Privacy Policy
Last updated: October 31, 2026 (username only: no more email or name)
profAI is a service of Archipel AI, a business located in Lévis, Quebec, Canada. This policy explains what personal information we collect, why, where it goes, how long we keep it, and what you can require from us.
It is written to be read by a parent as easily as by a student. If anything is unclear, write to us and we will answer in plain language.
Quebec's Law 25 governs this service. Where the French version of this policy and this translation differ, the French version prevails.
Who is responsible for your information
Send every question, access request and complaint about your personal information to that address.
What we keep: almost nothing
Since October 31, 2026, profAI does not know who you are. An account is only:
- a username you make up (for example "fox42" — not your name, not your email);
- your password, which we never see in plain text;
- whether your subscription is paid or not, with the Stripe subscription number needed to cancel it.
The application also keeps the school level you choose, to adapt its explanations, and your music exercise results (scores from 0 to 100). Neither says who you are.
We ask for no email, no name, no date of birth, no address, no phone number. One consequence to know: without an email, a forgotten password cannot be recovered. Write it down.
If you sign in with Google: Google confirms it is really you, then we keep only a hashed fingerprint of your Google identifier. We keep neither your email, nor your name, nor anything else from your Google account.
During lessons: your questions, the teacher's answers and the session plan are used to run the lesson, then deleted after 24 hours.
For music: the microphone only opens after you agree, and the sound is analysed in your browser only: it is never recorded or sent to our servers. If you ask for the teacher's feedback, a text summary of the numbers (for example "A4 held 30 cents sharp") is sent to it, like a written question.
If you subscribe: payment happens on Stripe's page. Stripe asks the payer for what it needs (email, card) and keeps it. We keep neither your email nor your card: only the confirmation that the subscription is paid.
Your comments: what you write to us in the application, without your username shown. We want to know what is wrong, not who wrote it.
Audience measurement: to know how many people visit the site, we count page views and the site you came from (for example google.com), on our own server in Quebec. No cookies, and your IP address is never recorded: a visitor is recognized for one day only, through a fingerprint deleted the next day. If your browser asks not to be tracked (Global Privacy Control or Do Not Track), you are not counted.
Student age and parental consent
Quebec law is clear: the personal information of a child under 14 cannot be collected without the consent of a parent or guardian.
profAI is for students from Secondary 3 through CEGEP — that is, 14 and over. Whenever an account is created, including the first sign-in with Google, the person must confirm being 14 or older; without that confirmation the server does not open the account. We do not ask for a date of birth.
In the Family plan, the parent pays and creates their teenagers' accounts from their own. Before creating them, the parent must confirm being the parent or guardian and consenting to those accounts being created: without that confirmation, no account is created. The parent receives each account's temporary password.
If a child under 14 wants to use profAI, they should do so from their parent's account and under their supervision.
Where your information goes
Accounts and lessons are kept on our own server, located in Quebec. We never sell them and never use them for advertising.
For the service to work, some exchanges pass through providers, several of them outside Quebec:
| Provider | What it receives | Where |
|---|---|---|
| Cloudflare | all site traffic (IP address, pages visited) | United States |
| Our own servers | the student's question, school level, lesson content: the teacher (Mistral models) runs on our machines | Quebec |
| Stripe | a profAI account number (no name, no email); Stripe itself collects, on its own page, what it needs for payment (one Stripe account for Archipel's products; each payment is tagged "profAI") | United States |
| if you use "Continue with Google": Google knows you are signing in to profAI; we keep only a hashed fingerprint | United States |
What you should understand about the AI: the teacher is a Mistral language model (Mistral 7B or Ministral 8B, Apache 2.0 licence) running on our own machines in Quebec. To compose its answer it receives the question written by the student, the school level and the content of the current lesson, but not the account username. No question is sent to an outside AI company. A student who writes their name or a personal confidence inside a question would still leave it in our technical logs and in the teacher's memory (see below) — remind them not to put personal information in the chat.
If you use read-aloud, it is your browser that speaks. On some browsers (Chrome in particular) the chosen voice is supplied by Google and the spoken text passes through its servers. You can turn the voice off in the application's settings.
When a lesson illustrates a concept with a picture, your browser queries Wikipedia to find it.
The teacher's memory
When the teacher answers, that answer and the question behind it are filed in a shared store, so the same explanation can be given to another student who asks the same question.
That store is linked to no account — nothing in it says who asked. It is purged automatically: any entry unused for twelve months is deleted.
How long we keep it
- Lessons, messages and set-aside questions: 24 hours, then deleted automatically.
- Account (username, hashed password, level, subscription, music scores): as long as the account exists. We do not record your sign-in dates. To delete it, write to us with your username.
- Sign-in tokens: thirty days.
- Comments: for as long as the service exists, unless you ask us to remove them.
- Payment information: at Stripe, under its own rules and tax law. We hold no copy.
- Technical logs: kept by our host under its own retention periods, and never used to profile you.
What we do not do
We do not sell or rent your information. We do no targeted advertising. We do not track your browsing elsewhere on the web. profAI sets no advertising cookies. The only data kept in your browser is your sign-in token and your preferences (voice speed, voice on or off); they stay on your device.
We do not send your questions to an outside artificial intelligence provider. The teacher runs on Mistral models (Mistral 7B, Ministral 8B, Apache 2.0 licence), on our servers in Quebec: your questions and its answers are not shared with any AI company, in Quebec or elsewhere.
No decision producing legal effects is made about you automatically. The teacher adapts its explanations to your level; it does not grade you and reports nothing to your school.
Your rights
By writing to archipel.clients@archipelonline.com, you may:
- access everything we hold on your account (give us your username) and obtain a copy;
- have corrected any inaccurate or incomplete information;
- request deletion of your account and its contents;
- withdraw your consent and stop using the service;
- receive your information in a structured, machine-readable format, or ask us to transfer it to another service;
- file a complaint with Quebec's Commission d'accès à l'information if our answer does not satisfy you.
We answer within thirty days at the latest.
Security
Exchanges with the site are encrypted (HTTPS). Passwords are never stored in plain text: we keep a fingerprint computed with PBKDF2-HMAC-SHA256, 120,000 iterations, and a unique salt per account. Access to the server is restricted. In the event of a confidentiality incident presenting a risk of serious injury, we notify the people concerned and the Commission d'accès à l'information, as the law requires, and we keep a register of such incidents.
Changes
If we change this policy, we update the date at the top of the page and flag the change in the application. Significant changes (a new provider, a new purpose) are announced before they take effect.