ClassMetric Privacy Policy
The short version.
- We collect what we need to run your classes: how you sign in, your progress and answers, and your purchases.
- We don't sell your personal information. Our ad pixels can count as "sharing" under state privacy laws. Turn on Global Privacy Control, or use the switch in Section 5, and we turn them off.
- When you use the AI coach, AI providers process your message through OpenRouter to answer you.
- You can delete your account at any time, in the app or from our deletion page.
This policy explains what ClassMetric collects, why, who we share it with and the choices you have. It covers classmetric.com, the ClassMetric iPhone and Android apps and the web app (together, the "Service"). It's part of our Terms of Service.
1. Who we are
ClassMetric is operated by Winding AI, Inc. ("we," "us"). Questions about privacy go to hello@classmetric.com.
2. What we collect
What you give us
- Account details. When you sign in with Apple, Google or an email code, we get your email address. Apple may give us a private relay address instead. If Apple or Google shares your name, we get that too.
- Waitlist and employer list. Your email, the class you asked about, and the page you joined from.
- Learning data. The lessons you start and finish, your answers, scores and readiness, and your exam date and study plan if you set them.
- Coach messages. What you type or say to the AI coach, and its replies.
- Support messages. What you send us by email.
What we collect automatically
- An anonymous session. Before you make an account, we create a random session id (a cookie on the web, secure storage in the app) so lesson 1 and your progress work without signing up. When you sign in, that session joins your account.
- Your Terms acceptance. The version of the Terms, the date and time, the exact words you were shown, your IP address, and your browser or app and device details. We keep this so we can show what you agreed to.
- Device and usage data. IP address, browser or app version, device type, operating system, language, the pages and screens you view, the buttons you tap, the page that sent you to us, and campaign tags in the link (like utm_source or an ad click id).
- Cookies and similar technology. See Section 5.
What others give us
- Payments. Stripe, Apple or Google tell us that a purchase happened: the class, the amount and a transaction id. On the web, Stripe also gives us your email and billing location, which it uses to calculate sales tax. We never see your full card number.
- Sign-in providers. Apple and Google confirm who you are and share your email, and your name if you allow it.
We don't ask for sensitive personal information such as health details, government ids or precise location. Please don't put it in coach messages.
3. How we use it
- To run the Service: lessons, practice exams, your progress on every device, and your study plan.
- To sell and unlock classes: one purchase unlocks the class everywhere you sign in.
- To answer you through the AI coach.
- To email you about the Service: sign-in codes, receipts, "your class is ready," replies to your support emails, and, if you joined a waitlist, one email when that class opens. We send email through Cloudflare Email Service and Resend.
- To improve ClassMetric: which lessons work, and where people get stuck.
- To measure our ads: which ads bring people to ClassMetric (Section 5).
- To keep the Service safe and legal: security, fraud and abuse prevention, enforcing our Terms, taxes, accounting and disputes.
4. Sign-in and payments
- Sign-in. We run Better Auth, an open-source sign-in system, on our own servers. It supports Sign in with Apple, Google sign-in and one-time email codes. On the web your session lives in a secure cookie; in the app, in your device's secure storage.
- Web payments. Stripe processes card, Apple Pay, Google Pay and Link payments on our website and calculates sales tax. Stripe's own privacy policy covers what it collects: stripe.com/privacy.
- App purchases. In the iPhone app, Apple processes in-app purchases. In the Android app, Google Play does. They tell us the product and a transaction id, which we check with them before we unlock the class.
5. Analytics, ads and your choices
We use these tools on the website and in the apps:
| Tool | What it does for us |
|---|---|
| PostHog | Product analytics: which pages, lessons and buttons people use |
| Google Analytics 4 | Website analytics |
| Google Ads | Measures which Google ads lead to sign-ups and purchases |
| Meta Pixel | Measures which Facebook and Instagram ads lead to sign-ups and purchases |
| Ahrefs Web Analytics | Cookieless page view counts |
We send these tools an opaque id, never your name or email. They may set cookies or read similar identifiers on your device.
We don't sell personal information for money. But ad pixels (Google Ads and Meta) can count as "selling" or "sharing" personal information for targeted advertising under California law and other state laws. You can opt out in any of these ways:
- Global Privacy Control. If your browser sends a GPC signal, we treat it as an opt-out for that browser: we don't load the Google Ads or Meta pixels, and we turn off Google Analytics' advertising features.
- The switch below, for this browser.
- Email us at hello@classmetric.com with "Do not sell or share" in the subject, and we'll apply it to your account.
Ad pixels in this browser: on
Your browser sends Global Privacy Control, so they’re already off here.
