Privacy Policy

The short version

• We collect what Corvano needs to work: your account, what you study, and how you use it.
• We never sell your information, and we never use it for targeted advertising. Ads on the free plan are never personalized.
• When you use an AI Feature, the text you give it goes to AI model providers to write the answer, without your name, email address or account ID. For tutoring and generation we require providers that don't keep it or train on it. Some automated checks use a provider that isn't covered by that promise (section 5).
• Some content is checked automatically by AI, and a check can remove a set or close an account. A person reviews any decision if you ask (section 4).
• You can download your data or delete your account from your account page at any time.
• Corvano is for people 13 and older. We protect every account as if it belongs to a teenager. If you're under 18, go through this policy with a Parent.

1.Who we are

Corvano is operated by Havra LLC, a Florida limited liability company ("Havra", "we", "us"). We decide how and why your information is used, which makes us the "controller" (or "business") under privacy laws, except where we act for a school as section 15 explains. You can reach us about anything in this policy at legal@corvano.app.

2.Who Corvano is for

Corvano is for students aged 13 and older. We don't allow anyone under 13 to create an account, and we don't knowingly collect personal information from children under 13. Section 14 explains what happens if we learn that a child under 13 has signed up.

We ask whether you are 13 or older, not your date of birth, so we can't reliably tell a teenager from an adult. Instead, every account gets the protections we would give a 13-to-17-year-old: no personalized ads, no sale of information, no targeted advertising, no precise location, and private sets by default.

3.What we collect

3.1 Information you give us

• Account details. The name you want Corvano to show, your email address and your password. Your password is stored only as a one-way hash by our sign-in provider; nobody at Corvano can read it. If you use "Continue with Google" where it is offered, Google shares your name, email address, Google account ID and profile photo link with us. If you use "Sign in with Apple" in a Corvano app, Apple shares an Apple account identifier and an email address (which may be a private relay address Apple creates). If you choose to sign up or sign in with a phone number instead, we keep that number on your account: it is how you sign in.
• Sign-up choices. Your confirmation that you are 13 or older, the date and version of the Terms you accepted and how you accepted them, and whether you asked for study tips and test-date reminders by email.
• Study preferences. What you want from Corvano first, the exam you're preparing for, your target test dates and scores, your daily goal, your practice-exam timing preference (for example, time and a half; we never ask why), your time zone, and display settings such as dark mode.
• Your Content. Sets and cards you create or import (text, images and audio you add), folders, the visibility you choose for each set, and set passwords (stored only as a hash). Notes, files and photos you give our AI Features to make sets or study guides, and the names of files you upload for study guides. Messages you send to Corbie and the other AI tutors. Answers you type, including written answers to practice questions. Reports, ratings and comments you send us about questions or sets.
• Classes. If you create or join a Class: its name, description, folder labels and announcements, its members and their roles, when each member joined, whether each member chose to appear on the Class leaderboard, and Class assignments and their status.
• Payment details. If you buy a plan, our payment processor, Stripe, collects your card and billing details on its own checkout page. We receive your name, email address, the card's brand, last four digits, expiry date and country, a card "fingerprint" (a code that recognizes the same card again without revealing its number), and your payment and subscription history. We never receive or store your full card number.
• Parent payment links. If you ask a Parent to pay, the plan you chose and when the link was made, opened, used and expires (the link itself is stored only as a one-way hash). When a Parent pays through it, Stripe collects their card and billing details as described above, and we keep when they accepted our Terms, which version they accepted, and a keyed hash of the network they used (never the address itself). The payment page shows them nothing about you.
• Invites. If you invite friends: your invite code; the accounts that joined with it and whether each one confirmed their email, practiced enough to earn the reward or paid (never what they study); the rewards given; and, for each friend's sign-up, a keyed hash of the network it came from, used to check for self-invites.
• Tutor or school membership. If you are invited to or join a Partner's program: the email address the Partner invited (if it invited you by email), which organization and group you joined or asked to join, the invitation you used, and when you agreed to the sharing the join screen described (section 15).
• Partner organizations. If you apply for or run a Partner account: your organization's name, website and logo, your name, role, email address and (if you give it) phone number, what you tell us in the application, your staff members' names, email addresses and roles, two-step verification settings, the billing contact, purchase-order numbers, and the agreements your organization accepted (with the signer's name, title and email and a keyed hash of their network). If you use Exam Studio, which questions you previewed and when.
• Messages to us. Whatever you include when you email us.

3.2 Information created as you use Corvano

• Study activity. The questions and cards you study, your answers, whether they were right, how long you took, practice sessions, practice exams (answers, timing, answer changes, which question was on screen and when, pauses), scores and score estimates, skill mastery, streaks, hearts, your spaced-repetition schedule, Match and other study-game results, and sets you save or copy.
• Plan and usage records. Your plan and its status, renewal and trial dates, free Plus time you received and passes you bought with their start and end, offers you used, your AI allowance use (which feature, which model, how much it cost), coupon use and hearts refills.
• Security and integrity records. With each practice question we serve, a keyed hash of your IP address and of your browser's identifier string (a scrambled code, not the address itself), used to spot automated copying of our question bank. The networks your account is used from, recorded the same way (a keyed hash of the IP address, never the address), at most once a day, used to enforce account closures and network bans. A log of practice-exam access events, used to protect exam integrity. Short-lived keyed hashes used to limit repeated attempts (for example, wrong Class codes). Records of our automated checks (for example, the score an automated grader gave, or a content check's verdict and its stated reasons for a set), without the content they checked (for a closure, we also keep the content that led to it, as section 11 explains).

