Privacy Policy
Last updated: September 11, 2026
profAI is a service of Archipel AI, a business located in Lévis, Quebec, Canada. This policy explains what personal information we collect, why, where it goes, how long we keep it, and what you can require from us.
It is written to be read by a parent as easily as by a student. If anything is unclear, write to us and we will answer in plain language.
Quebec's Law 25 governs this service. Where the French version of this policy and this translation differ, the French version prevails.
Who is responsible for your information
Send every question, access request and complaint about your personal information to that address.
What we collect, and why
To create and maintain your account: your email address, a first name (or a nickname — we never ask for a family name), your school level, and a password we never see in plain text. Without these, there is no account and therefore no saved progress.
If you sign in with Google: Google sends us your email address and the name on your Google account. Nothing else — not your contacts, not your calendar, not your other services.
For the Family plan: the parent enrolls their teenagers and provides, for each one, a first name, an email address and a school level. The parent sees the progress and the subjects worked on.
During lessons: the questions the student writes, the teacher's answers, the plan for the session, and the steps completed. This is what lets the teacher pick up where you left off and adapt the teaching.
If you subscribe: we send Stripe your email address and an account identifier. We never see your card number — it is entered directly on Stripe's page, a certified payment provider.
Your comments, when you leave one in the application.
We do not collect your date of birth, postal address, phone number, or any government-issued identifier.
Student age and parental consent
Quebec law is clear: the personal information of a child under 14 cannot be collected without the consent of a parent or guardian.
We chose the simplest answer: profAI is for students from Secondary 3 through CEGEP — that is, 14 and over. We do not open accounts for younger children: lower school levels are not offered at sign-up and the server refuses them.
In the Family plan, the parent creates their teenagers' accounts from their own. Before creating them, the parent must confirm being the parent or guardian and consenting to those accounts being created: without that confirmation, no account is created. The parent receives each account's temporary password, sees the progress and the subjects worked on, and can ask us to delete an account at any time.
A parent may also ask us to show everything we hold about their teenager, including lesson content.
If a child under 14 wants to use profAI, they should do so from their parent's account and under their supervision.
Where your information goes
Your accounts, sessions and messages are kept on our own server, located in Quebec. We never sell them and never use them for advertising.
For the service to work, some information passes through providers, several of them outside Quebec:
| Provider | What it receives | Where |
|---|---|---|
| Cloudflare | all site traffic (IP address, pages visited) | United States |
| DeepSeek | the student's question, school level, lesson content | China |
| OpenRouter | the same, when DeepSeek is unavailable | United States |
| Our own servers | the same, when the teacher runs on our machines | Quebec |
| Stripe | email and account identifier, for the subscription | United States |
| Resend | email and first name, for password reset links | United States |
| email and name, only if you use "Continue with Google" | United States |
What you should understand about the AI: to compose its answer, the teacher sends the chosen provider the question written by the student, the school level, and the content of the current lesson. It does not send the name, the email, or the account identifier. But a student who writes their name or a personal confidence inside a question sends it along with the question — remind them not to put personal information in the chat.
The service switches between providers automatically depending on their availability, following the order shown above. We are working to bring all processing back to our servers in Quebec; this policy will be updated when that is done.
If you use read-aloud, it is your browser that speaks. On some browsers (Chrome in particular) the chosen voice is supplied by Google and the spoken text passes through its servers. You can turn the voice off in the application's settings.
When a lesson illustrates a concept with a picture, your browser queries Wikipedia to find it.
The teacher's memory
When the teacher answers, that answer and the question behind it are filed in a shared store. It serves two purposes: giving the same explanation to another student who asks the same question, and keeping the service usable if an AI provider disappears.
That store is linked to no account — nothing in it says who asked. It is purged automatically: any entry unused for twelve months is deleted.
That is one more reason not to write personal information in the chat: what is written there may be kept for as long as other students find it useful.
How long we keep it
- Account, sessions, messages and progress: as long as the account exists, then twelve months after the last sign-in, after which we delete them. You may request deletion sooner.
- Sign-in tokens: thirty days.
- Password reset links: thirty minutes.
- Comments: for as long as the service exists, unless you ask us to remove them.
- Billing information: kept by Stripe under its own rules, and by us for as long as tax law requires.
- Technical logs: kept by our host under its own retention periods, and never used to profile you.
What we do not do
We do not sell or rent your information. We do no targeted advertising. We do not track your browsing elsewhere on the web. profAI sets no advertising cookies. The only data kept in your browser is your sign-in token and your preferences (voice speed, voice on or off); they stay on your device.
No decision producing legal effects is made about you automatically. The teacher adapts its explanations to your level; it does not grade you and reports nothing to your school.
Your rights
By writing to archipel.clients@outlook.com, you may:
- access everything we hold about you and obtain a copy;
- have corrected any inaccurate or incomplete information;
- request deletion of your account and its contents;
- withdraw your consent and stop using the service;
- receive your information in a structured, machine-readable format, or ask us to transfer it to another service;
- file a complaint with Quebec's Commission d'accès à l'information if our answer does not satisfy you.
We answer within thirty days at the latest.
Security
Exchanges with the site are encrypted (HTTPS). Passwords are never stored in plain text: we keep a fingerprint computed with PBKDF2-HMAC-SHA256, 120,000 iterations, and a unique salt per account. Access to the server is restricted. In the event of a confidentiality incident presenting a risk of serious injury, we notify the people concerned and the Commission d'accès à l'information, as the law requires, and we keep a register of such incidents.
Changes
If we change this policy, we update the date at the top of the page and flag the change in the application. Significant changes (a new provider, a new purpose) are announced before they take effect.