Privacy Policy

How we collect, protect, and manage your personal data

Last updated: September 12, 2026

Summary

Larry Learns ("the Service") is operated by Jupiter Technologies AB. We respect your privacy and are committed to protecting your personal data in compliance with applicable privacy laws.

This privacy policy applies to the Larry Learns website (www.larrylearns.com) and our iOS and Android apps, which together make up the Service. This policy describes what data we collect, how we use it, what third-party services we use, and what rights you have.

Clear data collection

We describe what we collect, why, and which tools are optional

Secure storage

All data is stored encrypted in the cloud with restricted access

No card details stored

Payments are handled by Stripe. We never store your card information

You are in control

You can request deletion of your account and all data at any time

1. Data Controller

Jupiter Technologies AB is responsible for the processing of your personal data.

Company: Jupiter Technologies AB
Reg. no.: 559574-6503
Address: Bidevindsgränd 8, 136 55 Vega, Sweden
Email: support@larrylearns.com

2. What data do we collect?

Account information

Email address: Required to create your account, send login links, and communicate important information about the Service
Username: Your chosen display name that appears on the leaderboard and in multiplayer
Password: Stored encrypted (hashed) via Firebase Authentication. We never have access to your password in plain text

Practice data

Quiz results: Your answers, scores, and time spent per section
Diagnostic results: Results from diagnostic tests that estimate your skill level
Study progress: Your goals (dream school, target score), study streaks, and progress
Multiplayer data: Match results and challenges

Technical information

IP address: For security, fraud and abuse prevention, and technical troubleshooting
Country: A two-letter country code derived from the request at signup or first return, used to understand where learners are. We do not store city or precise location
Device type and browser: To ensure the Service works correctly
Session cookies: Necessary to keep you logged in
Paid ad attribution: If you arrive through a Google ad, we save the ad's click identifier, source, campaign, keyword and landing page in your browser. If you sign up, the source, keyword and landing page are stored with your account and used to measure signups and purchases from our ads

Payment information

If you subscribe to Ace, payment is handled directly by the payment provider: Stripe on the web, the Apple App Store in the iOS app, and Google Play in the Android app. We never store your card details. We only store a customer identifier and subscription status to activate premium features in the Service.

3. Authentication and login

We offer multiple login methods via Firebase Authentication:

Email and password: Your password is encrypted and stored by Firebase Authentication (Google). We never have access to your password in plain text.
Google Sign-In (OAuth): You authenticate via Google's own login. We get access to your email address and name, but never your Google password.
Sign in with Apple: You authenticate via Apple's own login (available in the iOS app). You can choose to hide your email address via Apple's relay function. We never get access to your Apple password.

Session management uses JWT tokens with a 7-day validity period. You are automatically logged out after this period and need to log in again.

4. How do we use your data?

We process your personal data for the following purposes:

Purpose	Legal basis
Create and manage your account	Contract
Save quiz results, progress, and diagnostics	Contract
Manage your subscription and payment	Contract
Send transactional messages (password reset, account info)	Contract
Display leaderboard and multiplayer results	Legitimate interest
Generate explanations per question	Legitimate interest
Analyze usage patterns to improve the Service	Consent
Prevent abuse and ensure security	Legitimate interest

5. Third-party services

We never sell your personal data. We share limited data with the providers below to run Larry Learns, handle payments, and measure our paid ads:

Firebase Authentication (Google)

Handles login, account creation, and authentication via email/password, Google OAuth, and Apple Sign In.

Stripe

Handles payments and subscriptions for Ace on the web and sets cookies that help prevent payment fraud. We never store card details. Stripe is PCI DSS certified.

Apple App Store and Google Play

Handle Ace purchases in the mobile apps through Apple In-App Purchase and Google Play Billing. Payment happens entirely with Apple or Google; we never see your payment details.

Google Ads

Receives click identifiers and conversion events for signups and purchases, including the purchase amount. We do not send quiz questions, answers, scores, or study goals. Without your consent to optional analytics, Google Consent Mode keeps Google from storing advertising cookies.

PostHog

Product analytics and session recordings on the website (only after you allow optional analytics) and in the iOS and Android apps. Used to find bugs and improve Larry Learns. Recordings show the screens, including text you type other than passwords.

Arktis

Website traffic analytics on the website only. It starts counting visits when a page opens, before you answer the cookie bar. "No thanks" deletes the visitor ID it kept and stops it loading from the next page you open. Receives the page path, page title, referrer and coarse device details (browser, operating system, screen size) together with a random visitor ID. It does not record your screen and receives no quiz questions, answers, scores or study goals.