3.3 Information collected automatically

• Device and connection data. Like every website, our servers receive your IP address, browser and device type, the pages you request, the referring page and the time. Our hosting and database providers keep these request logs briefly for security and to keep the service running. We use the approximate region your IP address indicates (country and, in some countries, state or province) to decide whether analytics and ads may load (sections 6 and 7); we don't store that location.
• Cookies and browser storage. Small files and stored values that keep you signed in and remember your settings. See section 10.
• Analytics events. Coarse, pseudonymous records of which features are used. See section 7.
• How you found us. If you arrive through a link tagged with campaign labels (utm_source, utm_medium, utm_campaign, utm_content, utm_term) or an ad click identifier (Google's gclid, gbraid or wbraid, or Reddit's rdt_cid), we keep those values, the time and the kind of page you landed on in a first-party cookie, and if you create an account we store the first and the most recent with it. We use them only to count which of our own campaigns bring people who sign up and subscribe. We keep them on our own servers. The campaign labels also appear in the page address our analytics records when you land on a tagged link (section 7); ad click identifiers never do. Neither is ever sent to an advertising platform. If your browser sends Global Privacy Control, or we identify you as being in New York, we don't record them.

3.4 Information from others

• From a Partner: the email addresses it invites and the groups it puts students in.
• From a Class creator: nothing about you until you join with a Class code.
• From Google or Apple: the sign-in details described in section 3.1.
• From Stripe: payment confirmations and the card details described in section 3.1.

3.5 What we don't collect

We don't ask students for their date of birth, school, grade, home address, photo, contacts or government ID (if you join through your school, we know which school gave you your Seat). A phone number is optional: we have one only if you choose to sign in with it, and we use it only to text you sign-in codes and security notices about your account and, as a keyed hash, to give each person one free trial or free week (section 11), never for marketing. We don't collect precise location: our website tells your browser that it may not use location, the camera or the microphone at all, and the Corvano apps don't ask for location, camera, microphone, photos or contacts permissions. We don't ask for sensitive information such as health, religion or ethnicity. Please don't put personal or sensitive information about yourself or anyone else into your sets or AI messages.

4.How we use it

We use information to:

• Provide Corvano: run your account, save your sets and progress, pick practice questions at the right level, schedule reviews, score practice exams, run Classes and study games, and power the AI Features you choose to use.
• Handle plans and payments: start, renew and cancel Subscriptions, sell one-time passes, run free trials, offers, Plus Week and invite rewards, stop the same card from being used for repeat free trials, stop the same person from claiming a free trial, Plus Week or a friend's free week twice, and email the payer a reminder before a free trial's first charge.
• Apply plan limits fairly: measure AI allowance use, hearts, coupons and daily limits.
• Keep Corvano safe and fair: protect accounts, stop scraping, cheating on practice exams, fraud and abuse, filter unsafe AI output, check content against our Community Guidelines, investigate reports, and enforce closures and network bans.
• Talk to you: send account emails (confirming your email, password resets, security and billing notices, and notices about changes to our Terms or this policy) and, only if you asked for them at sign-up, study tips and test-date reminders.
• Offer you a plan: show you offers and discounts in Corvano, for example after a test date, or a discount on your own plan after you leave a tutoring company's Seat. We never base an offer on a Seat from a school.
• Improve Corvano: look at pseudonymous, aggregated usage and at the quality of AI results (for students with a school's Seat or a School-managed Account, only as section 15.4 allows), and use de-identified answer statistics (for example, how often each question is answered correctly and how long it takes, including answers to unscored try-out questions in SAT practice exams) to calibrate the difficulty of our questions (including new try-out questions) and our score scales, to operate and improve Corvano, and to measure how well it works, and never to train, tune or develop AI systems.
• Measure our own campaigns: count which tagged links lead to sign-ups and subscriptions (section 3.3), on our own servers only.
• Show ads on the free plan: always non-personalized (section 6).
• Meet legal duties: comply with the law, answer lawful requests, report apparent child sexual exploitation where the law requires, enforce our Terms and defend legal claims.

4.1 What we never do

• Sell your personal information, or "share" it for cross-context behavioral advertising.
• Use your information for targeted advertising, or let advertisers build a profile of you through Corvano.
• Send information about how you found us or what you bought to an advertising platform for conversion tracking, ad targeting or measuring our campaigns. (That information goes outside Corvano only to our own Google Analytics property, section 7, which is not linked to Google's advertising products. On the free plan your browser contacts Google to load non-personalized ads, as section 6 explains.)
• Use Your Content or study data to train generative AI models. (The aggregate, de-identified statistics we use are never used to train, tune or develop AI systems.) We also require the providers that handle our tutoring and generation requests not to keep that content or train on it; section 5.2 explains the one exception, automated checks.
• Use information from a school Seat for anything other than providing, securing, supporting and improving Corvano for that student and that school, or as de-identified data under the school's agreement (section 15).

