Privacy Policy

The short version

• We collect what we need to run your account and make your study packs: your name and email, your classes and study material, and your study activity.
• Your material goes to our AI provider, Anthropic, PBC, only after you allow AI processing, and only to make the study pack you asked for. Anthropic does not use it to train its AI models.
• We don't sell your personal information, share it for advertising, show ads, or track you across other companies' apps and websites.
• Other students see only your display name, handle, avatar and streak, plus your study minutes on exams you race together, split into focus time and time on flashcards, quizzes and practice problems. If you have Pro and choose to show it, your friends also see a Pro badge; it stays off until you turn it on. They never see your email, notes, uploads or quiz results, or a study pack unless you share it by link.
• You can make one study pack before you create an account. We ask your age and your permission first, keep that pack for up to 7 days so you can keep it by signing up, and then delete it.
• Chomp is not for children under 13.
• You can delete your account, and the information that goes with it, from inside the app at any time.

Who we are

Chomp is operated by an individual ("we", "us" or "our"). This Privacy Policy explains how we handle personal information in the Chomp app and its related websites and services (together, "Chomp").

Questions? Email support@feedchomp.com.

Information you give us

• Account details: your name, email address and password. Your password is stored by our authentication provider in hashed form, so we can't read it.
• Profile: your display name, handle and avatar choices, and the language you chose for the app (English or Spanish).
• Classes and exams: the classes you pick or add, and the exams you create (their names, dates and classes, and which friends you invite to race).
• Study material: the photos, files, Google Drive documents and pasted notes you add to make a study pack.
• People: the friend requests you send and accept, and the people you block.
• Reports and messages: reports you make about other students or a shared study pack (the reason and any details you add), and anything you send us when you contact support.

Information created when you use Chomp

• Study packs made from your material (summaries, key terms, study guides, flashcards, quizzes and test tips, and practice problems with tips for answering them when the material or the class is math), along with the name, type and size of the file each came from, and your flashcard review progress.
• Study activity: focus sessions (how many minutes, when, and for which class or exam), reviews and quizzes completed, streaks, XP, levels, medals and daily quests.
• Rewards: your crumbs, the looks you've bought with them and the one you're wearing, which races have already paid out, and the counts behind some medals (perfect quizzes, race wins and minutes studied late at night). They're kept with your account so they follow you to another device and aren't lost when you sign out of a web browser.
• Your plan, your free-trial dates, and whether and when you allowed AI processing.
• A count of the study packs you've requested and how much material each one included (not the material itself), which we use to apply daily limits.
• Reports that other students make about your account, and reports anyone makes about a study pack you shared, which we keep with a copy of that pack.

Information from Apple, Google and Stripe

• Sign in with Apple: an identifier for your Apple Account and, the first time only and only if you choose to share them, your name and email address. If you choose Hide My Email, we receive a private relay address instead. Apple also gives us a token that lets us disconnect Chomp from your Apple Account when you delete your Chomp account.
• Google sign-in: your name, email address and Google account identifier.
• Google Drive: if you add material from Google Drive, you choose the files in Google's own picker, and Chomp gets permission to open only those files. That permission expires within an hour and isn't stored.
• Age range: where the law requires app stores to check age, Apple may tell Chomp your age range (for example, 13 to 15). We use it only to decide whether you can use Chomp, and keep only that yes-or-no result, on your device.
• Purchases: if you buy a subscription, Apple processes the payment. RevenueCat, Inc. checks the purchase with Apple for us and keeps the record of your subscription under your Chomp account ID. We receive the plan, when it started and when it renews or ends, and whether it's active, but never your payment card details.
• Purchases on the web: if you buy a plan in Chomp on the web, Stripe, Inc. takes the payment and keeps your card details. We give Stripe, Inc. your email address, for your receipts, and your Chomp account ID, to match the plan to your account. We receive a customer ID from Stripe, Inc., the plan, whether it's active, and when it renews or ends, but never your card number.

Information collected automatically

When the app talks to our servers, our systems and service providers record technical information such as your IP address, device, operating system or web browser type, app version, the time of each request and any errors. We use it to keep Chomp secure and working, to prevent abuse (for example, limiting how fast study packs can be requested) and to fix problems.

We don't use advertising identifiers, and we don't collect your precise location, contacts, microphone audio, browsing history or health information. The Chomp app doesn't contain analytics or advertising software from other companies.

