Privacy policy
Last updated 29 September 2026.
Knowledge Porridge is operated by Alexander Isaev, Data Alchemy Labs (dataalchemylabs.com), the data controller for the service. Questions and requests: support@knowledgeporridge.ai.
What we store
- Your email address, to sign you in with one-time links.
- Your learning data: the whys you add, the terms on your self-map, your answers and confidence ratings, your notes, your progress estimates, your review schedule, and your "how I learn best" text.
- AI connections: when you connect an AI app, a record that you authorized it. Its access tokens are stored only as hashes.
- Security records: hashed sign-in and session tokens, and a hash of the IP address that requested a sign-in link, used only for rate limiting.
What we never see
Your conversations with Claude, ChatGPT or any other AI. The AI app sends us only what a tool call contains, for example the answer you chose or a note you asked it to save. Your AI provider's own privacy policy covers your conversations.
Why we process it (legal bases)
- To provide the service you signed up for (Art. 6(1)(b) GDPR): sign-in, placing you on the map, planning lessons and scheduling retests.
- To keep the service secure (Art. 6(1)(f) GDPR, our legitimate interest): rate limits, abuse prevention and short-lived technical logs.
We don't sell data, show ads, run analytics or advertising trackers, or train AI models on your data.
Who processes it for us
- Cloudflare: hosting, database (D1, created in the EU jurisdiction) and key-value storage.
- Resend: sending sign-in emails (EU sending region).
Both may process data outside the EU under the European Commission's standard contractual clauses or an adequacy decision.
How long we keep it
- Your account and learning data: until you delete your account.
- Sign-in links: expire after 20 minutes and are deleted within a day.
- Sessions: expire 30 days after you sign in and are removed by a daily clean-up.
- AI connections: until you disconnect the app or delete your account.
Cookies
We use only strictly necessary cookies: one to keep you signed in, and short-lived ones that protect the step where you connect an AI app. No analytics or advertising cookies, so there's no cookie banner.
Your rights
You can access, correct, export, restrict or delete your data, object to processing based on legitimate interest, and take your data elsewhere. In the app, under Account, you can download everything we hold about you as JSON, and delete your account, which removes all of your data and disconnects every AI app immediately. For anything else, email support@knowledgeporridge.ai. You also have the right to complain to a data protection authority.
Children
Knowledge Porridge is not intended for anyone under 16.
Changes
If we change this policy in a way that matters, we'll say so on this page and, for significant changes, by email.