Last updated: 3 July 2026
This Privacy Policy explains what data Professor Madrid ("we", "us") collects, why, and what choices you have. It applies to the Professor Madrid mobile app and this website.
The table below lists every category of data we collect, whether it is linked to your identity, and why we collect it.
| Data | Linked to you | Why |
|---|---|---|
| Account identifiers — a unique user ID assigned at sign-in | Yes | To identify your account, treat wallet, sessions, and learning history |
| Name and email address — provided by Apple or Google at sign-in, where you allow it | Yes | To display your profile name and, if needed, to contact you about your account |
| Learning content — your chat messages with the tutor, study topics, progress, and the learning profile we build to personalise lessons | Yes | To provide and personalise the Service |
| Usage & billing data — your treat balance, purchases, and a record of which features you used and when | Yes | To operate the treats and billing system and prevent abuse |
| Voice recordings — audio you record when speaking to the tutor or during voice exercises | No | Transmitted to our server solely for speech-to-text transcription; processed immediately and never stored |
| Photos — images you take using the Street View feature | No | Transmitted to our server solely for AI scene annotation; processed immediately and never stored |
| Technical data — basic device and app information and logs | No | Security, debugging, and reliability |
We do not sell your personal data. We do not share any data with advertising networks, data brokers, or third-party marketing services. Your data is used exclusively to operate the Service as described above.
To run the Service we use trusted processors who handle data on our behalf under strict data-processing agreements. We share only the minimum data each provider needs to do its job. We do not use any advertising, analytics, or marketing platforms.
| Provider | Data shared | Purpose |
|---|---|---|
| Supabase | Account identifiers, learning content, treat balances | Database and authentication |
| Railway | Proxied AI requests (no persistent storage) | Our backend server that routes requests securely |
| OpenAI | Chat text, voice recordings (in transit only) | Generating AI tutor responses and speech |
| Google (Gemini) | Chat text, photos (in transit only) | Generating voice and contextual scene descriptions |
| Apple | Purchase receipts (via StoreKit) | Sign-in and in-app purchase verification |
Voice recordings and photos sent to AI providers are used solely to produce your in-session results. We do not authorise these providers to use your content to train their models where an opt-out is available to us.
Before any of this happens, the app itself shows you a dedicated in-app screen explaining exactly what is sent and to which provider, and requires your explicit tap-to-agree before you can continue — this is not something you only learn about by reading this policy.
This website uses only essential cookies/local storage needed to remember that you have seen our cookie notice and to load fonts. We do not use advertising or cross-site tracking cookies on this site. The mobile app does not use advertising trackers or analytics SDKs.
We keep your account data while your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Voice recordings and photos are never stored — they are discarded immediately after processing. You can delete your account and all associated data at any time directly from the app (Profile → Delete My Account) or by emailing privacy@professormadrid.com.
API keys and AI requests are handled by our server, not stored in the app, and traffic is encrypted in transit. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, email privacy@professormadrid.com. You also have the right to complain to your local data-protection authority.
The Service is not directed to children under 13 (or the minimum age of digital consent where you live). We do not knowingly collect data from children below that age. If you believe a child has provided us data, contact us and we will delete it.
Our providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards for such transfers.
We may update this policy from time to time. We will update the "Last updated" date and, for material changes, notify you in the app where appropriate.
Questions about privacy? Email privacy@professormadrid.com.