1. Data controller
The data controller responsible for KeoTeach is:
Owner: Aydan Kenaz Tosco Alamo
Project: KeoTeach
Tax ID: 79208837B
Address: Santa Cruz de Tenerife, Spain
Contact email: keoTeach3@gmail.com
This Privacy Policy explains what information KeoTeach may process, why it is processed, how it is stored and what rights users may have.
2. About KeoTeach
KeoTeach is a web application, also available as an Android app, focused on study, productivity, research, document processing and artificial intelligence tools. This policy applies equally to the website (keoteach.com) and to the app.
The service may include user accounts, AI conversations, study materials, flashcards, summaries, documents, CV creation, image generation, research tools and other productivity features.
3. User accounts and authentication
KeoTeach uses Firebase Authentication to manage user accounts when account functionality is enabled.
Account information may include an email address, a unique authentication identifier and other information voluntarily provided by the user.
Passwords are managed by Firebase Authentication and are not intentionally stored in KeoTeach Cloud Firestore documents.
Each account is associated with a unique authentication identifier so that the user's data can be separated from other users' data.
4. Information that may be processed
Depending on the features used, KeoTeach may process:
- Account and authentication information.
- Email address.
- Information voluntarily entered into the profile.
- AI conversations and messages.
- Study materials and generated content.
- Documents or text uploaded or processed by the user.
- CV information.
- Image-generation prompts.
- Preferences such as language and theme.
- Technical information required to operate and secure the service.
Users should not submit passwords, API keys, payment information or unnecessary sensitive personal information.
- Account plan (Free or Pro), subscription status and the end date of the paid period.
- Usage counters (for example, messages sent to Keo or images generated) to apply each plan's limits.
- If you subscribe to KeoTeach Pro: Stripe customer and subscription identifiers, and a record of what you accepted when subscribing (date, version of the terms, price).
KeoTeach does not receive or store your card number: you enter it directly on Stripe's secure page.
5. Firebase Authentication and Cloud Firestore
KeoTeach uses Firebase Authentication for user authentication and Cloud Firestore for persistent data associated with user accounts.
Stored data may include preferences, profile information and application data created or saved by the user.
Firestore security rules are intended to restrict access so authenticated users can only access data associated with their own account.
Some temporary or application-specific information may continue to be stored locally in the browser.
6. AI features
When you use Keo AI or another AI-powered feature, the information required to process your request is sent from the KeoTeach server to Groq (Groq, Inc., United States), the AI provider that generates the answers. The same provider is used on every plan.
This may include your prompt, relevant conversation context and selected document content. Passwords and payment details are never sent.
The purpose is to provide the AI functionality requested by the user. As the provider is located in the United States, this involves an international data transfer, carried out with the safeguards required by applicable law.
7. Image generation
When you use the visual image generator, the required prompt is sent securely to the KeoTeach server, which uses Pollinations to generate the image.
Pollinations and the model provider process information according to their own applicable terms and privacy documentation.
Depending on the service configuration, processing may involve countries outside the European Economic Area.
8. Document processing
KeoTeach may process PDF, DOCX, text and other supported documents.
Documents may first be processed in the browser. Where server-side processing is required, the necessary content may be sent to the KeoTeach server.
Documents selected for AI processing may be sent to the configured AI provider when required to provide the requested feature.
9. Research and external services
Research functions may query external services selected by the user, including Wikipedia, MDN Web Docs, Microsoft Learn, GitHub and Crossref.
Those services may receive the search query and technical information required to process the request.
Their own privacy policies and terms apply.
10. Third-party providers
KeoTeach may use third-party providers including:
- Firebase Authentication for authentication.
- Cloud Firestore for persistent data.
- Pollinations (Pollinations model) for image generation.
- Groq as the AI provider for chat and generation features.
- Stripe to process KeoTeach Pro subscription payments. Card details are entered directly into Stripe; KeoTeach never sees or stores them.
- Third-party infrastructure for technical resources.
These providers may process technical information such as IP addresses and browser information when necessary to provide their services.
KeoTeach does not sell personal data or use it for advertising.
- Stripe (Stripe Payments Europe, Ltd. and other group entities), to charge the KeoTeach Pro subscription, securely store the card and issue receipts.
12. Magic study and trying without an account
In Magic study, the text of your notes or the photo you upload is sent to the AI provider (Groq) to read it and generate the summary, quiz and cards. The photo is downscaled on your device before sending and KeoTeach does not store it: it is only processed to reply.
If you try it without an account, a counter linked to your connection's IP address is kept to limit free uses (3 per day). That counter is not linked to any other data and is deleted automatically after about two months.
13. Features stored only on your device
“Your day” (daily goal, tasks and exams), focus-mode statistics and the reminder preference are stored only in your browser's or the app's local storage; they are not sent to KeoTeach.