4.2 Automated processing and decisions

Corvano uses automated processing to personalize your studying: choosing question difficulty, routing adaptive practice exams, scheduling card reviews, estimating scores, grading written practice answers with AI, and small decisions such as whether a card would be clearer with a picture. These results only shape your practice. They are estimates, they have no effect outside Corvano, and you can ask us to look again at any result you think is wrong.

Content checks and account closures. When a set is saved, imported, generated, copied or reported, an automated check reads its text (title, description, tags and cards, not its pictures or audio) for content that breaks our Community Guidelines. Class text and announcements are checked before members see them. If a set seems to break the rules, it is hidden from others at once and a second, more careful AI model reviews it. That review puts the set back, removes it, or, for serious or repeated breaks, closes the account. These decisions are made by automated systems, and a person may not review them before they take effect. A closed account can't be used, its sets are no longer shared, and the networks it was used from may be blocked. We keep a record of each decision and the model's stated reasons, without the set's text (for a closure, we also keep the content that led to it, as section 11 explains). If you think a decision about you is wrong, email support@corvano.app and a person will review it. If we got it wrong, we restore the account and its sets.

5.AI Features

Corvano's AI Features include Corbie and the other tutors, the set writer (from notes, files, photos or a prompt), hints, explanations, AI-built tests, grading of written answers, card pictures, set checks and study guides. They run only when you use them, except the content checks described in section 4.2, which run when content is saved, shared or reported.

5.1 What is sent

To answer, a model needs the material in front of you: your message and the recent conversation, the question or cards you're studying, your answer, the text taken from a file you upload, or the photos you upload to make a set. We don't send your name, email address or any account identifier with these requests. Several features automatically hide email addresses, phone numbers and street addresses in what you type before it is sent, but this doesn't catch everything (it doesn't remove names, for example), so please don't include personal information at all.

Files and photos you give the set writer are read in memory and not stored. A file you upload for a study guide is stored privately only until its text has been read, then deleted; we keep the guide itself, its title and the file's name.

5.2 Who processes it

• Tutoring, generation and second-stage content review. Requests (including the second, more careful automated review of a set flagged by a first check, section 4) go through OpenRouter, a US service that routes each request to a company hosting the AI model (today, mainly DeepSeek models run by independent hosting providers). On every one of these requests we tell OpenRouter to use only providers that do not store the content or use it for training, and only endpoints with zero data retention. Those providers may run the model in the United States or in other countries (see our Subprocessors page). If no provider meets those conditions, the request is not sent anywhere else.
• Automated checks. Some automated checks use Jev, a decision model from TypeSafe, reached through OpenRouter: for example, deciding how the tutor should answer a message, whether a written answer can be marked without further review, whether a card needs a picture, which parts of an uploaded document matter, and the first screen of sets for content that may break our rules. These checks receive the text they need: your message to a tutor (up to 1,500 characters) and the tutor's last reply, the card or set text involved (including the whole text of a set for a content check), your answer, or document excerpts. We never attach your name, email address or account ID to these requests; text you type is sent as you wrote it (section 5.1). These requests are not covered by the zero-retention setting above, so we don't make that promise for them. For students with a Seat from a school or a School-managed Account, we send this text only under written terms that bar TypeSafe from keeping it or training on it; where those terms aren't in place, these checks don't use that text.
• Molecules. When a study tool shows a molecule, we look up the compound's name or structure in PubChem, a public database of the US National Library of Medicine. Nothing about you is sent.

5.3 What we keep

We store your tutor conversations (and short AI summaries of long ones) so you can pick up where you left off, the sets, tests, guides, pictures and feedback the AI makes for you, and usage records for your allowance (which feature, which model and the cost, not your text). You can clear a set's tutor conversation, and all of it is deleted with your account.

6.Ads

The free plan on the website shows ads from Google AdSense, and offers optional rewarded ads from Google Ad Manager to refill hearts early. Paid Plans, Seats and School-managed Accounts (section 15.4) show no ads, and on those accounts the ad code is never loaded. The Corvano apps show no ads. We don't request Google ads at all for visitors we identify as being in New York, the European Economic Area, the United Kingdom or Switzerland, or when we can't tell which US state a visitor is in.

Because any user may be a teenager, every ad request Corvano makes asks Google for non-personalized ads and applies Google's teen treatment (Google's "tag for age treatment"), which turns off personalized advertising and remarketing and applies Google's protections for teens. Rewarded-ad requests are also marked as coming from a user under the age of consent and limited to restricted data processing. Non-personalized ads are chosen from the page's content and general location (such as your city, from your IP address), not from your interests or the other sites you visit.

