The short version
- Your child’s name, age, profile and records live on your own device. There are no accounts. We have no copy.
- To write a plan, a lesson or a reading passage, the app sends Anthropic (the maker of Claude) what you entered about your child: age, grade, learning differences, interests, language and country, and your own first name. Your child’s name goes only in a progress report you ask for. You are told this and asked to agree before the first time.
- On the web, that goes from your browser straight to Anthropic under your own account. In the phone app it passes through our server, which forwards it and keeps none of it. The server keeps a random install id and a count of lessons written.
- No analytics, no advertising, no tracking, no cookies. The app loads no third-party code; the phone app carries the store’s own purchase library and nothing else.
In your browser or on your computer
The web edition has no server and no account system. Everything The Learning Loop knows about your family is stored in your browser’s own storage, on your machine. Nobody at The Learning Loop can see it, because it never reaches us. Clearing your browsing data deletes it; the Save a copy button in Your data hands you the whole of it as a file, and Erase removes it from the device.
Your Anthropic key is stored in the same place and is sent only to Anthropic. We never see it.
The files that make up the app are served from a web host (Vercel). Like any website, that host sees ordinary web-server traffic: your IP address, the time, and which file was asked for. It does not see your family’s data, which never leaves your device. The app keeps a copy of its own files on your device so it opens without a connection; that copy holds no data about you.
In the phone app
The app from the App Store or Google Play keeps your family’s data in a file in the app’s own private storage on the phone, with the same Save a copy and Erase. On an iPhone that file is part of your own device backup if you have one switched on (iCloud or your computer). On Android it is excluded from Google’s app backup.
The install id
When you start the app it is given a random id by the purchase library (RevenueCat). It is not your name, email or phone number, and it is not linked to your Apple or Google account by us. It is how the server knows which install a lesson request came from, and which installs have a subscription. Deleting the app deletes it; a reinstall gets a new one.
Our server
In the phone app a request to write a plan, lesson or passage goes to our server, which adds our Anthropic key and forwards it to Anthropic. The reply streams back the same way. The server keeps no prompt, no reply and nothing you wrote. What it keeps, in a database (Upstash Redis) reached only by the server:
- the install id and a count of calls made: for a subscription, this month’s count (kept 40 days), one for the subscription, kept under the purchase library’s first id for it, so your phones share it; for the free allowance, a lifetime count for each install (kept 400 days);
- if you bought top-up lessons, how many of them are used: one count, kept under the same first id, so a reinstalled app that restores them finds it, and kept as long as the top-ups, which never expire;
- which plan the install holds and how many top-up lessons it bought, cached for ten minutes;
- short-lived counters by network address, to stop abuse (a minute to two days).
The server writes one log line per request to its host’s logs, kept briefly by the host: a hash of the install id (not the id), the plan, the model, Anthropic’s status code and request id, how long it took, and a short reference shown to you in any error message. Never a prompt or a reply.
Report this lesson
Under every lesson the app writes there is a Report button. If you use it, the lesson text, your note, the app language and version, and the install id are sent to us and kept for 90 days so we can read what went wrong. A lesson never contains your child’s name. Nothing is sent unless you press it.
Subscriptions
Payment is taken by Apple or Google under their terms; we never see your card. RevenueCat, which handles subscriptions for us, receives the purchase record from the store and the install id, under its own privacy policy. We do not send it anything about your family.
What goes to Anthropic, in either edition
Claude does the writing. To write for your child it needs to know about them, so a request carries what you entered at setup: age, grade, learning differences, interests, language and country, and your own first name. The child’s name is sent only in a progress report you ask for, because the report is addressed to them. Practice sheets made by rules are made on your device and send nothing anywhere: maths, early reading, English grammar, logic, science and geography calculations, reading music, computer science, personal finance, AI and data, and home economics.
Checking work is the one place a picture is sent. When you ask for a finished page to be marked, the app sends the questions, the answers as you typed them or a photo of the page you chose, shrunk on your device first. The photo is sent once, to Anthropic (through our server in the phone app, which keeps nothing), and is not kept by the app or by us. What the app keeps on your device is the marks and the notes that came back. Keep faces out of the frame; the app says so each time.
Anthropic handles what it receives under its privacy policy and its terms for its API. We do not control Anthropic. Before the first request the app shows you this list and asks you to agree; the date you agreed is kept on your device.
Read-aloud uses your browser’s or phone’s own voices. Whether a voice runs on the device or at the browser maker’s servers is the browser’s choice, not ours.
Children
The Learning Loop is a parent’s tool. Everything about a child is entered by the parent, and the child’s own screen (the drills behind the passcode) stores its marks on the device and nowhere else. We do not create accounts for children, do not knowingly collect personal information from a child directly, and do not show advertising. If you believe a child has sent us something through the app, message us and we will delete it.
This website
These pages set no cookies and run no analytics. The worksheet demo on the home page runs in your browser and sends nothing. The typefaces are loaded from Google Fonts, so Google sees your browser’s request for them, as it does on most of the web. The WhatsApp link opens WhatsApp, under Meta’s terms.
Your rights, and how to delete things
Because almost everything is on your device, you can see it, copy it and erase it yourself at any time, from Your data in the app. For the little we hold, you have the right to know what it is, to have it corrected or deleted, and to object: message us and it is done. What we can delete on request is a reported lesson and the counters tied to an install id; we have nothing else. The phone app shows a short reference for its install under Your data, with a copy button: send it with the message so we know which one is yours. The reference is a fingerprint of the id, not the id itself, so it cannot be used to spend your allowance.
We are in the Philippines and keep its Data Privacy Act. If you are elsewhere, the rights your own law gives you apply to the little we hold, and you may raise a complaint with your local authority.
We will never sell data about your family, and we have none to sell.
Questions, and changes to this page
The Learning Loop is made by Omri Goren, Metro Manila. If this page changes, the date at the top changes with it and the change is explained in plain words, not slipped in. Anything unclear, ask.