Turning them off stops the Google Ads and Meta pixels, and Google Analytics, in this browser. PostHog and Ahrefs keep counting visits without them.
6. AI processing
- Lessons are written ahead of time with AI, from the official outlines, regulations and manuals for each exam. Your personal data isn't used to write them.
- The coach. When you ask the AI coach something, we send your message, the lesson or question you're looking at, and your progress in that class to an AI model through OpenRouter, which passes the request to the model's provider (for example Anthropic, OpenAI or Google). They process it on our behalf to write the reply.
- Your permission. The app asks before your first coach chat or voice session, and names the providers.
- No training on your messages. We set OpenRouter to use only providers that don't train their models on the requests we send.
- AI can be wrong. Check what you learn against official sources, as our Terms explain.
7. Who we share it with
- Service providers that run ClassMetric for us: Cloudflare (hosting, database, file storage and email), Stripe, Apple, Google, OpenRouter and the AI providers it routes to, PostHog, Meta, Ahrefs and Resend. They may use your information only to provide their service to us, except as their own terms allow for ad measurement.
- Your employer, only if you use a seat they bought. They'll see your progress and completion for that class.
- The law. When we must, to answer valid legal process, or to protect someone's rights or safety.
- A new owner, if ClassMetric or Winding AI, Inc. is sold or merged. This policy keeps applying to your information.
We don't sell or rent lists of our users.
8. How long we keep it
| What | How long |
|---|---|
| Your account, progress and coach history | While your account is open. Deleted within 30 days after you delete your account, and from backups within 90 days. |
| An anonymous session you never connect to an account | 12 months after you last use it |
| Waitlist and employer list emails | Until we email you that the class is open, or until you ask us to remove you; never more than 2 years |
| Purchase and tax records | 7 years, as tax and accounting laws require |
| Terms acceptance records | The life of your account plus 6 years |
| Support emails | 3 years |
| Analytics and ad measurement data | Up to 26 months, under the retention settings we choose with each provider |
| Server logs | 30 days |
9. Deleting your account
- In the app: Me › Account › Delete account.
- On the web: follow the steps on our deletion page, or email hello@classmetric.com from the address on your account.
Deleting your account removes your account, progress, answers and coach history (see Section 8 for the records we must keep). Deleting doesn't refund a purchase. Apple and Google keep their own records of App Store and Google Play purchases.
10. Your privacy rights
Depending on where you live (including California, Colorado, Connecticut, Virginia and other states with privacy laws), you can ask us to:
- tell you what personal information we collect, use, disclose, sell or share, and give you a copy;
- correct it;
- delete it;
- stop selling or sharing it (Section 5).
We don't use sensitive personal information in a way that would give you a right to limit it.
How to ask. Email hello@classmetric.com. To protect your account, we'll confirm the request from the email address on your account. Someone you authorize can ask for you with your signed permission. We answer within 45 days. If we say no, you can appeal by replying to our answer, and we'll respond within 60 days. We won't treat you differently for using these rights.
California details. In the last 12 months we collected these categories of personal information:
| Category | Examples | Why | Shared with | Sold or shared for ads? |
|---|---|---|---|---|
| Identifiers | Email, account id, IP address, cookie ids | Running the Service, security, analytics, ads | Service providers, ad partners | Shared for ads, unless you opt out |
| Commercial information | Classes you bought | Purchases | Stripe, Apple, Google | No |
| Internet activity | Pages viewed, buttons tapped | Analytics, ads | Analytics and ad partners | Shared for ads, unless you opt out |
| Learning data and inferences | Progress, answers, readiness by topic | Running the Service | Service providers | No |
| Audio | What you say to the coach, if you use voice | The coach | AI providers | No |
| Coarse location | State or country from your IP or billing address | Sales tax, the Terms that apply to you | Stripe | No |
11. Children
ClassMetric is for adults: you must be 18 or older to make an account or buy a class. We don't knowingly collect personal information from children under 13. If we learn that we have, we delete it. If you think a child has used ClassMetric, email us.
12. Where we operate
We offer ClassMetric only in the United States. We and our providers process data in the United States and in the other countries where those providers operate.
13. Security
We encrypt data in transit (HTTPS), limit who on our team can reach it, and keep each person's data scoped to their own account. No system is perfectly secure, so please keep your sign-in safe and tell us right away if you think it's been misused.
14. Changes
We'll post any change here with a new date. If a change is material, we'll tell you in the app or by email before it takes effect.
15. Contact
Winding AI, Inc., operator of ClassMetric. Email hello@classmetric.com.