Third-party vendors, including Google, use cookies to serve ads. When an ad loads, your browser sends Google your IP address and Google's cookies, and Google and its partners may place and read cookies or similar identifiers to limit how often you see the same ad, count views, and fight fraud and abuse. Because we ask only for non-personalized ads, Google does not use your visits to Corvano or to other sites to choose the ads you see on Corvano. You can learn how Google uses this information at "How Google uses information from sites or apps that use our services" (policies.google.com/technologies/partner-sites). You can turn off personalized advertising from Google at Ads Settings (adssettings.google.com), and from other participating ad companies at aboutads.info. Advertisers never receive your study data.

If we start showing ads in the European Economic Area, the United Kingdom or Switzerland, Google's consent message will ask for your choice first, and you will be able to change it with the "Change cookie choices" button in section 10 of this policy (the "Cookie settings" link in our footer leads there).

7.Analytics

We use Google Analytics (through Google's Firebase) to understand how Corvano is used: which pages and features people use, where they get stuck, and whether a change helped. You can learn how Google uses this information at "How Google uses information from sites or apps that use our services" (policies.google.com/technologies/partner-sites).

• What it receives: page views, reported as the kind of page (such as "a set page") rather than the address or title, with the campaign labels of a tagged link you land on (never an ad click identifier), and product events from a fixed list, such as "a practice question was answered" with its section, skill, difficulty, whether it was right and a time band, "a study mode was started", or "a plan was viewed or bought". Values are codes and ranges (for example, a score band instead of your score). It also receives your plan tier, exam and main product, and what any browser reports to Google, such as browser and device type, screen size, language, and a country and region that Google estimates from your IP address.
• How events are linked: by a random identifier that Google's software keeps in your browser, not by your account. When you buy a plan, that identifier is kept with the checkout at Stripe, and our server tells Google Analytics that a purchase of that plan happened, linked only to that identifier.
• What it never receives: your name, email address, account ID, age, anything you type, your tutor conversations, set or folder names, cards, searches, uploaded content or exact scores.
• Settings: Google signals and ad personalization signals are turned off, advertising data is redacted, and Analytics is not linked to any advertising product, so this data is not used for advertising. Google processes it for us as a service provider.
• Where it runs: only where our review found that this kind of measurement of teenagers is allowed without a separate consent step: currently the United States (except New York) and its territories, Canada (except Quebec), Australia (until December 10, 2026) and India (until May 13, 2027). Anywhere else, including the European Economic Area, the United Kingdom, Switzerland, New York and Quebec, or wherever we can't tell where you are, Corvano does not load Google Analytics at all. It never loads for students who hold a Seat from a school or have a School-managed Account (section 15.4).
• How long: detailed analytics data is kept for 2 months. After that only totals remain.
• How to opt out: turn on Global Privacy Control in your browser (Corvano then doesn't load analytics at all), block cookies for corvano.app, or install Google's Analytics opt-out browser add-on. If you tell us during setup that you are under 13, analytics stops on that device and stays off.

The Corvano apps don't include any analytics or crash-reporting software. We don't use any other analytics, session-recording or fingerprinting tools.

8.Who we share it with

We share information with service providers that process it on our behalf, under contracts that limit what they can do with it. Stripe, Cloudflare and Google also use limited data for their own fraud prevention, security and service improvement, as their own privacy notices explain. For students who hold a school's Seat or have a School-managed Account, only Cloudflare receives any of this data, for the sign-in, sign-up and password-reset check, as the Student Data Privacy Agreement describes. The full list, with where each provider works, is on our Subprocessors page.

We also share information:

• With other users, when you share a set, take part in a Class or play a study game (section 9).
• With a Partner you joined or asked to join, only what section 15 lists, while you hold or have asked for its Seat.
• With a Parent who asks about their Teen's account and whose identity we verify.
• With the person who pays for your plan. If a Parent pays through a payment link, Stripe sends them the receipts, and when they write to us from the email address a receipt went to, we may confirm the plan and its status to them (for example, to cancel it).
• With Apple, if you use Sign in with Apple, as Apple's own policies describe.
• For legal and safety reasons: when we believe in good faith it's needed to comply with the law or a valid legal request, to report apparent child sexual exploitation to the National Center for Missing & Exploited Children where the law requires, to protect anyone's safety, to prevent fraud or abuse, or to enforce our Terms.
• In a business transfer: if Havra is involved in a merger, acquisition, financing, reorganization or sale of assets, your information may move to the new owner, who must keep honoring this policy for the information it receives and may change how it uses that information only as section 19 allows. Information from a school Seat moves only on the terms of the school's agreement with us.
• With your permission, in any other case.

When you import a set from a Quizlet link, our server requests that page from Quizlet; Quizlet sees our server, not you.

9.Shared Sets, Classes and study games

Every new set is private. You can change a set's visibility at any time:

• Public: other signed-in Corvano users can find it in search and similar-set suggestions, read it, study it, save it, copy it into their own account and export it. They see the set and your display name (or "A Corvano member" if you left it blank).
• Unlisted: anyone signed in who has the link can open it, but it never appears in search or suggestions.
• Password-protected: only people who have the link and the password can open it.
• Shared with a Class: members of that Class can open it.

