Data and privacy
Where your data lives
A short summary of what our privacy policy says about where your data is stored and what the AI receives.
Where your data is stored
The database and stored files are hosted in Frankfurt; stored files can also be delivered through a global network.
Signed-in pages are rendered in Frankfurt as well.
Hosting, email, payments, error reports and the AI step go through companies outside the EU.
Who does what, and where
- Supabase (database, sign-in and stored files): the instance we use is in Frankfurt; Supabase names four cases in which data leaves that region: the details of our own customer account with Supabase; support requests handled by a team around the world; usage information such as logs; stored files delivered through a global network.
- Vercel (hosting): server-side processing, including the rendering of signed-in pages, takes place in Frankfurt. A routing layer in front of it checks your session cookie at the location closest to your internet connection, and access logs are created where a request is handled. Vercel also processes data in the USA. For anonymous audience measurement we use Vercel Web Analytics, and for measuring loading performance Vercel Speed Insights; neither sets cookies.
- Upstash (rate limiting): hosted in Frankfurt only.
- Sentry (error reports): error events are stored in its EU region in Frankfurt; only the administrative data of our own Sentry account stays in the USA.
- Resend (email): emails are sent via Ireland; their content and delivery logs are stored in the USA.
- Anthropic (AI plan generation): stores data in the USA and, in the default setting we use, may process a request in the USA, in selected countries in Europe and Asia, and in Australia.
- Stripe (payments): the data is transferred to Stripe, LLC in the USA; Stripe may pass it on to other group companies and sub-processors worldwide.
The privacy policy names every provider and every exception.
What the AI receives
To suggest a class plan, the AI works from structured class settings and from exercise data in our library: names, structured attributes and guidance written by the platform.
If your workspace has created exercises of its own, their names can be sent too.
A class plan you have published may be copied by our administrators into an internal reference corpus that measures the quality of AI-generated plans; for an assessment by a language model, that copy (exercise sequence and class settings) is sent to the AI provider.
From your feedback, the AI provider receives only aggregated information: how often plans of a style were rated negatively, and which exercises were removed.
The AI never receives the title, description or notes of a class plan, your personal cues, or the comment you add to feedback.
We use Anthropic under a contractual training opt-out: your inputs are not used to train or improve any model.
How an AI plan reaches you
Your personal cues are added on our server, and only after plan generation has finished.
We mark AI-generated class plans as such: visibly on the platform, on pages shared by link and in the print view.
Your controls
You can download the data of your account in your account settings at any time, as one JSON file.
You can request the deletion of your account in your settings; if a subscription that renews automatically is running for your workspace, cancel it first. The request is carried out automatically after a 30-day grace period, with the exceptions section 6 of the privacy policy names.
The full text
This page is a summary. The privacy policy has the full text, including the legal basis for each processing step.