Our website, feedchomp.com, counts its visits with Vercel Web Analytics. It uses no cookies and doesn't record your name, account or IP address. For each visit it notes the page, the site that sent you there, the campaign tag of the link you followed, your approximate location (country, region and city) and your device and browser type, and it tells visitors apart for no more than 24 hours. We look only at the totals, to see which pages and links work, and never use them for advertising. It doesn't run inside the Chomp app.

Chomp uses your camera only when you tap to take a photo, and reads only the photos you choose from your library. Photos you take in Chomp aren't saved to your photo library.

Information that stays on your device

Some information never leaves your phone or computer: the result of the age check, your reminder time and scheduled reminders. The birth month and year you enter are used once to work out whether you can use Chomp and aren't saved. Chomp also keeps a copy of your account data on your phone, so it works when you're offline, and in your web browser while you're signed in there.

In a web browser, the age check lasts only for that visit, and signing out removes your account data from that browser, so the next person at a shared computer doesn't see it.

If you make a pack without an account, your web browser keeps a random code that tells your device apart. It isn't built from anything about you or your device, and our servers receive only a scrambled form of it, used to limit packs made without an account.

How we use information

• To create and run your account and keep your data in sync across your devices.
• To make study packs from the material you add (see "AI processing").
• To run the features you use: flashcard scheduling, the focus timer, streaks, rewards, friends and study races.
• To keep Chomp safe: checking names, handles and exam names for words that aren't allowed, reviewing reports, enforcing blocks, preventing spam and abuse, and applying plan and rate limits.
• To give you support and send service messages, such as confirming your email address. We don't send marketing emails.
• To keep Chomp secure, find and fix bugs, and protect against fraud and misuse.
• To comply with the law and enforce our Terms of Use.

We don't use your information to show ads, we don't sell it, and we don't use it to make decisions about you that have legal or similarly significant effects. We don't use your material to train AI models, and neither does our AI provider.

AI processing

Chomp uses AI from Anthropic, PBC ("Anthropic") to turn your material into study packs. Chomp asks for your permission before it sends anything.

• What is sent: the text, photos and files you add for that pack (including files you pick from Google Drive), the names of the file and the class, and instructions for writing the pack. A PDF is sent whole, with everything saved inside it: its pictures, any files attached to it, and details such as the author's name. Nothing from your account is added: not your name, email address, handle or account ID.
• When: only when you tap "Chomp it" to make a pack, and only while AI processing is turned on.
• What Anthropic does with it: it processes the material to write your pack and sends the result back to us. Anthropic does not use it to train its AI models. Anthropic generally deletes it within 30 days, though material flagged for breaking its usage policies can be kept longer so misuse can be investigated.
• What we keep: the finished study pack and the name, type and size of the file it came from. We don't store the photos, files or text you sent. They're used to make the pack and then discarded.
• Your choice: you can turn AI processing off at any time in Account → AI processing. While it's off, nothing is sent to Anthropic and you can't make new study packs. Packs you already have stay.

Material you upload can contain personal information about you or other people. Please leave out things like health details, ID numbers, passwords and other people's private information.

AI can get things wrong. Our Terms of Use explain the limits of AI-made study material.

Trying Chomp without an account

You can make one study pack before you create an account. Before you add anything, Chomp asks your birth month and year (it isn't for children under 13), asks you to agree to our Terms of Use, and asks your permission to send your material to Anthropic.

• What we collect: the material you add and the pack made from it, as described in "AI processing"; scrambled (hashed) forms of your internet address and of a random code your browser keeps to tell your device apart (see "Information that stays on your device"); and a check by Cloudflare, Inc. that you're a person, not an automated program. We don't ask for your name or email address.
• Why: to make your pack, and to limit how many packs can be made without an account, so Chomp isn't abused.
• How long: your material is discarded once the pack is made. The pack is kept for up to 7 days. If you create a new account in the same browser tab and choose to keep it, it moves into that account; otherwise it's deleted. The scrambled address and device code are deleted within 2 days.
• On a shared computer: the pack is held only in that browser tab, and it's cleared when you close the tab, leave it unused, or tap "Not mine, clear it". Signing in to an account that already existed doesn't pick it up.