Study sets on Corvano can be opened only by signed-in users. You can make a set private again or delete it at any time, and it stops being visible to others straight away. Copies that other users made, exported or downloaded for offline study while they could see it stay with them. Don't put personal information in a set you share.

Classes. A Class's creator and co-teachers see members' display names, roles, when they joined and their progress on Class assignments (counted from when they joined), but not members' email addresses. Members see the Class, its sets and its announcements. If you choose to appear on a Class leaderboard, other members see your name and weekly activity there.

Match and other study games. Other players who can see a game may see your first name and last initial (or "A student") and your results.

10.Cookies and similar tools

Cookies are small files a website stores in your browser. Corvano also uses your browser's local storage, session storage, a browser database and cache. Here is what we use:

You can block or delete cookies in your browser settings. If you block essential cookies you won't be able to stay signed in. If you are in the European Economic Area, the United Kingdom or Switzerland, the "Change cookie choices" button below reopens Google's consent message. Global Privacy Control turns off our analytics and the campaign cookie in that browser. Ads are non-personalized for everyone, whether or not your browser sends Global Privacy Control. There is no common standard for browser "Do Not Track" signals, so we don't respond to them separately.

Change cookie choices (EEA, UK and Switzerland)

11.How long we keep it

• Your account and content: for as long as your account exists. If an account has been unused for three years, we may delete it after emailing a warning.
• When you delete your account: your profile, sets, cards, progress, practice history, tutor conversations, study guides, Class memberships, usage records, free Plus time, invite code and invite records, payment links and how-you-found-us records are deleted immediately, along with the files you uploaded. If a file can't be removed at that moment because of a technical problem, we remove it as soon as we find it. Any Paid Plan is cancelled at once. Announcements you posted in a Class you didn't own stay in that Class without your name. If you hold or held a Seat from a school, the school's records about you (your Seat history and your assignment and Exam Studio results) are kept for the school, separated from your deleted account, and deleted under the school's agreement with us.
• Payment records: invoices, receipts and payment history are kept by Stripe and in our billing records for as long as tax, accounting and anti-fraud rules require.
• Consent records: a record of each acceptance of our Terms and of each consent to an automatic renewal (who accepted, how, when, which version, and for a plan, the plan, price and billing period, plus the Parent's acceptance on a payment link), and of each arbitration opt-out, rejection of a change to section 19 of the Terms, or notice that a Teen's agreement is disaffirmed, is kept while your account exists and, after the account is deleted or the plan ends (whichever is later), for 5 years, and then deleted, so that we can show what was agreed. After an account is deleted, a record that isn't tied to a payment identifies the person by a keyed hash of the email address rather than the address itself. It holds nothing about what you study. If we delete an account because its user is under 13, we keep only what the law requires for a Paid Plan and delete the rest.
• Security and integrity records: the keyed hashes of IP addresses and browser identifiers that come with served practice questions, practice-exam access logs and related exam-integrity records, card fingerprints used to prevent repeat free trials, automated-check results and decision records, and records of moderation and account actions are kept after an account is deleted, without your name or email (some keep the deleted account's random ID), for as long as they are needed to protect Corvano against scraping, cheating and fraud and to enforce closures. The hashed networks recorded for an account are deleted with the account, and otherwise 180 days after they were last seen; a network ban already in force stays until it expires or is lifted.
• Text sign-in records: when we text you a code, we keep a keyed hash of the number (not the number itself) with the time, so we can limit how many texts one number gets. Those records are deleted within a day. A sign-in security log of the same keyed hashes is kept for 180 days, then deleted.
• One free trial or free week per person: when an account starts a free trial, or receives Plus Week or a friend's free week, we record a keyed hash of its email address and, if it has one, of its verified phone number (normalized, so that variations of one address or number count as one). These hashes are linked to no account and hold no name, address or number, and (except for an account deleted because its user is under 13, section 14.1) it is kept after the account is deleted, like card fingerprints, so the same person can't claim the same free time again.
• Invite limits: when a friend who joined with your link deletes their account, their invite records go with it, but your account keeps a note that a reward was counted (with nothing about the friend), so yearly limits can't be reset.
• How you found us: campaign labels for as long as your account exists; ad click identifiers until 90 days after you create your account (before that they wait in a cookie for at most 30 days), then erased. Both are deleted with your account.
• Partner records: when a Seat ends, the Partner can no longer see your information, but we keep the record that you held the Seat and the Partner's activity log of Seat changes (which can include your name) while the Partner's account exists, so that the Partner's records and billing stay accurate. For a school, we delete or de-identify these records within 60 days after its plan ends (or within 120 days if the school tells us in writing that it intends to renew), and within 60 days after a school tells us a student has left; School-managed Accounts are handled as section 15.4 explains.
• Partner applications and agreements: if you applied for a Partner account or accepted a Partner agreement, the name, title, email address and phone number (if you gave one) on the application or agreement, and a keyed hash of the network it came from, stay with those records after you delete your account, so that we can show what was applied for and agreed. Agreements, and each person's acceptance of the Exam Studio Use Terms, are kept while the organization's account exists and for 5 years after it ends, and Exam Studio records (which questions each staff member previewed or served, with their name and email address) for 5 years after the person's last use of Exam Studio, or until any leak investigation or dispute about it ends if that is later, even if that person deletes their account; after that we keep only a keyed hash of the email address with the records. Applications that were declined or never approved are deleted 24 months after we receive them, or sooner if you ask at legal@corvano.app.
• Invitations: if a Partner invited your email address and you never joined, we delete the invitation 90 days after it expires or is revoked, and a school's invitation lists are deleted within 60 days after its plan ends (or when a renewal hold ends, no later than 120 days after it ends).
• Closed accounts: if we close an account, we email the reason and how to ask for a review, keep the account for 180 days so that a review can restore it, send a reminder 14 days before deleting it, and then delete it as if its user had deleted it, except the records described under "Security and integrity records" and anything under a legal hold. Until then you can ask legal@corvano.app for a copy of your sets (except content we removed for breaking the Community Guidelines, content we reported to the authorities or must preserve, and anything the law doesn't allow us to send), or for deletion. To enforce the rule that a closed user may not return (Terms section 2.5), we keep a keyed hash of a closed account's email address for 5 years (10 years after a closure for sexual content involving a minor or a credible threat), and we keep the text of the content that led to the closure, in restricted storage, for 2 years or until any dispute about it is resolved. A School-managed Account we close is handled under the school's agreement with us, not on this schedule, and none of this applies to an account we delete because its user is under 13 (section 14.1).
• Legal holds: if the law requires us to keep information (for example, content we have reported to the National Center for Missing & Exploited Children, which federal law requires us to preserve for 1 year, or records covered by a government preservation request or a legal hold), or we need it to establish or defend a legal claim, we keep only that information, in restricted storage, only for that purpose and only as long as required, even if the account is deleted.
• Backups: deleted data can remain in our database provider's encrypted backups until they expire on their regular schedule. We use backups only to recover from failures, and if one is ever restored we delete your data again. To make that possible we keep a deletion record (a keyed hash of the account's ID and the time it was deleted), which holds nothing else.
• Server logs: kept by our hosting and database providers for short periods, generally days to weeks.
• Analytics: detailed data for 2 months, then only totals (section 7).
• Emails with us and privacy requests: as long as needed to deal with them, and records of privacy requests for 24 months.
• Information about a child under 13: deleted as soon as we learn of it, except anything the law requires us to keep.

