reminder schedules where the Service provides those controls. You may request account deletion by emailing us from the address connected to your account.

When an account is permanently deleted, user-owned product data is deleted and user-linked records in Tummel's first-party analytics ledger are anonymized. We may retain limited records when reasonably necessary for security, fraud prevention, legal claims, tax or accounting duties, payment disputes, and audit integrity. Information may remain temporarily in protected backups, and vendors may retain information under their own policies or legal duties. Referral captures expire after 30 days. The anonymous browser cookie expires after one year, while related security, quota, and analytics records may be retained longer when reasonably necessary for those purposes.

Cookieless aggregate and optional account-linked PostHog events are retained under Tummel's PostHog project settings and the service terms that apply to our account. Returning to anonymous-only measurement stops future account-linked capture but does not automatically erase events already collected. You may ask us to delete or de-identify prior account-linked analytics associated with you by contacting us.

Reddit advertising events are retained under Reddit's advertising terms and the settings that apply to Tummel's account. Opting out stops future Reddit measurement from the browser or signed-in account but does not automatically erase events already received by Reddit.

8. Your choices and requests

• Update profile and accessibility choices in Settings.
• Allow or turn off optional account-linked PostHog product analytics in Settings at any time. Turning it off resets the local PostHog identity, removes Tummel's analytics-identity cookie, saves the choice for a signed-in account, and keeps future website measurement in anonymous cookieless mode.
• Opt out of Reddit advertising measurement in Settings or the footer. Global Privacy Control is honored automatically.
• Turn optional product updates and exam reminders on or off independently.
• Delete or revoke supported study items and public shares in the Service.
• Ask to access, correct, export, or delete personal information by emailing support@tummelai.com. We may need to verify your identity before acting.
• Cancel a paid subscription through Settings and Stripe's Billing Portal. Account deletion does not by itself cancel an active subscription.

Depending on where you live, local law may provide additional rights. We will not discriminate against you for making a privacy request.

9. Security and international processing

We use technical and organizational safeguards designed to protect personal information, including access controls, encrypted connections, separation of privileged credentials, and row-level database controls. No internet service can promise absolute security. Tummel and its providers may process information in the United States and other countries where they operate. The PostHog project used for aggregate website and optional account-linked analytics, and Reddit's advertising services, may process information in the United States.

10. Children

Tummel is not directed to children under 13, and you must be at least 13 to use the Service. If you are under the age of legal majority where you live, you may use Tummel only with permission from a parent or legal guardian. If we learn that we collected personal information from a child under 13, we will take reasonable steps to delete it. A parent or guardian can contact us at support@tummelai.com.

11. Changes to this policy

We may update this policy as Tummel or the law changes. We will change the effective date above and provide additional notice when a change is material. Your continued use after an update means the revised policy applies to future handling of information, subject to applicable law.