What is stored, where it lives, who can see it, and how to delete it. Written to be read, not to be survived.
Last updated 15 October 2026.
There is no advertising, no analytics, no tracking pixels, and no third party buying anything. Alefya does not sell, rent or share personal information. Most people can use the entire app without an account, in which case nothing about them leaves their own device.
Everything — flashcards, study plan, reading progress, settings — is stored in your browser's own local storage on that one device. It is not transmitted anywhere. Clearing your browser data erases it, which is why the app offers a Backup & Restore panel that hands you the whole thing as text you can keep.
Accounts exist so your progress follows you between devices. Sign-in is handled by Supabase, which stores your email address and a hashed password. We never see your password.
| Stored | What it is |
|---|---|
| Email address | Your login, and how a password reset reaches you. |
| Study progress | Flashcards, review schedule, study plan, which texts you have read, settings. |
| Friends | A display name, and aggregate counts (cards known, minutes studied, streak) shown to people you have added. Only if you use the Friends feature. |
| Push subscription | An anonymous endpoint your browser issues, so a study reminder can reach your lock screen. Only if you turn reminders on. |
| Subscription status | Whether you have an active subscription, which plan, when it renews or ends, and the identifiers Stripe uses to refer to you and to it. Only if you subscribe or redeem a code. No card number, no billing address — those stay with Stripe and never reach us. |
| Tutor usage count | A number: how many tutor questions you have asked this month, so the allowance can be enforced. Only if you use Ask a Tutor without your own key. The questions themselves are not stored. |
That is the whole list. No location, no contacts, no device fingerprinting, no advertising identifiers.
If you have not added an Anthropic key, a tutor question goes to a small server of ours and from there to Anthropic, which answers it. The question and the answer are passed through and not stored — what is kept is the counter described above, so that an allowance can be counted. Anthropic does not train on it. Adding your own key, below, takes our server out of the path entirely.
Two features let you paste in a key you obtained yourself. Both are optional, and in both cases the key stays in your browser and is sent only to the company that issued it — it never reaches any server of ours, and it is deliberately excluded from cloud sync.
| Ask a Tutor | Your Anthropic API key. Your question goes directly from your browser to api.anthropic.com. You are billed by Anthropic; we see none of it. |
|---|---|
| Bible (English) | Your Crossway ESV key. Passages are fetched directly from api.esv.org and cached in your browser for your own reading. The ESV text is copyrighted and is never stored by us. |
| Supabase | Accounts and progress sync. Only if signed in. |
|---|---|
| Anthropic | Tutor questions, using your key. Only if you added one. |
| Crossway | ESV passages, using your key. Only if you added one. |
| YouTube | Embedded videos, through youtube-nocookie.com — the privacy-enhanced player. Nothing is downloaded or re-hosted. |
| Stripe | Checkout, and the subscription itself. Stripe is the merchant of record and holds the payment details; see their privacy policy. Only if you subscribe. |
| GitHub Pages | Serves the site itself. |
Alefya is not directed at children under 13 and does not knowingly collect their information.
Email support@alefya.me from your account address and everything associated with it is deleted — progress, profile, friend links, push subscription. No retention period, no "anonymised copy" kept for analytics. The one thing that does not vanish with it is the payment record itself: Stripe is required to keep invoices and refunds for tax and accounting purposes, and that is theirs rather than ours to erase. Cancel first and the charging stops; deletion handles everything else. You can also export everything first from the Backup panel in the app, or simply sign out, which leaves your data on your own device and untouched in the cloud.
If this page changes materially, the date at the top changes and the app says so.