12.How we protect it

• Every connection to Corvano is encrypted (HTTPS), and our providers encrypt stored data.
• Database rules make sure an account can read only its own private data. Uploaded files are private and opened only through links that expire within an hour.
• Passwords are stored only as one-way hashes. Card numbers are handled only by Stripe, a PCI-certified payment processor.
• IP addresses in our security records are stored as keyed hashes, and we never attach your name, email or account ID to AI requests.
• Partner owners, admins, billing contacts and Exam Studio users must use two-step verification.
• Access to production systems is limited to the people who run Corvano at Havra and the service providers listed on our Subprocessors page, under written confidentiality and data terms, and only to run and fix it.

NO SYSTEM IS PERFECTLY SECURE. If a breach affects your information, we will notify you and the authorities as the law requires. If you find a security problem, please report it to legal@corvano.app.

13.Your rights and choices

We give these rights to every user, whether or not a privacy law in your state or country requires it:

• Access and portability. "Download my data" on your account page gives you a copy of your account details, profile, plan, practice history, and your sets and cards, as a file. Each set can also be exported from its own page. For a complete copy of everything tied to your account, email us and we'll send it, except content we removed for breaking the Community Guidelines, content we reported to the authorities or must preserve, and anything the law doesn't allow us to send.
• Correction. Change your name and study preferences in your account, edit your sets at any time, or ask us to fix anything else.
• Deletion. "Delete my account" on your account page (in the website or a Corvano app) deletes your account and data as section 11 describes. You can also delete individual sets and study guides, and clear a set's tutor conversation.
• Email choices. Study tips and reminders are sent only if you asked for them, and each one will include a way to stop them. Account, security, billing and legal emails can't be turned off while you have an account.
• Opting out of sale, sharing, targeted ads and profiling. We don't do any of these, so there is nothing to opt out of. If your browser sends Global Privacy Control, we treat it as a request to opt out for that browser, and it also turns off our analytics there.
• Withdrawing consent. Where we rely on your consent, you can withdraw it at any time.
• Reviewing automated decisions. You can ask a person to review any automated decision about you (section 4.2).

13.1 How to make a request

Email legal@corvano.app from the address on your account, saying what you'd like. To protect your account, we'll confirm the request through that email address and may ask for a little more information. We answer within 30 days; if we need longer, we'll tell you why and when to expect an answer. Requests are free.

Authorized agents and Parents. Someone can make a request for you if they have your signed permission or a power of attorney, and we may ask you to confirm your identity directly. A Parent can make requests for their Teen's account after we verify they are the Parent.

