Privacy Policy

Last updated: July 15, 2026

This Privacy Policy describes how Science Based Learning ("SBL", "we", "us") handles information across our properties: the sciencebasedlearning.com website, the SBL iOS app, and the SBL Android app. SBL is operated by Archieboy Holdings, LLC.

This policy supplements the master Archieboy Holdings privacy policy, which governs all Archieboy properties. Where the two differ, the more product-specific terms below apply to SBL.

What we collect

  • Website account and email information: if you choose to create a website account or request a guide, we may collect your email address, display name, password hash, consent, and delivery history. A website account is separate from the mobile app and does not sync mobile progress.
  • Learning activity: phrases marked as learned, selected language and level, saved vocabulary, streaks, preferences, and tool usage counts are stored locally on your device. They do not currently sync between devices.
  • AI request data: text and audio you submit to AI-powered tools is sent through our servers to the processors listed below. We may retain request metadata, generated responses, and live-conversation transcripts for up to 90 days for delivery, safety, debugging, cost accounting, and abuse prevention. Standard web-server logs may also contain request parameters from older app versions.
  • Anonymous user ID (mobile apps): an alphanumeric identifier the app generates the first time it runs, used to attribute server requests to a session. It is not tied to your name, email, or any device identifier. You can reset it by reinstalling the app.
  • Pseudonymous AI safety data: live-conversation session records may include a keyed one-way hash derived from the request's source network address. The session record does not retain the raw address. We use the hash only to apply short-term security, abuse-prevention, capacity, and fair-use limits across repeated app installations from the same connection.
  • First-party product, purchase, and marketing events: app platform and version, onboarding and feature milestones, purchase-funnel outcomes, verified Apple App Store and Google Play purchase, subscription, refund, and entitlement lifecycle events, product, price and currency when provided by the store, and anonymous website-to-store clicks with the page, placement, limited campaign tags, and referring hostname when available. Store transaction identifiers and Google Play purchase tokens are retained only as one-way hashes. On Android, Google Play may return the limited source, campaign, landing-page, and store-button placement values that our website placed in the install link. We ignore advertising click identifiers. These records do not include the external referring page path, learning text, audio, transcripts, names, email addresses, full payment details, advertising identifiers, or device fingerprints.
  • Session attribution: if a visit includes campaign tags or an external referring hostname, the website keeps only those limited values in browser session storage so they are not lost when you browse to another SBL page before choosing an app store. Browser session storage is cleared when that browsing session ends.
  • Standard server logs: IP address, request timestamps, user agent — collected by our web server and retained briefly for security and debugging.

What we do NOT collect

  • No advertising identifiers, device fingerprints, or cross-app tracking.
  • No advertising identifiers or third-party advertising or analytics SDKs in the mobile apps. We may use limited first-party product events to understand whether onboarding and learning features work.
  • No location data.
  • No contacts, photos, files, calendar, or other personal data on your device.
  • No ads are displayed inside the mobile apps.

How we use information

We use the information above to:

  • Provide the learning tools you request (translations, audio narration, AI feedback, etc.).
  • Save learning progress locally on your device.
  • Deliver requested website resources, operate optional website accounts, and respond to support requests.
  • Measure app activation, feature use, purchase-funnel steps, reliability, and AI operating costs using first-party event records.
  • Improve the service, prevent abuse, and meet legal obligations.

Third parties we share with

To deliver AI-powered features, certain data is transmitted to the following processors:

  • OpenAI — text generation and speech generation for learning activities.
  • Google Gemini — real-time language conversation and speech processing.
  • ElevenLabs — text-to-speech narration in the target language and English.
  • Apple App Store and Google Play — in-app purchases, subscription status, billing, and purchase restoration. We do not receive your full payment-card details.
  • Amazon Web Services — hosting, databases, logs, and transactional or requested email delivery.
  • Google Ads and Meta (website only) — limited marketing tags may receive page visits, referral or campaign data, device or browser information, and conversion events. These technologies are not embedded in the mobile apps.

These providers process the request data we send them to return a result. We do not sell your data to any third party.

Children

SBL is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us and we will delete it.

Data retention

  • Optional website-account data is retained while the account is active and as needed for legal, security, and delivery records.
  • Server logs are retained for up to 90 days.
  • AI request records and live-conversation transcripts may be retained for up to 90 days, then deleted or de-identified unless a longer period is needed to investigate abuse, a security issue, or a legal obligation.
  • First-party product events, bounded store purchase-lifecycle metadata, hashed transaction identifiers, and anonymous website-to-store click records are retained for up to 13 months so we can compare onboarding, reliability, retention, refunds, and purchase-funnel performance over time.
  • We do not use your content to train our own general-purpose AI models.

Your rights

You can:

  • Access, correct, export, or delete optional website-account data by emailing hello@sciencebasedlearning.com.
  • Delete app-side data on iOS or Android by uninstalling the app — all on-device learning state is wiped.

Security

All data transmitted between your device and our servers uses HTTPS encryption in transit. Passwords are stored as salted hashes. We follow reasonable security practices, but no system is perfectly secure.

Changes to this policy

We may update this policy from time to time. Material changes will be posted here with an updated "Last updated" date.

Contact

Questions about this policy? Email hello@sciencebasedlearning.com or write to:

Archieboy Holdings, LLC
#1006, 771 Boston Post Rd STE 11
Marlborough, MA 01752