Privacy Policy
How Aral.ai™ collects, protects, and handles your data. We operate under Republic Act No. 10173 (Philippine Data Privacy Act of 2012) with transparent, student-first safeguards.
Quick Student Summary (TL;DR)
RA 10173 Compliant
Governed by the Philippine Data Privacy Act with full data subject rights.
No Advertising or Data Brokers
We never sell your personal information, study uploads, or contact details.
Full Encryption in Transit
All uploads, tutor chats, and generation requests travel over HTTPS with restricted access.
Philippine Data Privacy Act (RA 10173) Controller
Aral.ai™ is run from the Philippines. Under the Data Privacy Act of 2012, we serve as the personal information controller for all study records, flashcard decks, and session data. You have the right to access, rectify, or request deletion of your information anytime.
Who we are
Aral.ai™ ("we", "us") is a study app at www.aralai.app, run from the Philippines. We are the personal information controller for the data described here under the Data Privacy Act of 2012 (Republic Act No. 10173). This policy explains what we collect, why, who processes it for us, how long we keep it, and how to delete it. Questions go to support@aralai.app.
What we collect
- Account: your email address, display name, and profile picture (from email sign-up, Google, or Facebook), and your plan.
- Your study materials: files you upload (PDFs, slides, documents, images, videos), links you add (YouTube, Google Drive share links), text you paste, and pictures or sounds you put on flashcards.
- What Aral.ai™ makes for you: notes, flashcards, quizzes, practice exams, tutor conversations, and audio.
- Study activity: review history and schedules, quiz and drill scores, topic readiness, focus timer sessions, streaks, exam dates, and your settings.
- Payments: which plan you bought, the amount, the date, and the payment processor's reference number. We never see or store card numbers or e-wallet logins.
- Waitlist and support: your name, email, referral code, and anything you write to us.
- Getting started: which onboarding steps your visit reached, under a random visit number made in your browser (linked to your account if you sign up), and your answers to how you heard about Aral.ai™, what describes you, and what you study for. Turning off analytics in cookie settings stops the onboarding step counts.
- Technical: your IP address and device information for security and rate limits, error logs, and items saved in your browser (login session, theme, and offline review state).
Why we use it
- To run Aral.ai™: turn your materials into notes, cards and quizzes, answer tutor questions, schedule reviews, and sync across devices.
- To keep the free tier fair and the service safe: usage limits, bot checks, and fraud prevention.
- To process payments and activate plans, and to answer support requests.
- To find and fix errors.
- To improve onboarding and learn where students find us. We look at totals, not at individual visitors.
We don't sell your personal data or your study materials, and we don't show ads.
How AI processes your materials
To make notes, cards, quizzes and tutor answers, Aral sends the relevant parts of your materials (text, and for videos and scanned pages, the file itself) to established AI providers and stores what comes back. The providers process it to answer our request. Reading your notes aloud runs on our own servers.
Aral sends only the study content a request needs, never your name, email, or account details. For now we use an AI provider's free plan, whose terms let the provider use submitted content to improve its services. As with any online tool, we suggest keeping highly sensitive documents, like medical records, IDs, or passwords, out of your uploads.
Who processes data for us
We work with these kinds of providers. Each handles data only to run its part of Aral, under its own privacy and data-processing terms:
What other people can see
Your study materials are private unless you explicitly choose to share them:
- Community Library: a deck you publish is public, including its cards and your display name. You can unpublish it at any time; copies other people already saved stay with them.
- Share links: a shared reviewer or course can be opened by anyone with the link until you turn sharing off.
How long we keep it
- Your account data is kept while your account exists.
- Deleting a file, deck, or session removes it and what was made from it.
- Deleting your account removes your profile, study data, and the files you uploaded.
- Server logs and our providers' backups may keep copies for a limited time before they are overwritten.
- Payment records are kept as long as tax and accounting rules require.
Your rights under RA 10173
Under the Data Privacy Act you can ask to be informed about, access, correct, delete, or get a copy of your personal data, and object to its processing. Email support@aralai.app and we'll reply within 30 days. If you think we mishandled your data, you can also complain to the National Privacy Commission (NPC).
Google sign-in and user data
When you sign in with Google we receive only your email address (email), your name and profile picture (profile), and your account identifier (openid).
To sign you in and set up your Aral account. We never access your Google Drive or Gmail. Data travels over encrypted HTTPS and is protected by row-level database security.
We do not sell or transfer your Google user data to data brokers or advertisers, and we don't use it to train AI models.
Aral.ai™'s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Deleting your data
You can delete your account and all associated study files at any time. Visit our dedicated Data Deletion page for instant instructions and self-service request submission, or email support@aralai.app.
Republic of the Philippines • RA 10173 Compliant
Questions or inquiries? Email us anytime at support@aralai.app