Neon (PostgreSQL)

Cloud database that stores all user accounts, quiz results, and progress data. Data is stored encrypted.

Vercel

Hosting and server infrastructure for the website. Handles web requests and content delivery.

Resend

Email service that sends transactional messages like password resets and account information.

Anthropic (Claude AI)

Generates explanations per quiz question. No personal data is sent to Anthropic. Explanations are permanently cached in our database.

6. Cookies and local storage

Essential cookies and storage

These are required for the Service to function and cannot be disabled:

Sign-in session: Keeps you logged in during your session
CSRF token: Protects against cross-site request forgery
Sound settings: Saves your sound effect preferences
Payment fraud prevention: Cookies set by Stripe to help detect fraudulent payments

Visit counting that starts on arrival

Larry Learns counts page visits with Arktis from the moment a page opens, before you answer the cookie bar. It records the page path, page title, referring site and coarse device details such as browser, operating system and screen size, together with a random visitor ID kept in your browser. It does not record your screen, and it never receives quiz questions, answers, scores or study goals. Choosing "No thanks" on the cookie bar deletes that visitor ID, and Arktis is not loaded at all from the next page you open. The page you are on when you choose may still be counted, because the tool provides no way to stop it once it has started. Everything else listed under optional analytics stays off until you allow it.

First-party storage for paid ad attribution

When you open a link from a Google ad, Larry Learns saves a limited first-party record in your browser and, if you sign up, with your account. We use it to connect the ad visit to a later signup and purchase. This ad attribution, and the conversion events sent to Google Ads, continue even if you continue without optional analytics. Without your consent, Google Consent Mode keeps Google from storing advertising or analytics cookies.

Optional cookies (require consent)

If you allow optional analytics, we turn on:

Product analytics in our own database (page paths, sessions and in-app events such as paywall views), linked to your account or, before you sign up, to a random visitor ID stored in your browser
Technical performance measurement via Speed Insights
Traffic analysis via Ahrefs Analytics
Product analytics and session recording via PostHog, including text you type other than passwords
Traffic and conversion measurement with cookies via the Google tag

If you continue without optional analytics, these stay off. To change your choice later, clear this site's data in your browser and the banner will ask again.

The choice covers optional product and content analytics. It does not turn off the separate paid-ad measurement described above.

The iOS and Android apps have no cookie banner. PostHog product analytics and session recordings run in the apps as described in section 5. On the website, PostHog starts only after you allow optional analytics.

7. Data storage and security

Your personal data is stored in a PostgreSQL database hosted by Neon. All data is protected with:

Encrypted database storage
HTTPS (TLS 1.3) for all data transfers
Passwords stored with strong cryptographic hashing via Firebase
Restricted access with role-based permissions
Regular backups

Retention period

Your data is stored as long as you have an active account. If you delete your account, we remove your personal data within 30 days. Anonymized statistics (not linked to your identity) may be retained to improve the Service.

8. Your rights

You have the following rights regarding your personal data:

Right to access: You have the right to know what personal data we process about you and receive a copy.
Right to rectification: You can request correction of inaccurate data.
Right to erasure: You can request that we delete your account and all personal data associated with it.
Right to restriction: You can request that we restrict processing of your data in certain situations.
Right to data portability: You can request your data in a machine-readable format.
Right to object: You can object to processing based on legitimate interest.
Right to withdraw consent: If processing is based on consent (e.g., analytics cookies), you can withdraw it at any time.

How to exercise your rights

9. Account and data deletion

You can request that your account and all associated personal data be deleted. Upon deletion we remove:

Your user account and profile
Email address and username
All quiz results and progress data
Diagnostic results and study goals
Multiplayer history and friend connections
Subscription data (Stripe connection is terminated)

Deletion is completed within 30 days of the request. Active subscriptions are automatically cancelled upon deletion.

Request deletion

Send an email to support@larrylearns.com with the subject line "Delete my account" and include the email address associated with your account. You can also contact us from within the app via profile settings.

10. Age requirements

Larry Learns is designed for students preparing for the SAT and ACT. The Service is not intended for children under 13 years of age.

We do not knowingly collect personal data from children under 13. If we discover that a user is under 13, the account will be deleted. Parents or guardians who suspect a child has registered can contact us at support@larrylearns.com.

11. Changes to this privacy policy

We may update this privacy policy as needed, for example when the Service changes, new features are added, or legislation changes. For material changes, we will notify you via email or through a notice in the Service.

The date of the last update is always shown at the top of this page. We recommend that you periodically review this page for any updates.

12. Contact us

Have questions about this privacy policy or how we handle your personal data? Contact us:

Jupiter Technologies AB

Email: support@larrylearns.com