Privacy

Last updated: 28 September 2026

What AskWrong keeps about you, why, who else receives it, how long it stays, and how to get it back or erase it. There are no analytics scripts, no ad networks and no trackers: nothing runs in your browser to watch what you do, and no analytics company receives data about you. The rules for using the service are in the Terms of Service.

Who is responsible

AskWrong is run by its owner, established in the EU, who is the controller of your personal data under the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP). For any question about your data, or to use any of the rights below, write to privacy@askwrong.com.

What we process and why

Each item names the data, the purpose and the legal basis under GDPR Art. 6(1). Contract means we need the data to give you the service you signed up for. Legal obligation means a law requires it. Legitimate interests means the interest the item names; you can object to it (see Your rights). Consent means you can withdraw it at any time; withdrawing it does not make earlier processing unlawful.

Your account

DataYour email address, your password (stored in a form that cannot be read back) and the sign-in sessions on your devices. If you sign in with Google: your Google account ID and the email address Google sends us.WhySign you in, keep the account secure, and send the emails the account needs: address confirmation, password reset, deletion links, and a notice when someone tries to sign up with your address. We send no marketing email.BasisContract.

What you learn with

DataYour questions and answers, text you paste, documents and photos you import, what you dictate, your notes and highlights, and what the app generates from them.WhyRun Ask, Theory, Practice, Interrogate the flaw, Feynman, Grill and Schedule.BasisContract.

Your learning record

DataFor each concept, the grades and confidence of your answers and the review schedule built from them, without the text of your answers; your study planner; and the progress, points and preferences that sync across your devices, including how Automatic picks a model's host.WhyDecide what you review and when, and show the same state on every device.BasisContract.

Usage and credits

DataWhat you use per day and per month: requests, credits, cost per model, scanned pages and seconds of voice input.WhyApply your plan's limits and credits.BasisContract.

Billing (paid plans)

DataYour plan, your subscription status, and the payment notices Lemon Squeezy sends us, which carry your name, your email, and the brand and last four digits of your card. Your full card number never reaches us.WhyGive you the plan you paid for and answer billing questions.BasisContract; for the payment notices, legitimate interests: proving what was paid and answering disputes.

Calendar sync (optional)

DataThe permission Google gives us to write to your calendar, stored encrypted, and the review events we write there.WhyPut your reviews in your calendar.BasisContract, at your request.

Leaderboard (optional, not live yet)

DataThe handle you choose, your count of active days and your rank.WhyRank the people who chose to be ranked. Details below.BasisConsent.

Security and running the service

DataA record of each AI request (its size, its cost and the model's host), tied to your account in coded form; a record, without text, of each request our safety screen blocks; your IP address, held briefly in memory to limit requests and never stored; server logs of requests and errors, which never contain your questions or answers; encrypted backups.WhyStop abuse, keep costs in check, recover from failures and fix faults.BasisLegitimate interests: running the service securely and within its costs, and recovering it after a failure.

Usage statistics

DataCounts and costs across all accounts, such as sign-ups, active users and AI requests. The totals we keep name no account.WhyUnderstand how the service is used and what it costs.BasisLegitimate interests: understanding how the service is used and what it costs.

When you write to us

DataYour email address and your message.WhyAnswer you, and act on a request about your rights.BasisLegitimate interests: answering you; legal obligation when you use one of your rights.

Almost all of this comes from you. Two exceptions: Google, if you sign in with Google, and Lemon Squeezy, when you pay.

Where your content goes to be answered

Your content has to reach an AI model to be answered, in every part of the app that generates something. It goes to the company that runs the model you picked, its host, usually through an intermediary: Hugging Face or OpenRouter. Before you send, the model picker shows the host, where it runs and what its terms say about keeping data and training on it, and warns you when the host may keep what you send or when its terms are unknown.

If a host fails, the request can be retried on another host that serves the same model, which may be in another country. A retry never moves to a host your privacy setting excludes, nor to a host that keeps data when your pick does not. A free model is the exception: when it fails or the free models are at capacity, it hands the request to the paid model the picker names under it, whatever your privacy setting.

Hosts keep and use data under their own terms. For paid models reached through OpenRouter, your privacy setting in Settings decides what we ask. With Standard, we ask OpenRouter to skip hosts that train on what you send. With Private or EU only, we also ask it for hosts that keep nothing of what you send. OpenRouter serves its free models only to accounts that allow training, so the host of a free model may train on what you send. OpenRouter can also serve a model from a host we have not assessed; the picker then shows its terms as unknown.

We do not train any model on your content, and we keep no separate log of your conversations with the models. Two narrower cases: photos and scanned PDFs you import go to Mistral for text recognition, and voice input goes to OpenAI to be turned into text. We never store the audio.