Appeals. If we decline your request, you can appeal by replying to our answer or emailing us with "Appeal" in the subject within 60 days. We'll respond within 45 days and explain our decision. If you're still unhappy, you can contact your state attorney general or your local data protection authority.

No discrimination. We will never charge you more, give you a worse service or deny you anything for using your privacy rights. (Deleting your account ends any Paid Plan at once, without a refund for the rest of the period, as Terms section 5.11 explains. That rule applies to every deletion you ask for and isn't a penalty for using your rights. When a school's deletion of a School-managed Account cancels a plan you or a Parent paid for, we refund the unused part, as Terms section 3.3 says.)

14.Teens, children and Parents

14.1 Children under 13

Corvano is not meant for children under 13 and is not directed to them. Signing up requires confirming that you are 13 or older, and we ask again when an account is set up. If someone tells us during setup that they are under 13, we delete the account and what they entered, we turn analytics off on that device, and for at least 30 days that browser remembers that sign-up was refused. If we learn in any other way that a child under 13 has an account, we delete the account and its information (including the security records we keep for other deleted accounts, except payment records the law requires, the record that lets us delete it again after a backup restore, a network ban already in force (stored as a keyed hash, never the address), and anything the law requires us to preserve; we don't keep the child's email address, even as a hash), cancel any Paid Plan and refund every payment made for that account.

Parents: if you believe your child under 13 has used Corvano, email legal@corvano.app (subject "Parent request: child under 13") with the email address they used, and we'll delete the account.

14.2 Teens (13 to 17, or older where the age of majority is higher)

Because any account may belong to a Teen, every account has these protections:

• Sets are private by default. There are no public profiles, followers or direct messages, and users can't comment on each other's sets. Class announcements go from a Class's creator to its members and are checked before they are shown.
• No personalized ads, no targeted advertising, no sale or sharing of personal information, and no profiling for advertising.
• No precise location, and no camera or microphone access.
• AI tutors are instructed to stay on schoolwork, and automated safety filters check messages and replies in the set tutor, the practice tutor and the practice-exam tutor.

Removing what you posted: you can delete any set you made, or make it private, at any time, and it disappears from public view. If you'd like help removing something, email us.

Parents of a Teen can ask to see, correct or delete their Teen's information, or to close the account. Email legal@corvano.app with the account's email address; we'll verify that you are the Parent before acting.

A Parent who paid for their Teen's plan through a payment link can cancel it online with the cancellation link in the emails we send them and on our help page for parents, by sending the ready-made cancellation email linked there, or by emailing support@corvano.app (or legal@corvano.app) from the email address the receipt went to. Our help page for parents explains paying, cancelling and refunds.

15.Tutors and schools

Tutoring companies, independent tutors and schools ("Partners") can give their students a Seat: Corvano Plus on Corvano and Corvano Prep, paid for by the Partner. This section explains what changes for your information when you join one.

15.1 Joining is your choice

A Partner invites you with a link, a code or an email. Nobody can add your account without you accepting on your own screen, and Partners can't search Corvano for accounts. Before you accept, the join screen shows who is offering the Seat and what they will see. If you already have an account, you keep everything in it.

15.2 What a Partner sees, and what it never sees

• What it sees while your request to join is waiting: your name, your email address and the group you asked to join.
• What it sees once you hold its Seat, until your Seat ends: your name and email address, the group it put you in, when you were last active, the practice questions you answered since you joined (up to the last 90 days) and your accuracy by section, domain and skill, your latest practice-exam scores and score estimates since you joined, your weakest skill, your streaks, the assignments and Exam Studio exams it set you and your results, and how much of its AI allowance (Pool Credits) you used. Everything in this list is calculated only from your activity since you joined; your streak counts only days since you joined. Its owners, admins and tutors (shown as teachers in a school) may also receive a weekly email summary with this information.
• What it never sees: your own study sets and folders, your conversations with Corbie and the other AI tutors, notes or files you upload, your study guides, your payment details, or anything not in the list above.

Partners agree to use what they see only to teach and support you, never to sell it or use it for advertising. Seats never show ads.

15.3 Leaving

You can leave a Partner's program at any time from your account page (Account, then Organizations), unless your school manages your account (section 15.4). The Partner stops seeing your information straight away (except the Console's activity-log entry that your Seat started or ended, with your name, as section 11 explains), and your account returns to the free plan or to your own plan. The same happens if the Partner removes you or its plan ends, except for School-managed Accounts (section 15.4). If a school removes your Seat without telling us what to do with your School-managed Account, we ask the school what to do, and section 15.4 explains what happens while we wait. If you leave a tutoring company's program (not a school's), we may offer you a discount on your own plan.

