Privacy Policy

• Akadyo is free. We do not sell your data, show you ads, or use your data to train AI models.
• We keep what the product needs to work: your email address (and your name, if Google provides it), the courses you create, your progress, your checkpoint answers and your tutor conversations.
• Akadyo does not pay for AI on your behalf. The AI runs on your own Anthropic or OpenAI key, which we store encrypted and never show back to you, or inside Claude or ChatGPT when you use Akadyo from there.
• You can have your account and everything in it deleted by writing to hello@akadyo.com.

Account details. Your email address, which is how you sign in: either with a one-time sign-in link we email you, or with Google. If you choose Google, Google tells us your email address, your first and last name and an identifier for your Google account, which we keep to recognise you next time. We never see your Google password, and Akadyo has no password of its own for you to create.

What you learn. The topics you ask for and what you tell us about them (your goal, your level, what you already know and how much time you have); the courses written for you, with their modules, lessons and any videos or links attached to them; your progress through each course; your answers and scores on checkpoints; and your conversations with the tutor, meaning both your messages and its replies.

Your AI key, if you add one. Which provider it is for (Anthropic or OpenAI), the key itself in encrypted form, its last four characters, whether the provider accepted it, and when it was last checked and last used. Section 3 says how it is handled.

AI apps you connect. If you connect an AI app (section 4), we keep a record of that connection, with its access stored only as a hash, so the app can act on your account.

Share links you create. If you share a course, we keep the link so that someone who opens it can get their own copy of that course.

Technical data. The IP address and browser of each signed-in session, request details in our servers' logs, and short-lived request counts per address or account that we use to limit abuse. The sign-up form runs a bot check from Cloudflare.

The marketing site at akadyo.com collects nothing about you: it has no forms that store data, no analytics and no cookies. Its sign-up button takes you to the app at akadyo.app.

Akadyo writes courses, answers tutor questions and explains checkpoint answers with an AI model. We do not pay for that AI use and we do not resell it. You bring your own key from Anthropic or OpenAI instead.

• Encrypted at rest. Your key is encrypted (AES-256-GCM) before it is stored, and the encryption is bound to your account, so the stored value is useless outside it.
• Never shown back. After you save it, Akadyo only ever shows its last four characters. The key is kept out of our logs, emails and error messages.
• Used only for you. We use your key only to call that provider for things you ask Akadyo to do. We check it once when you add it with the smallest request the provider allows.
• Yours to remove. You can remove your key at any time, and removing it deletes it from our database straight away. If you cannot find the control in the app, email hello@akadyo.com and we will remove it.
• Your provider's terms apply. Calls on your key are billed to your account with that provider under its own terms, usage policies and privacy policy. To do the work, the provider receives what the request needs: your topic and course details, the lesson you are on, and your messages to the tutor.

You can connect Akadyo to an AI app such as Claude or ChatGPT through the Model Context Protocol (MCP). Once connected, you can build and study your Akadyo courses from that app, and the AI work runs on that app's AI rather than on a key you give us.

When you do, the app sends us what you ask of Akadyo, such as the topic of a course you want built or your answers as you study, and receives back what it needs to show you, such as your courses, lessons and progress. Everything you type into that app, and everything it receives from Akadyo, is handled by the company behind that app under its own terms and privacy policy, which we do not control.

You can see the AI apps and tokens connected to your account, and revoke any of them yourself, on the Connect page at akadyo.app/connect. Removing the connector inside Claude or ChatGPT alone does not revoke its access to Akadyo, so revoke it there as well. If you need help, email hello@akadyo.com.

• To run Akadyo: write your courses, show them, save your place and power the tutor.
• To sign you in, keep you signed in and send you email about your account, such as sign-in links.
• To keep the service secure and working: prevent abuse, investigate problems and fix bugs.
• To meet legal obligations and enforce our Terms of Service.

We use these service providers to run Akadyo. Each handles your data only to provide its service to us.

• Vercel hosts the Akadyo app at akadyo.app and this site.
• Amazon Web Services runs our servers and database in the United States, and sends our email through Amazon SES.
• Cloudflare provides our DNS and the bot check on the sign-up form.
• Google signs you in when you choose to sign in with Google.
• YouTube serves lesson videos from its privacy-enhanced domain, which sets no tracking cookies until you play a video. Opening a lesson that has a video lets YouTube receive your IP address, your browser details and the address of the page. Our servers check that a video exists without sending anything about you.
• Anthropic or OpenAI, only when you use your own key with them (section 3), and the company behind your AI app, only when you use Akadyo from that app (section 4).

We may also disclose information when the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business. We do not sell your personal information.

The Akadyo app uses two cookies, and both only keep you signed in: a short-lived access cookie (15 minutes) and a sign-in cookie that renews it (30 days). Both are httpOnly, so scripts on the page cannot read them, and both are removed when you sign out. There are no advertising or analytics cookies.

This marketing site sets no cookies.

• Your account, courses, progress, checkpoint answers and tutor conversations stay while your account exists.
• Sign-in links and expired sessions are deleted automatically within an hour of expiring.
• Request counts used to limit abuse are deleted after 24 hours.
• Your AI key is deleted the moment you remove it.
• A connected AI app keeps its access until that access expires or is revoked.

To delete your account and everything in it, email hello@akadyo.com from the address you sign in with. We will confirm once it is done, within TBD. Copies in our database backups are overwritten as backups rotate, within TBD.

Traffic to Akadyo is encrypted in transit, your AI key is encrypted at rest, sign-in tokens are stored only as hashes, and every account's data is kept separate from every other account's. No system is perfectly secure, so we cannot promise that your data will never be exposed.

Depending on where you live, you may have the right to see the personal data we hold about you, correct it, delete it, take a copy of it in a portable format, object to or restrict how we use it, and withdraw consent you have given. Email hello@akadyo.com to use any of these rights, and we will answer within 30 days.

If you are in the European Economic Area or the United Kingdom, we rely on performing our contract with you to run your account, and on our legitimate interest in keeping the service secure. Your data is stored in the United States. You may also complain to your local data protection authority.

If you are in California, you have the right to know what we collect and how we use it, to have it deleted, and not to be treated differently for asking. We do not sell or share personal information for advertising.

Akadyo is not meant for anyone under TBD, and we do not knowingly collect their data. If you think a child has given us personal data, email hello@akadyo.com and we will delete it.

If we change this policy in a way that matters, we will email you before the change takes effect and update the effective date at the top of this page.

Akadyo is run by TBD, which is responsible for your data. For anything about this policy or your data, email hello@akadyo.com.