SolveSpace Tutor Privacy Policy
Last updated 26 July 2026
SolveSpace Tutor is a study workspace where you can work through problems and ask an AI tutor for feedback. This policy covers the SolveSpace Tutor iPhone and iPad app and explains what stays on your device, what leaves it, why it is processed, and how long it is kept.
SolveSpace Tutor is operated by Distill Agent (“SolveSpace,” “we,” “us,” or “our”). For app support or a privacy question or request, email kareem.i.souda@gmail.com.
No named SolveSpace account
The current iOS app has no SolveSpace sign-up, login, or password and does not ask for your name, email address, phone number, or postal address. It does use pseudonymous identifiers for a genuine app installation and for Apple purchase restoration. Those identifiers can distinguish an installation or purchaser even though they do not tell us your real-world identity.
Data stored on your device
Your problem text, vector whiteboard strokes, pages, notes, tutor conversation and feedback history, generated study sets, compact source excerpts, settings, and AI-permission choices are stored in the app's local web data store. There is no SolveSpace cloud workspace sync or server backup of this workspace.
Settings lets you inspect local storage, export the workspace as a plaintext JSON backup, and delete the app's local workspace data. An exported backup is a separate copy: it may contain your full study workspace, and deleting data in SolveSpace does not delete copies you saved to Files, iCloud, another storage provider, or another device.
Data sent off your device
App security and subscriptions
The app can contact our service before AI permission is granted to authenticate with Apple App Attest, check service health, synchronize StoreKit-signed purchase status, restore access, and enforce service allowances. These operations do not include your learning content.
AI tutor and creation features
We do not send learning content to the AI service until you choose Allow AI Tutor. After permission, SolveSpace sends only the content needed for an AI feature you use. If automatic checking is enabled, an eligible page can be checked after you pause; you can turn automatic checking off in Settings.
| Data | When it is sent | Purpose |
|---|---|---|
| Problem text; a rendered image of the active whiteboard page; recent detected step text, grades, and regions; an optional tutor question; compact source context; and device locale | For a manual check, hint, review, tutor question, or an eligible automatic check after AI permission | Read the work, answer the question, and provide tutor feedback |
| An image or camera photo you select, normalized to PNG, plus the selected subject | When you ask SolveSpace to read a problem image or drawing | Transcribe the visible problem into editable text |
| A PDF, text, or Markdown file you select; filename; subject; requested difficulty and count; and up to eight recent same-subject problem prompts with difficulty and categorical outcome | When you ask SolveSpace to generate a study set | Create source-grounded questions and adapt their difficulty |
| The current problem, compact source context, locale, requested variation, and up to eight recent problem prompts | When you ask for an easier, similar, harder, or next problem | Create an answer-free practice problem and reduce repetition |
| Summaries of writing timing, pauses, erasing, rewriting, and changed regions | Only if you separately enable writing-behavior signals in Settings | Adapt feedback to the writing process and pace automatic checks |
The app does not upload your device screen. It renders only the selected problem image, source, or logical whiteboard page needed for the feature. Image normalization removes the original file metadata before a selected problem photo is sent.
Service providers
- Anthropic provides the Claude API used for transcription, study/practice generation, and tutor feedback. It receives the learning content described above but not the app's App Attest principal. Under Anthropic's standard commercial API policy as of this policy date, inputs and outputs are normally deleted from its backend within 30 days. Anthropic states that inputs and outputs flagged for Usage Policy violations may be kept for up to two years and related trust-and-safety classification scores for up to seven years, and that legal requirements can also require longer retention. Anthropic says commercial API inputs and outputs are not used to train its models by default, and we do not opt your content into model training. See Anthropic's commercial retention explanation and model-training explanation.
- Amazon Web Services (AWS) hosts the SolveSpace service and its Redis security, entitlement, and usage state. The current service is hosted in the Mumbai, India region. AWS infrastructure processes requests and the server records described below.
- Apple provides App Attest, StoreKit, subscription payments, signed transaction data, purchase restoration, and App Store server notifications. Apple—not SolveSpace—receives your Apple Account credentials and payment details. Apple's handling is governed by its own privacy terms.
We use these providers only to operate, secure, and provide the app. We select and contract with providers whose commitments require the same or equivalent protection for user data as this policy, consistent with their role in providing the service. We do not disclose app data to data brokers, advertising networks, or unrelated marketers.
What SolveSpace retains on the server
- AI request content: raw images and source files are not copied into persistent SolveSpace application storage. They are held while a request is processed, and multipart handling may use temporary storage during that request. Analysis and practice responses, together with a request fingerprint, can remain in process for safe retry and duplicate suppression; they stop being eligible for reuse after about 10 minutes and are removed during later cache maintenance or when the process restarts. Anthropic's separate retention is described above.