In the Android app you can turn on a daily reminder: it is a notification scheduled on your own phone, without sending anything to external servers. You can turn it off in “Your day” or in your phone settings.
On the web, a service worker keeps a copy of the page files (not your personal data) so KeoTeach can open offline.
14. Legal bases
The applicable legal basis depends on the specific processing activity.
- Performance of the service: where processing is required to provide a requested feature or operate an account.
- Consent: where consent is legally required for optional processing or non-essential technologies.
- Legitimate interests: where applicable for security and service operation.
- Legal obligations: where processing is required by law.
For the KeoTeach Pro subscription, the basis is the performance of the contract you enter into when subscribing and compliance with legal obligations (tax and accounting).
Community and Magic study: performance of the service you request by using them. Trial counter without an account: legitimate interest in preventing abuse of the free service. Moderation and reports: legitimate interest in keeping a safe environment.
16. Security
KeoTeach applies reasonable technical and organisational measures intended to protect information against unauthorised access, alteration, loss or disclosure.
Firebase security rules are used to restrict access to user-specific Firestore data.
Server-side API keys should not be exposed in client-side code.
17. Data retention
Personal information is retained only for as long as reasonably necessary for the purposes for which it is processed, unless a longer period is required by law.
Account-related information may remain stored while an account is active.
When an account is deleted, associated personal information should be deleted or anonymised within applicable technical and legal limits.
Billing and subscription data are kept for the periods required by applicable tax and commercial law (generally up to 6 years for commercial records and 4 years for tax purposes), even if you delete your account. Usage counters are kept while the account is active and deleted when it is removed.
Community data is kept while you keep your profile or until you delete it (you can delete your posts and comments at any time). Reports are kept as long as needed to handle them.
18. User rights
Where applicable, users may exercise rights including access, rectification, erasure, restriction, objection and data portability.
Where processing is based on consent, users may withdraw consent.
Requests may be sent to keoTeach3@gmail.com.
Users may also lodge a complaint with the competent data-protection authority, including the Agencia Española de Protección de Datos (AEPD) where applicable.
19. Account deletion
Users can delete their account at any time from Settings → Delete account, on the website or in the app. This deletes the account and its associated data (conversations, documents, flashcards, CV, progress and game data). If you signed up with Google, do it from the website, because Google doesn't allow identity confirmation inside the app.
Users may also request deletion of their account and associated personal information by writing to keoTeach3@gmail.com from the account's email address.
Information that must legally be retained may remain stored for the required period.
When you delete your account, any active KeoTeach Pro subscription is cancelled so no further charges are made, and the plan and usage data tied to your account are deleted.
Deleting your account also deletes your Community profile, @username, friendships, posts, comments, likes, alerts, shared quizzes and results.
20. Minors
KeoTeach is not specifically designed as a service exclusively directed at children under 14.
Where Spanish law applies and processing relies on consent, consent for children under 14 must be provided by the holder of parental authority or guardianship as required by applicable law.
21. Payments and KeoTeach Pro subscription (Stripe)
KeoTeach Pro is a paid subscription, monthly or annual at the user's choice. Payment is handled by Stripe: when you press “Subscribe” you are redirected to Stripe's payment page, where you enter your card. Stripe may process your payment data as a processor for KeoTeach and, as stated in its own privacy policy, also as an independent controller to prevent fraud and meet legal obligations.
Saved card and automatic charge. With your express consent (a box you tick before paying), Stripe stores your card to charge the fee automatically every month (monthly plan) or every year (annual plan) until you cancel. You can change or remove the card, see your invoices and cancel the renewal at any time from KeoTeach (KeoTeach Pro page → “Manage subscription”).
What KeoTeach receives from Stripe: subscription status, customer and subscription identifiers, period end date and billing email. It does not receive your full card number.
Record of consent. We store the date, the version of the terms, the price and the billing period (monthly or annual) you accepted so we can prove the contract.
International transfers. Stripe may process data in countries outside the European Economic Area with the safeguards described in its documentation (for example, standard contractual clauses).
The Pro plan is only activated when Stripe confirms the payment to our server; it cannot be activated from the browser.
22. Plan, limits and usage data
Each account has a plan (free or premium) stored in Cloud Firestore. If your account predates plans and had no such field, it is automatically assigned free without changing the rest of your data.
To apply each plan's limits and show you your activity, the server records usage counters (messages, images, summaries, analyses, searches). These counters do not include the content of your messages or documents.
The basis is the performance of the service you request and the legitimate interest in ensuring fair use of the service.
23. Changes
This Privacy Policy may be updated when KeoTeach introduces new features, changes providers or modifies its processing practices.
Last updated: 2026-10-16.