Operator: John O'Connor. Contact: [email protected]. Last updated: 10 November 2026.
| Data | Where | Why | Kept |
|---|---|---|---|
| Notes, LaTeX source, original Apple Pencil drawings, imported files, practice history (guest and account libraries) | Your device | The app's core function | Until you delete it or the app |
| Account identity: Apple-provided user identifier, and email if Apple shares it | Supabase Auth (Sydney, Australia) | Sign-in | Until account deletion completes |
| Synced subjects, notes, drawings, originals, questions, answers, marks, mistakes, review schedule, plans, preferences, annotations | Supabase database and private storage (Sydney) through the Rethiq API on Vercel (Sydney) | Sync across your devices and the learning features you use | Until you delete them or your account |
| Search index (numeric embeddings of passages from your synced sources) | Supabase database (Sydney); created with Cloudflare Workers AI | Finding relevant passages for cloud AI answers | Deleted when you turn cloud AI off, delete the source or delete your account |
| Kept AI answers | Supabase database | Avoid charging twice for a repeated request | Up to 24 hours |
| Tutor memory (only if you turn it on) | Supabase database | Follow-up questions in the same tutor session | Last four turns per session, up to 7 days |
| AI usage records (token counts, cost, mode, list of source passages used; no question or answer text) | Supabase database | Spend limits and reliability | Until account deletion |
| Connected-assistant grants (pilot; only if you approve an assistant) | Supabase database (token stored only as a hash) | Read-only access you grant to an assistant | Until expiry (at most 30 days) or revocation |
| Account-deletion receipt (account identifier and timestamps only) | Supabase database | Prove and complete deletion | 30 days after completion |
When you ask for help, your question and up to six short passages from your own sources are sent to Anthropic (Claude) through Cloudflare AI Gateway. To find those passages, text from your extracted sources and your question are sent to Cloudflare Workers AI to create the search index. If you choose, up to three automatically marked questions and your answers from that subject are included. The gateway is configured not to store request or response text and not to cache; Rethiq does not log prompts, source text or answers. Anthropic processes requests under its commercial API terms. Handwriting transcription (pilot; only when you choose it for an answer) sends one image of your answer for transcription only; the image is not stored by Rethiq. Daily and monthly limits cap use.
On-device explanations use Apple Intelligence on supported devices and do not leave the device.
Subscriptions are sold and billed by Apple through your Apple Account; Apple processes the payment, and Rethiq never receives your card or payment details. When you subscribe while signed in, the app tags the purchase with your Rethiq account ID so it applies to your account. Rethiq stores the App Store transaction IDs, product, purchase, expiry and signing dates, trial and renewal status, refund or revocation status and the App Store environment, both from the app and from Apple's server notifications. This is used only to show and apply your plan. Purchases made without signing in stay on your device. Cancelling, a refund or an expired plan never deletes or locks your study data. Purchase records are erased when you delete your cloud account; Apple keeps its own purchase records under its terms.
Supabase (identity, database, file storage; Sydney), Vercel (API hosting; Sydney), Cloudflare (AI Gateway and Workers AI; only when cloud AI is on), Anthropic (AI answers; only when cloud AI is on), Apple (Sign in with Apple, App Attest, TestFlight, notifications). Providers act on Rethiq's instructions. Some providers may process data outside Australia.
Backups of cloud data follow the hosting provider's backup policy, which currently provides no automatic backups. Rethiq may take encrypted backups of synced study records; they are kept for no more than 30 days. Deleted data may persist in a backup until that backup expires; restored backups are reconciled with deletion receipts before use.
Rethiq is for people aged 16 or older. If you are under 16, please don't create a cloud account or use cloud AI. If we learn that a cloud account belongs to someone under 16, we will delete it.
Data is encrypted in transit (TLS). Cloud records are isolated per account with database row-level security, and every API request checks ownership. Secrets are never stored in the app.
Material changes will be shown in the app before they take effect. Cloud AI consent is versioned; a new version asks again before anything is sent.