- App Attest security records: an opaque Apple App Attest key identifier, its derived hash and pseudonymous principal, public key, Apple attestation receipt, assertion counter, app build/environment metadata, timestamps, and revocation state. These records are durable so we can reject replay, cloned, modified, or revoked installations. Authentication challenges expire in minutes, and bearer sessions expire after 5–15 minutes.
- Subscription and allowance records: verified Apple app/purchase mappings, original and current transaction identifiers, product, purchase/expiration/revocation dates, renewal and billing state, the current allowance window, and counts of tutor checks and AI creations. Request-attempt quota records expire around their minute or daily window; completed monthly allowance records remain for the window plus a short reconciliation period. Core entitlement records are durable so paid access can be restored, refunds and revocations can be honored, duplicate free benefits can be prevented, and billing disputes or legal obligations can be handled. App Store notification deduplication hashes are kept for about 400 days.
- Operational and network data: our infrastructure necessarily processes an IP address, request time, route, and response status to deliver and protect the service. Application logs can include non-content diagnostics such as duration, token counts, broad subject, operation type, page revision, result count, and a shortened request fingerprint. We do not intentionally log request bodies, uploaded files, page images, extracted source text, or source excerpts. Rotating logs and backups are retained only for as long as reasonably necessary for reliability, security, abuse investigation, restoration, and legal obligations, then deleted or overwritten according to the applicable infrastructure schedule.
How we use data
We process data to provide requested app features; personalize tutor and practice output to the submitted work; authenticate genuine installations; verify, provide, restore, and manage subscriptions; enforce published allowances and abuse limits; prevent fraud, replay, and duplicate billing events; diagnose service failures; comply with law; and protect users, the service, and our providers.
If privacy law in your location requires a legal basis, we rely on your consent for AI learning-content sharing and optional writing-behavior signals; performance of the service or a contract for requested features and subscriptions; our legitimate interests in security, fraud prevention, reliability, and proportionate service limits; and legal obligations where applicable. You can withdraw consent as described below, without affecting processing already completed.
What we do not collect or do
SolveSpace does not request contacts, microphone, health, fitness, or precise-location access. It does not contain advertising, third-party analytics, or cross-app tracking SDKs. We do not sell personal data or share it for targeted advertising, and we do not use Apple's advertising identifier.
Your choices, deletion, and rights
- Withdraw AI Tutor permission in Settings. Learning content will no longer be sent for AI features, while local whiteboard and saved-work features remain available.
- Turn automatic checking and writing-behavior signals off independently in Settings.
- Export a local workspace backup, or use Delete local workspace data to remove SolveSpace's local workspace store. Delete exported copies separately from every location where you saved them.
- Manage or cancel a subscription in your Apple Account settings. Deleting local workspace data or the app does not cancel an Apple subscription.
- Email us to request access, correction, deletion, restriction, portability, or an objection where local law provides that right. Because server records are pseudonymous, we may need reasonable information to verify and locate the relevant installation or purchase. We may retain limited security, transaction, or legal records when deletion is not technically possible or an applicable law or compelling security/fraud-prevention need permits or requires retention.
If you contact support, we receive the email address or other contact details you use, your message and attachments, and any installation or transaction evidence needed to verify the request. We use that information to respond, troubleshoot, prevent fraud, and satisfy legal obligations. We retain support correspondence until the request is resolved and afterward only as reasonably needed for security, dispute handling, and applicable recordkeeping requirements.
Deleting local data or uninstalling the app does not immediately remove Apple records, exported files, durable SolveSpace security/subscription records, infrastructure backups, or information still within a service provider's disclosed retention period.
International processing
Our service providers may process data outside the country where you live, including in India and the United States. Where required, we use provider contractual terms and other recognized safeguards for cross-border processing.
Children
SolveSpace is a general-audience study tool and is not directed to children under 13. We do not knowingly ask a child under 13 for personal information. A user who is under the age at which they can consent to online data processing in their country should use AI features only with authorization from a parent, guardian, or school that is legally able to provide it. If you believe a child submitted information contrary to this section, contact us.
Security
Traffic between the app and our service is encrypted with TLS. Apple App Attest, short-lived sessions, bounded uploads, replay-safe counters, request limits, restricted service credentials, and access-controlled hosting help protect the service. No system is perfectly secure, and we cannot guarantee absolute security.
Changes to this policy
We may update this policy as SolveSpace or its providers change. We will update the date above and provide additional notice in the app when a material change makes that appropriate. The version in effect when data is processed governs that processing.
Support and contact
App support, privacy questions, requests, or complaints: kareem.i.souda@gmail.com.
If local law gives you that right, you may also complain to the data protection authority where you live or work.