What other students can see

• When you send a friend request, the person you sent it to sees your display name, handle, avatar and streak, so they can decide whether to accept. You see theirs once they accept.
• Friends see each other's display name, handle, avatar and streak, and a Pro badge when a friend with Pro has chosen to show it. Nobody is shown as not having Pro, and racers who aren't your friends never see the badge.
• Everyone racing on the same exam sees that exam's name and each racer's display name, handle, avatar, streak, and the study minutes logged for that exam (focus time, and time on flashcards, quizzes and practice problems).
• Racers don't have to be friends with each other. Whoever creates an exam invites their own friends, so you can end up racing someone you've never added, and they see the same things about you that a friend would, except a Pro badge.
• Other students never see your email address, classes, notes, uploads or quiz results, or a study pack you haven't shared. They never see your plan either, unless you have Pro and chose to show the badge to your friends.
• Shared packs: if you share a study pack, anyone with its link can see a copy of its title, its flashcards and, if included, its quiz. The copy shows no name, handle or anything else about you, and never includes your notes or files. Check a pack for personal details before you share it. The link stops working, and the copy is deleted, when you stop sharing it, when you make a new link for it, when you delete the pack or your account, or after 30 days. If someone reports a shared pack, we keep a copy of it, and which account shared it, with the report for as long as we keep reports (see How long we keep information).
• Invite links: if you share an invite link and check "Show my handle", someone who signs up through it sees your handle, so they can send you a friend request. The link shows nothing about you before they sign up, it never makes you friends by itself, and we don't tell you who used it. If the person who signs up through it agrees, we keep a private note linking your two accounts so you can each get crumbs after they make their first pack within 7 days. You see only that a classmate joined this week, never who, and the note is deleted when the crumbs are given, by the eighth day at the latest, or when either account is deleted. If they don't agree, no note is kept and neither of you gets crumbs. The link stops working after 7 days, when you turn it off, or when you make a new one.
• When you block someone, they can no longer see your profile or send you requests, and you're both removed from each other's races.

Who we share information with

We share personal information only in these situations:

• With service providers that run parts of Chomp for us: Supabase, Inc. (accounts, database and storage), Anthropic, PBC (AI processing, when you allow it), RevenueCat, Inc. (checking App Store subscriptions), Stripe, Inc. (payments for plans bought on the web), Cloudflare, Inc. (checking that sign-ups and packs made without an account come from people, not automated programs), the company that hosts our servers, the company that hosts our website and counts its visits, and the service that delivers account emails.
• With Apple and Google, when you use Sign in with Apple, Google sign-in, Google Drive or App Store purchases. Their own privacy policies cover what they collect.
• With other Chomp students, as described in "What other students can see".
• For safety and legal reasons: when we believe in good faith that it's needed to comply with the law or a valid legal request, to protect someone from harm, to investigate fraud or abuse, or to enforce our Terms, including reporting apparent child sexual exploitation to the National Center for Missing & Exploited Children, as the law requires.
• In a business transfer: if Chomp is involved in a merger, acquisition or sale of assets, your information may pass to the new owner, who must keep protecting it as this policy describes. We'll tell you before that happens.
• With your permission, in any other situation.

Every service provider that handles personal information for us is bound by contract to give it the same or equal protection as this Privacy Policy, and to use it only to provide its services to us.

We don't sell personal information, we don't share it for cross-context behavioral or targeted advertising, and we don't let other companies track you in Chomp.

Google user data

Chomp's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Google sign-in gives us your name, email address and Google account identifier, which we use only to create your account and sign you in.
• Google Drive files you pick are downloaded to our server only to make the study pack you asked for, sent to Anthropic for that purpose while AI processing is on, and then discarded.
• We don't use Google user data for advertising, don't sell it, don't use it to train AI or machine-learning models, and don't let people read it unless you ask us to (for example, when you share a file with support), it's needed for security, or the law requires it.
• You can remove Chomp's access to your Google Account at any time at https://myaccount.google.com/permissions.

How long we keep information

• Account, profile, classes, study packs, exams and study activity: for as long as your account exists. When you delete your account, they're deleted from our systems right away.
• Backups: copies in our providers' encrypted backups roll off within 30 days.
• Material you upload: not stored. It's discarded once your study pack is made. Anthropic generally deletes it within 30 days, though material flagged for breaking its usage policies can be kept longer so misuse can be investigated.
• A study pack made without an account: up to 7 days, unless you keep it by creating a new account in the same browser tab. The scrambled internet address and device code used to limit those packs: no more than 2 days.
• Study pack request counts: for as long as your account exists.
• Shared pack copies: until you stop sharing, make a new link, delete the pack or delete your account, and never more than 30 days. A copy kept with a report is kept as long as the report.
• Invite reward notes: until the crumbs are given, and never more than 8 days. A record that an account has had its invite crumbs, so we can tell you once that you got them: 30 days. Each inviter's count of invite crumbs this week, for the weekly limit: 2 weeks.
• Blocks: until you unblock the person or either account is deleted.
• Reports: while we handle them, then for up to 12 months after they're closed so we can deal with repeated abuse, even if an account involved is deleted. Then they're deleted.
• Apple sign-in token: until you delete your account, when we use it to disconnect Chomp from your Apple Account and then delete it.
• Subscription record: for as long as your account exists. When you delete your account, we also delete RevenueCat, Inc.'s record of it. Apple keeps its own purchase history under its privacy policy.
• Server logs kept by our service providers: generally no more than 90 days.
• Information we must keep for legal reasons, such as a legal claim: only as long as that requires.

