Local learner records
Learner profiles, course enrollments, progress, transcripts, competency scores, review items, source metadata, and related local records are stored in the application’s SQLite data store.
Credentials and consent
Provider credentials are encrypted with Electron safeStorage and excluded from SQLite learner exports, renderer-readable settings, and migration backups. Privacy consent version 2 covers provider transmission, voice sessions, Tutor Brain operations, bounded transcripts, source manifests, and Course Studio provider operations; missing or stale consent blocks affected operations.
Bounded provider requests
Depending on configuration, microphone audio, transcripts, prompts, bounded source excerpts, lesson context, or assessment context may leave the device. The full source corpus and unrestricted filesystem paths are not sent.
Export, delete, reset
The app provides local learner-data export, support-report export, session deletion, learner-data reset, retention controls, and no-history mode. These controls do not delete data already held by OpenAI, OpenRouter, Gemini, Soniox, local model software, or other providers. The app has no analytics, telemetry, crash reporting, advertising identifiers, or tracking pixels.