Privacy Policy

Num8ers at ib.num8ers.com is operated by Numbers Institutes and Education LLC. This policy covers the learning platform and its account, subscription and AI Tutor features.

• Account information: your name, email address, sign-in method and account status. Email/password accounts store a password hash, not a readable password.
• Learning activity: course and topic progress, practice and flashcard sessions, saved questions, likes, comments and images you choose to post.
• AI Tutor activity: messages, replies, the learning content associated with a conversation, working photos you attach, request usage and error/support references.
• Billing information: plan, subscription status and payment-provider references. Stripe handles payment-card entry; our application does not collect your full card number through its own forms.
• Technical information: session identifiers, security/operational logs and first-party page-view analytics. Our analytics uses hashed browser/session identifiers; hosting and security logs may also contain IP addresses and device/request information.

Google sign-in is optional. If you choose it, Google supplies a unique account identifier, your name, email address and email-verification information. We verify the sign-in response and use this information to create or recognise your Num8ers account. An existing email/password account requires its password before linking.

We store the Google account identifier with your account. We do not request access to Gmail messages, Drive files, contacts or calendars. We do not store your Google password, and this sign-in flow does not store Google access or refresh tokens. Profile photographs supplied in a sign-in response are not stored by this integration.

Google receives browser information when its sign-in service loads and operates under Google’s Privacy Policy. You can manage Num8ers access in your Google Account connections. Removing Google access does not itself delete your Num8ers account or cancel a subscription; contact us for account deletion or linking help.

We use information to authenticate you, save and synchronise learning, deliver purchased access, respond to support requests, process payments, generate Tutor replies and maintain platform security and reliability. Applicable grounds may include providing the service you request, consent where required, legitimate operational interests and legal obligations.

Your display name and comments may be visible to other people who can access the relevant discussion. Do not post private details in comments or upload information about another person without permission.

Using AI Tutor sends your relevant messages, selected conversation context, learning material and attached working photos to OpenAI for processing. Avoid including sensitive personal information in a question or photograph. The Google identity token is used for authentication, not included in Tutor prompts.

Other service providers include Google for sign-in, Stripe for payments and Liquid Web for the intended hosted platform. Hosting, email, security and support providers may process information necessary to operate the service. Providers may process information outside your country; applicable transfer requirements must be respected.

We do not sell Google sign-in data or use it for targeted advertising. We disclose information where necessary to provide the service, investigate misuse, comply with applicable legal obligations or protect users and the platform. We do not use this Google sign-in integration to access unrelated Google services.

Session and CSRF cookies support secure login. Browser storage keeps guest learning progress and application preferences. First-party analytics helps us understand platform usage. Google and Stripe may use their own cookies or related technologies when you use their features. Clearing browser storage can remove unsynchronised guest progress; blocking essential cookies may prevent sign-in.

Account, learning and conversation records are retained while needed to provide the service and handle support, security and applicable legal requirements. Unused Tutor working-photo uploads are scheduled to expire after 24 hours. Photos attached to saved messages remain with the conversation until its removal or an applicable retention action; they do not automatically expire after 24 hours. First-party page-view analytics is scheduled for pruning after 13 months.

Backups, payment/audit records and operational logs can have separate retention requirements. Deleting an account or conversation may not immediately remove every backup copy or record we must retain. We use access controls, password hashing, authenticated private-photo access and deployment security measures. No service can guarantee absolute security.

You can update your profile and manage available subscription settings in your account. To request access, correction, export or deletion of your personal information, or to raise a privacy concern, email [email protected]. We may verify your identity and explain any information that must be retained. Available rights and exceptions depend on applicable law.

Num8ers supports IB learners, including young people. If a learner cannot provide valid consent or enter an agreement independently under applicable law, a parent or guardian should be involved. Parents and guardians can contact us about a young learner’s information.

We will update this page when our practices change. Material changes to how Google information is used will be disclosed and any required consent requested before that new use. See also our Terms of Service.