Your choices

• See and edit your display name, handle and avatar in Account.
• Turn AI processing on or off in Account → AI processing.
• Delete study packs and exams at any time.
• Report or block people from your Squad, and unblock them in Account.
• Stop sharing a study pack with the Share button on its page. Anyone can report a shared pack from the page its link opens.
• Delete your account in Account → Delete account. This deletes the information described above and disconnects Sign in with Apple.
• Turn notifications, camera and photo access on or off in your device's Settings.
• Remove Chomp from your Apple Account under Sign in with Apple in your device's Settings, or from your Google Account at https://myaccount.google.com/permissions.

Your privacy rights

Wherever you live, you can ask us to:

• tell you what personal information we have about you, and give you a copy in a portable format;
• correct information that's inaccurate;
• delete your information;
• stop using your information for a particular purpose, where you have that right.

Depending on where you live (for example California, Colorado, Connecticut, Texas, Virginia and other states with privacy laws), these may be legal rights, and we honor them for everyone. We don't sell or share personal information for targeted advertising, so there's nothing to opt out of there. We won't treat you differently for using your rights.

To make a request, email support@feedchomp.com from the email address on your account, or use the in-app options above. We may need to confirm it's really you first. We'll respond within 45 days, or tell you if we need more time as the law allows. A parent or legal guardian can make a request for their teen, and an authorized agent can make one for you where the law allows, with proof they're allowed to act for you.

If we turn down your request, you can appeal by replying to our decision within 60 days, and we'll answer within the time your state's law requires. If you're not satisfied with the result, you can contact your state attorney general.

Teens and children

Chomp is not for children under 13. We check age before anyone can create an account or make a pack without one, and we don't knowingly collect personal information from children under 13. If we learn we have, we delete it. If you believe a child under 13 has given us information, email support@feedchomp.com and we'll delete it.

Many students who use Chomp are teenagers, so everyone's information gets the care a teen's deserves:

• no ads, no selling of personal information, and no targeted advertising or profiling;
• no precise location tracking;
• friends have to accept each other before seeing anything, the only other students who see your profile are the ones racing on the same exam as you, and anyone can be blocked or reported;
• names, handles and exam names are checked for words that aren't allowed, and reports are reviewed within 24 hours;
• study reminders stay off unless you turn them on.

Parents and guardians can email support@feedchomp.com to ask what information we have about their teen, to have it corrected or deleted, or to have the account closed.

California residents under 18: if you've posted something in Chomp that other students can see, such as your display name, handle or an exam name, you can change or remove it yourself in the app, or ask us to remove it by emailing support@feedchomp.com. Removal doesn't guarantee that copies other people made are gone.

How we protect information

We use safeguards designed to protect your information, including encryption in transit between the app and our servers, encryption at rest by our database provider, database rules that keep each account to its own data, restricted access to our systems, and short-lived permissions for Google Drive. No system is perfectly secure, so we can't promise information will never be accessed, disclosed or changed without permission. If a breach affects your information, we'll notify you as the law requires.

Where information is processed

Chomp is offered in the United States. We and our service providers process and store information in the United States, and service providers may also process it in other countries where they operate, with protections consistent with this policy.

Do Not Track and Global Privacy Control

Chomp doesn't track you across other companies' apps or websites, so there's no tracking for a Do Not Track signal to turn off, and we don't respond to those signals differently. Because we don't sell or share personal information for targeted advertising, a Global Privacy Control signal has nothing further to opt you out of.

Changes to this policy

We'll update this policy when our practices change, and the effective date at the top will show the latest version. If a change is material, such as collecting a new kind of information or sharing it in a new way, we'll tell you in the app or by email before it takes effect, and ask for your consent where the law requires it.

Contact us

Chomp

• Email: support@feedchomp.com