Privacy Policy
Last updated: 11 November 2026
1. Who we are
Proofy ("we") is an app that reads a maths problem from a photo and shows a step-by-step solution, where each step is checked by a computer algebra system before you see it. Contact: privacy@proofyapp.xyz.
2. What we collect
| Data | Why | Kept |
|---|---|---|
| Your Google account's email address, name and profile-picture link, as Google shares them when you sign in | Your account | Until you delete your account |
| Birth month and year, whether a parent or guardian agreed, consent version, optional class code | Age gate and consent (§5) | Until you delete your account |
| Photos of maths problems | Read the problem | Not kept. Processed in memory for that request only; never written to disk or a database by Proofy |
| The recognised problem (as LaTeX text) and the solution steps you save | Your notebook | Until you delete the entry or your account |
| "This answer looks wrong" reports | Fix mistakes | Until you delete your account |
| Timing and cost numbers per solve (which services answered, how long each stage took, retries, cost) | Keep Proofy fast and correct | 90 days, then deleted automatically |
We don't collect your contacts, location, advertising identifiers or photos from your library. We never see your Google password. We don't sell data or show ads.
3. Who else processes your data
Before upload the app crops the photo to what the viewfinder showed, shrinks it and turns it grey. It's then sent to our server and from there to the services below. Which ones are used depends on how the server is configured; the app shows the current list before your first photo and in Settings.
| Company | Service | What it receives | Its terms, in short |
|---|---|---|---|
| Microsoft | Azure (our server host, Southeast Asia) | The photo and problem text while a solve runs | Our hosting provider (processor); Proofy keeps nothing on the server after the request |
| Gemini API | The photo; in some configurations, the problem text | On the free tier Google may use content to improve its products. On the paid tier, content isn't used to improve Google's products | |
| Sign in with Google | Your sign-in | Under Google's own privacy policy | |
| Anthropic | Claude API | The photo (backup reader) and the problem text (double-checking hard problems) | Not used to train models under Anthropic's commercial terms; deleted after a limited period |
| Groq | GroqCloud API | The problem text only | Processed under Groq's API terms |
| DeepSeek | DeepSeek API | The problem text only | Processed under DeepSeek's terms on servers in China |
| Supabase | Database and sign-in | Your account, notebook, reports and timing numbers (§2) | Our database host (processor), Singapore region |
4. Where data is processed
Our server and database are in Singapore. The AI services in §3 may process requests in the United States and, for DeepSeek, in China.
5. Children and students
- Proofy is not for children under 13. After you sign in, the app asks for your birth month and year and stops anyone under 13; such an account is deleted straight away. We don't offer a parental-consent route for under-13s.
- Users aged 13–17 must confirm that a parent or guardian agrees. We record that confirmation and the policy version it applied to.
- Schools using Proofy in class are responsible for any consent their own rules require.
6. Your choices and rights
- Delete your account in the app: Settings → Delete account. This removes your account, profile, notebook, reports and timing rows straight away, and stops any solve in progress. You can also ask by email: proofyapp.xyz/delete-account explains how.
- Delete one saved solution from the notebook.
- We can't delete what a third-party service keeps under its own terms (§3); we never send them your name or email.
- Depending on where you live you may have further rights (access, correction, portability, objection). Email us.
7. Security
All traffic uses TLS 1.2 or later. Access to the database is limited by row-level security, so each account can read only its own rows. API keys for the services in §3 stay on our server and are never in the app.
8. Changes
We'll show the new version in the app before it applies and ask for consent again where required.