Privacy policy

• Your account: your username, display name and email address, your password (only as a one-way hash, never the password itself), your picture (a cartoon Sylla draws, or a link to a picture you chose: nothing is uploaded) and your choices, like the theme and colour.
• Your study: the subjects and teachers you picked, the sessions and tasks you ticked, the grades you typed, your notes, your study plan, the days you studied (your streak), your level and achievements, and how your overview is laid out.
• Signing in: your passkeys (only their public half: the fingerprint or face that unlocks a passkey never leaves your device), the codes and links Sylla emails you, which stop working after a short time, and, if you use Continue with Google, the id Google gives your Google account.
• Mau: her settings, and the notes she keeps about you while remembering is on. Every note is listed in Settings, where you can delete it.
• Inviting friends: who invited you, the friends who joined through your link, and any reward you earned.
• Fixes you suggest to the shared syllabus, with your username, so the editors can read them. If you are an editor, the changes you make to the syllabus are logged with your name.
• Apps you connect: which apps and assistants you connected and what you allowed each one to do. If you build an app on Sylla, its details and a log of its requests: which part of Sylla it called, whether that worked and how long it took.

Sylla does not collect your exact location (only the country a connection comes from, see below), contacts, photos, files, text messages, payment details, health information or your phone's identifiers. The Android app asks for one permission, and only if you turn on its reminder: to show notifications.

To see how Sylla is used and to fix what breaks, Sylla counts each day: which parts of Sylla were opened, for how long and at what hour; whether that was in a browser, the installed app, the Android app or the desktop app; the kind of device, browser and system; the country the connection comes from (never your exact location); and the site you came from.

• Signed in, this is counted on your account. Signed out, it is counted under a code that changes every day, so a visitor cannot be followed from one day to the next.
• It never says what you ticked, wrote or scored. Sylla stores no IP address and sets no cookie for it.
• When something goes wrong, Sylla keeps the error and the part of Sylla it was in.
• To stop abuse, like guessing passwords or sending too many emails, Sylla counts attempts for each connection and each account. What is counted is scrambled first, so no address is stored, and each count deletes itself when its time is up.
• Vercel Web Analytics and Speed Insights count page views and how fast pages load, anonymously and without cookies.

• A cookie keeps you signed in. Sylla uses no advertising or tracking cookies.
• So that Sylla works without a connection, your device keeps the pages you opened and any ticks waiting to be sent. Signing out removes them.
• Your chats with Mau and with Help stay in that browser tab, and go when you close it or sign out.

Mau's chat and the Help chat are written by Claude, an AI model made by Anthropic. Mau's little reactions on your overview were written in advance, so nothing is sent for those.

• Chatting with Mau sends Anthropic your message, the last few lines of the chat, and a summary of your study: your subjects and their hours, sessions, tasks and months, what comes next, today's plan, recent grades, your pending tasks with their notes, and the notes she keeps about you. Anything she looks up to answer you goes too. Your name and email address are not sent.
• Talking to Mau with the microphone uses your phone's own speech recognition to turn your voice into words (on Android, Google's speech service does it). Sylla gets only the words, as if you had typed them.
• Asking Help sends Anthropic your question and the chat so far. Talk to a person keeps the chat in Sylla, with your email address so we can reply and your username if you are signed in, and emails it to Sylla's support. Only Sylla's admins see it, and the reply comes from support@sylla.study. An admin may ask Claude to draft or polish that reply, which sends Anthropic what you sent, the chat, the replies so far and your username and name if you were signed in, never your email address.
• Reporting a reply emails that reply, your message before it and what you wrote about it to Sylla's support, with your username if you are signed in, so we can stop it happening again.

Apart from a chat you send to a person, Sylla does not store or log these chats on its own servers. Anthropic handles them only to write the replies, under its terms for business customers, which do not let it train its models on them. You can hide Mau, stop her from remembering, or stop her from changing anything, in Settings.

These services act for Sylla, only to provide what is listed, and may keep data on servers outside your country:

• Vercel hosts Sylla and the anonymous analytics above. It handles your connection, including its IP address, to deliver the pages.
• MongoDB Atlas holds the database with your account and your study.
• Resend sends Sylla's emails: confirmations, sign-in codes, password resets and notices about your account.
• Cloudflare receives mail sent to support@sylla.study and passes it on.
• Anthropic writes Mau's and Help's chat replies.
• Google, only if you choose Continue with Google: it confirms who you are and tells Sylla your name, your email address and an id for your Google account. Sylla never sees your Google password.
• GitHub keeps the nightly backups, encrypted, and the desktop app's updates.

Sylla never sells your data or shares it with anybody else, except where the law requires it.

You can connect Claude, ChatGPT, Gemini, Grok or another app to your account. Once you allow it, that app can read or change what you allowed, and what it receives is then handled under that app's own privacy policy. Disconnect it at any time in Settings, under Apps and AI.

The Android app's home-screen widget and reminder connect the same way, when you press Connect and then Allow. They read today's plan and your streak, and tick a step when you press Done. What they read stays on your phone, in the app's own storage, and is left out of your phone's backups. Disconnect them in the app or in Settings.

• Other students never see your progress, grades, notes or plan. Sylla has no leaderboards.
• Editors, who keep the shared syllabus right, read the fixes people suggest.
• Share my progress makes a picture of your own numbers, with your first name and your picture, only when you press it. Where it goes then is up to you; Sylla keeps no copy.
• Sylla's admins see account details (username, name, email address and role), how many sessions each account has ticked, and the usage counts above, to run Sylla and to help when something goes wrong. The person who runs Sylla can also reach the database itself, to fix problems and restore backups.

• To run your account and show your progress, on every device you use.
• To keep accounts safe: sign-in limits, passkeys and notices about changes.
• To email you about your account. Sylla sends no marketing email.
• To see what is used and what breaks, and to make Sylla better.

• Your account and your study: until you delete your account.
• When you delete your account it goes straight away. Nightly backups keep a copy for up to 14 days, then it is gone.
• An account an admin deletes can be brought back for 30 days, and is then deleted for good.
• Usage counts: 400 days. Errors: 30 days.
• A connected app's request log: 30 days. The log of syllabus changes: 90 days. A suggestion, once an editor has decided on it: 30 days.
• A chat you send to a person, with our replies: 90 days after it came in or after the last reply. Deleting your account deletes the ones you sent while signed in.
• Emails you send to support: only as long as it takes to help you.

• See and change your details in Settings.
• Delete your account at any time, in Settings under Delete account. Deleting your account explains how, even if you can no longer sign in.
• Hide Mau, or turn off her memory and delete what she noted, in Settings.
• Disconnect any app or assistant in Settings.
• Ask what Sylla holds about you, or ask for it to be corrected, at support@sylla.study.

Everything travels over an encrypted connection (HTTPS). Passwords are stored only as bcrypt hashes, backups are encrypted, sign-in tries are limited, and changing your password signs out every other device.

Sylla is made for secondary school students. It is not meant for children under 13, and nobody under 13 should make an account. If you think a child under 13 has an account, write to support@sylla.study and it will be deleted.

If this policy changes, the date at the top changes with it, and anything important is announced in Sylla before it applies.