Privacy Policy

Last updated: August 9, 2026

This policy explains how ALL: Exam Prep Coach ("ALL", "the app", "we", "us") handles your information in our iPhone, iPad, and Mac apps.

The short version. ALL is local-first. You don't create an ALL account, and there's no server of ours behind the app — your decks, notes, and progress live on your devices and in your own private iCloud. We don't run analytics inside the app, and we don't use advertising or tracking technologies. Optional cloud AI is off until you add your own provider key and explicitly allow the selected provider to process the material you choose. (Our marketing website uses privacy-preserving, cookieless analytics — no personal data, no cross-site tracking; see Our website below.)

What we collect

We do not collect your personal information on a server operated by us. There is no ALL account to create, and we cannot read your private iCloud study database. We don't sell your information, and we don't use it for advertising. If you deliberately enable optional cloud AI, the selected AI provider receives the material described below solely to return the result you requested.

What's stored, and where

The study material you add or create, and your learning progress, are stored on your device and may sync through your own private iCloud database so your Apple devices stay in step. Apple controls that iCloud service; Active Learner Labs cannot view your private database. If you choose to add your own AI provider key (optional — see below), the key is stored in the device Keychain and is not synced in your ALL profile. We don't receive this content or your key.

AI features

By default, ALL generates decks and tutor explanations on your device. Content is sent to an outside AI service only on the optional "your own key" path described below.

How optional AI providers protect and retain content

The request goes directly from your device to the provider under your own API account. Active Learner Labs does not proxy, receive, log, or store it. Anthropic and OpenAI state that API inputs and outputs are not used to train their models by default. Their standard API services may retain request content for up to 30 days for safety and abuse monitoring, unless your provider account has different retention controls or retention is required by law. We support these providers because their published API privacy and security safeguards provide protection comparable to this policy; their own terms and settings ultimately govern their processing.

Microphone, recordings, and speech

Two features use the microphone: Record a lecture, which captures a lecture and turns it into a study set, and answering a question out loud. Both are started by you and only run while you have them open.

Your audio stays on your device. Recording is written to a temporary file on the device, and speech is transcribed using Apple's on-device speech recognition — the app explicitly requires the on-device recogniser rather than allowing a fall back to server-based recognition. Your voice and your recordings are not uploaded to us, and we never receive them. Where on-device recognition isn't available for your language, the feature declines to run and tells you, instead of sending your audio elsewhere.

Temporary audio used to build a transcript is deleted once the transcript is produced. If the app is interrupted mid-recording, the transcript in progress is kept on your device so it can be recovered next time you open the app; you can discard it.

The resulting transcript is study content, and is stored and synced exactly like the rest of your material (see What's stored, and where). If — and only if — you deliberately turn on an optional cloud AI provider and ask it to generate from that transcript, the text of the transcript is sent to that provider under the terms described above. The audio itself is never sent.

Apple services

Purchases (the one-time ALL Unlimited unlock) are handled by Apple; we don't see your payment details. Apple provides us with aggregate, privacy-preserving App Store analytics, such as download and unit counts — this is Apple's developer reporting, not tracking inside the app. If you opt in under your device Settings, Apple may share anonymized crash or diagnostic reports with developers; that is an Apple setting you control, not data the app collects.

Sharing decks

When you export a deck to send to someone, it goes wherever you choose to send it (for example AirDrop, Messages, or Files). There's no server involved, and we don't access your contacts.

Tracking and advertising

ALL contains no third-party analytics, advertising, or tracking software. We do not use advertising identifiers, and we do not track you across other apps or websites.

Our website

This policy also covers our marketing website (the page you're reading). The site uses privacy-preserving, cookieless analytics (Vercel Web Analytics) to understand aggregate visits and, where supported, aggregate taps on its App Store buttons — for example page views, the referring site, approximate country, device type, and the coarse source and button placement associated with a tap. It does not use cookies, does not build a profile of you, and does not track you across other apps or websites; it collects no names, emails, free-form link values, or advertising identifiers. Our site is hosted by Vercel, which processes this aggregate data on our behalf. The app itself contains none of this.

Children's privacy

ALL is rated 4+ and suitable for a general audience. It does not collect personal information from anyone, including children. There is no account, and the app does not send personal information to us. If you believe someone has provided us personal information through a support request and you'd like it removed, contact us at the email below.

Data retention and deletion

Because your content lives on your devices and in your own private iCloud, you control it: delete individual decks and notes within the app, manage your iCloud data through Apple, or remove the app and its iCloud data to erase it. Turning off cloud AI or clearing a provider key stops future transfers; deletion or retention of a request already sent is controlled through your provider account and its policy. If you've contacted support and want that correspondence deleted, email us.

Your rights

Depending on where you live, you may have rights to access, correct, or delete personal information a company holds about you. Because ALL keeps your study data on your device and we don't collect it, most requests are satisfied by deleting content in the app. If you have a question about your rights, contact us at the email below.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

Questions about privacy? Email hfoster17@gmail.com.