15.4 Accounts provided through a school

When a school or district gives students Corvano, we act for the school as a "school official" under the Family Educational Rights and Privacy Act (FERPA), under the school's direct control over the use and maintenance of education records, and the school signs a Student Data Privacy Agreement (or its own state or district agreement) before any student can join. For those students:

• we use their information only to provide, secure, support and improve Corvano for them and for the school, never sell it, and never use it for advertising or marketing, except that de-identified statistics may be used as the school's agreement allows (Student Data Privacy Agreement section 12);
• Corvano doesn't load analytics or ads for them while they hold the school's Seat or have a School-managed Account;
• if the account is a School-managed Account (created through a join link of a school, district, charter network (charter management organization) or other educational agency or institution that accepts only email addresses from its own email domain), it is managed by the school: the school decides whether it can leave the program and can ask us to delete it at any time; when the school's plan ends we delete it within 60 days (or within 120 days if the school tells us in writing that it intends to renew or to buy a plan after a pilot, with the account limited as described below while we wait), and it never becomes a Personal Account; if the school removes the student's Seat without saying what to do, we ask the school and, if it hasn't answered within 60 days of our request, we email the student and delete the account 14 days later. While we wait, and after the school's plan ends, the account is limited: the student can sign in, study their own sets and download their data, but it shows no ads, loads no analytics and gets no offers, and the school can't see it. If the school allows it, the student can ask us before deletion to copy the sets, cards, folders, notes and study guides they created into a Personal Account with their own email address (for a school in Florida, or wherever the law or the school's policy requires it, only after the school confirms to us in writing that a Parent expressly agreed, unless it has told us the student is 18 or older); practice answers, practice-exam results, assignment and Exam Studio records and AI tutor conversations are never copied and are deleted with the account. We email the student at least 14 days before deleting, so that they can download their data and ask us for anything the download doesn't include, unless the school asks us to act faster for a student's safety, the account belongs to a child under 13, or the law requires faster deletion;
• we look at AI results from their accounts only to support and fix their own or the school's service, never to build evaluation or training sets or to tune prompts or models;
• a School-managed Account can't buy a personal plan, and unless the school allows more, it can't make sets public or join a Class created by someone outside the school's staff; anything a student does share is shared by the student's own choice;
• parents and eligible students ask the school to see or correct school records, and we help the school answer; students can also download their own data from their account page.

Schools can add students aged 13 and over only. Outside these programs, Corvano remains a service students choose for themselves, and we follow the same core promises of student-privacy laws for everyone: we don't sell student information, don't use it for targeted advertising, don't build profiles of students for any purpose other than their own studying, and delete it when asked.

16.US state privacy notices

Many US states have privacy laws that give residents rights over their personal information, with extra protections for minors. Several of them apply only to companies above a size threshold, which Havra may not meet. Whether or not a particular law applies to us, we follow this policy for everyone and honor the rights in section 13.

16.1 California

In the past 12 months we have collected these categories of personal information, from you, your device, a Partner that invited you, our sign-in providers and our payment processor:

We use these categories for the purposes in section 4 and keep them as section 11 describes. We don't sell or share personal information (as California law defines those words), including that of consumers under 16, and we don't use sensitive personal information to infer characteristics about you.

"Shine the Light": we don't disclose personal information to third parties for their own direct marketing. Minors: you can remove content you posted, as section 14.2 explains.

16.2 New York

We don't sell the information of users in New York. For visitors we identify as being in New York, from the approximate location of their IP address, we don't run analytics, we don't record the campaign labels or ad click identifiers of the link they arrived through (section 3.3), and we don't request ads from Google: the free plan shows our own banners instead, and hearts refill without an ad.

17.Where Corvano is offered

Corvano is operated from the United States, and our database is in the United States. Corvano is designed for and directed to students in the United States preparing for US tests, and is priced in US dollars. It is not directed to people in the European Economic Area, the United Kingdom, Switzerland or other countries. If you use Corvano from another country, you do so on your own initiative, and your information is transferred to and stored in the United States (AI requests may be processed by model hosts in other countries, under the zero-retention rule in section 5.2), where privacy laws may differ from those where you live.

You can use the rights in section 13 wherever you are. If the law where you live gives you additional rights over your information, including the right to complain to a data protection authority, nothing in this policy limits them; please contact us first at legal@corvano.app so that we can help.

18.Corvano apps

If you use a Corvano app, this policy applies to it. The apps use the same account and store the same kinds of information as the website, with these differences:

• you can sign in with Apple or with a phone number (section 3.1);
• when you sign up in an app, you choose the name Corvano shows; if you sign up with an email address and leave it blank, it starts as the part of your email address before the "@". You can change it, and it is shown to others only as section 9 describes;
• the apps send your device's time zone so that daily practice and streaks follow your local day, and keep a record when your time zone changes;
• the apps keep a short record of each answer you send so that the same answer isn't counted twice if your connection drops;
• the apps show no ads, include no analytics, crash-reporting or tracking software, and ask for no device permissions; and
• you can delete your account inside the app (You, then Delete account).

19.Changes to this policy

We'll post any change here with a new version number and effective date. If a change is significant, we'll tell you by email and in Corvano at least 14 days before it takes effect (or as soon as we reasonably can if the law requires a change sooner or it is needed urgently for safety or security), and where the law requires it we'll ask for your consent. We will never use information we already hold in a materially different way without your consent.

20.Contact us

For privacy questions and requests, Parents' requests, and anything else about this policy, email legal@corvano.app.

Havra LLC
legal@corvano.app