Your history and learning record

Much of what the app keeps, it files automatically as you learn, not only items you save by hand. A signed-in account gets a history that follows you across devices: the courses, lessons and practice sets generated for you, the documents you import, and a record of each session with its title and where you left off. Your full conversation text is stored too, encrypted, unless you switch off Save full transcript in your settings; it is on by default. On the Free plan, each item of this history is purged automatically 30 days after you last use it. On a paid plan, it is kept while the plan is active and purged automatically 30 days after the plan ends. Every plan caps how many sessions, and how much transcript and lesson text, the history holds; past that limit, the oldest go first. Some things are kept for the life of the account: the names of your topics and concepts, the grades your answers get, the review schedule built from them, the progress and preferences that sync across your devices, and the last Ask question saved by earlier versions of the app. You can delete this history anytime, and deleting your account erases all of it. We do not train any model on your content.

Transcripts, lessons, notes kept on our server, and imported documents and photos are stored encrypted. Switching off Save full transcript still keeps the title of each session, which for Ask is the start of your first question.

Photos you attach as proof of your written work are stored encrypted, without their location data. They go to no AI model unless you ask the app to grade from the photo: then Mistral reads it and the model you picked grades the text. On the Free plan, notes and highlights stay in your browser only.

How long we keep things

Life of the account means until you delete it. Deletion erases that data at once; only the backups keep a copy, for up to 35 days.

Who receives your data

We never sell your data and never share it for advertising. These companies process it for us, or receive it to do their part of the service. The Country column gives where each one is based, and where it keeps your data when that differs.

Transfers outside the EU, the EEA and Switzerland

Your data leaves the EU, the EEA and Switzerland when it goes to a recipient above that is based outside them. We count a United States company as a transfer even when it keeps your data in the EU, and even a model hosted in France is reached through an intermediary based in the United States.

The EU and Switzerland recognise the United Kingdom and Canada as giving adequate protection, so transfers there need no further safeguard. To learn which safeguard covers a transfer to any other recipient, and to get a copy of it, write to privacy@askwrong.com.

Cookies and browser storage

We set two cookies, both strictly necessary to keep you signed in: one lasts 15 minutes, the other 30 days. The app also keeps data in your browser to work: the Ask conversations kept on this device, your notes and highlights, your preferences and a copy of your synced state. Clearing this site’s data in your browser removes them.

All of it serves the service you asked for, so there is no consent banner. There are no analytics or advertising cookies, and the pages load nothing from third parties. Your browser reaches Google or Lemon Squeezy only when you choose to sign in with Google, connect your calendar or pay.

The leaderboard

The leaderboard is not live yet. When it is, it is opt-in: nothing about you appears on it unless you join. It shows the handle you choose, your count of active days and your rank, in a top 25 that anyone can read, and never your email or what you learned. The legal basis is your consent.

You can opt out at any time: your handle leaves the board at once, a withdrawal of consent under GDPR Art. 7(3) that leaves the rest of your account untouched. The handle stays on your account, hidden; write to us and we delete it.

Automated decisions

No decision with a legal or similarly significant effect on you is made by automated means alone (GDPR Art. 22). The app grades answers and schedules reviews automatically; that shapes your study and nothing else. Some limits apply automatically, the same way for everyone: plan limits, limits on how fast requests can be sent, a lock after repeated failed sign-ins, and a short pause of your AI requests when the safety screen blocks several of them. Suspending an account is a decision a person makes.

Your rights

Under the GDPR and the FADP you can ask for access to your data, a copy you can take elsewhere, correction, erasure and restriction. You can object to anything we do on the basis of legitimate interests, and withdraw consent at any time. Write to privacy@askwrong.com for any of these; we answer within one month.

• Copy of your data: Download my data, in your account settings, gives a file in JSON, a common machine-readable format, with your profile, courses, lessons, sessions and transcripts, imported documents, notes and your learning record. It does not include everything we hold, for example your synced settings, generated practice sets and flaw drills, billing and usage records, or the images of photos you imported. Ask us by email for any of these.
• Erasure: delete your account with your password, or with a single-use link we email you. Deletion covers everything tied to your account; what remains is listed under After you delete.
• Correction: you can ask us to correct anything inaccurate we hold about you; to change your email address, write to us.
• Complaint: you can complain to the data protection authority where you live, where you work, or where you think we broke the law (in the EU or the EEA), or, in Switzerland, to the Federal Data Protection and Information Commissioner (FDPIC).

What you have to give us

An email address and a password, or a Google sign-in, are needed to have an account; without them we cannot create one. The content you send is needed to answer it. Nothing else is required, and no law obliges you to give us any data. If you never confirm your email, the account cannot be used and is not deleted automatically; write to us and we delete it.

After you delete

Deletion erases your data from the app’s records and stored files. These outlive it:

• Encrypted backups keep a copy of the app’s records for up to 35 days.
• Lemon Squeezy keeps its own invoice and tax records as merchant of record. Deleting your account also cancels your subscription.
• Resend keeps a delivery log of the emails it sent you, on its own retention schedule.
• AI request records stay for up to 30 days, no longer linked to your account. Payment notices stay without your name, email or card details.
• An alert about your account that reached our own mailbox stays there; it carries your account ID and no content.
• Model hosts keep what you sent them under their own terms.
• Usage statistics already computed stay; they name no account.

Changes to this page

When this page changes, the date at the top changes with it. The rules for using the service are in the Terms of Service.