Privacy
What LearnLLM saves, what stays in your browser, and what happens when you run an AI model.
Updated
Your account and progress
LearnLLM is an independent educational project. When you create an account, the site stores your name and email. Password sign-up stores a password hash, not your readable password. Google sign-in also provides your profile picture and account identifiers; the sign-in integration stores provider tokens.
Your lesson visits, completion status, recorded study time, and challenge completions are linked to your account so you can return to your work. Challenge records can include submitted code.
Where your work is saved
- Browser drafts
- Playground prompts and recent runs, written challenge drafts, theme preferences, and a local copy of progress use browser storage. These copies do not automatically appear on another device.
- System builds
- When a signed-in build workspace saves, its code, example input, current step, and completed checks are stored with your account. The workspace shows whether saving succeeded.
- Downloads
- A downloaded project or response is a file on your device. LearnLLM cannot remove that file for you.
- Mobile app
- The LearnLLM iOS and Android app stores bookmarks, written practice, recent experiments, and downloaded lesson copies on your device under your account. Lesson and practice completions sync to the same LearnLLM account when connected. Sign-in tokens use the device's secure storage. The native app does not include the website's analytics or session-recording libraries.
Private feedback
When you send feedback, LearnLLM stores the topic, message, public page path, submission identifier, review status, and timestamps in its database, linked to your account. Query text and URL fragments are removed. We do not ask for an extra email address or attach your prompts, lesson progress, or IP address to the report.
Only LearnLLM administrators can review reports in the private feedback inbox. Reports are not posted to GitHub. Feedback text is not sent to analytics or included in application error logs. Avoid passwords, API keys, private account details, and other people's information.
Reports remain until your account is deleted; there is currently no automatic expiry. Account deletion removes the linked feedback records. Provider backups have their own retention settings. Unsent feedback exists only on the open page and is lost if you close or refresh it.
When you run an AI model
Running a prompt or asking the challenge assistant sends the messages needed for that request through LearnLLM to the selected model provider. A system build can send its example input and instructions to Groq. The provider receives that content to generate an answer.
Available providers can include Groq, OpenAI, and Anthropic. Requests may pass through a configured API gateway. Their processing and retention rules also apply; a local draft is not a promise that a submitted prompt stays on your device.
Use made-up examples instead of passwords, API keys, private documents, or other people's personal information. See Groq's data handling, OpenAI's API data controls, and Anthropic's data retention information.
Services that help run the site
Vercel hosts LearnLLM. Hosting, database, and rate-limit services process the information needed to serve pages, save work, and limit repeated requests. This can include IP addresses, request details, account identifiers, and saved records.
Optional website analytics loads only after you choose Accept analytics. Google Analytics, and PostHog when configured, receive public page paths and limited learning events such as lesson opens and completion. URLs exclude query strings and fragments; unknown paths are replaced with a generic path. We do not send account IDs, names, emails, prompts, answers, working notes, or feedback to analytics.
Analytics providers receive ordinary connection and browser information when your browser contacts them. Google Analytics can recognize a browser using analytics cookies. Google signals, advertising personalization, user-provided data, and enhanced measurement are disabled. Google Analytics event and user data retention is set to two months without resetting on new activity; aggregated reports may be retained longer. See Google's privacy policy.
You can decline analytics or withdraw consent through Analytics settings on any page where analytics is configured. Withdrawal stops future collection and attempts to remove this site's analytics cookies; it cannot recall requests already sent or erase provider records. Your choice applies to this browser, not every device. The native app does not use this website analytics integration.
Sentry receives errors and technical diagnostics when configured to help find broken pages. Diagnostics and the services needed to run the site are separate from optional usage analytics. Automatic session recordings are disabled in both Sentry and PostHog; PostHog's automatic interaction capture is also disabled.
See cookies and browser storage for the difference between sign-in storage and analytics. These services may process information in countries other than your own; this page does not promise a particular storage location.
Your copies and account records
You can review your profile in Settings, view saved progress on the Dashboard, and use the download controls in supported workspaces. Clearing site data removes browser copies and may sign you out. It does not delete records already saved to your account or data already sent to a model provider.
You can delete your account and its saved learning records after signing in again. The mobile app also offers this control in Library. Deletion does not remove independent browser copies, downloaded files, or provider logs. Accounts with subscription records need billing resolution first. The current application does not automatically expire account progress or offer a full account export. Provider logs and backups have their own retention settings; no single deletion deadline is promised here.
Privacy questions
A support email is not currently published. The Contact page explains the available feedback tools and their limits. Sending feedback does not automatically delete your account or change billing. Do not include private account details in your report.
Privacy rights depend on where you live. This page describes the current product and does not limit rights provided by applicable law.