Privacy Policy

Last updated: September 23, 2026

This Privacy Policy includes important information about your personal data and we encourage you to read it carefully.

Interpretation and Definitions

Interpretation

Words with a capital letter at the start have the meanings below. The same meaning applies whether the word is singular or plural.

Definitions

  • Personal Data means any information that may be used to identify an individual, including but not limited to name, email address, and any other information that may be used to contact an individual.
  • Service means the Drillby platform and any related services, features, content, applications, or tools provided by the Company.
  • Company means Drillby, Inc.
  • You means the individual accessing or using the Service, or the company or other legal entity on behalf of which that individual is accessing or using the Service.
  • Class Content means messages, lesson materials, audio, video, transcripts, replays, summaries, and notes from a class on the Service.
  • Tutor means a person who teaches on the Service.
  • Student means a person who learns on the Service.
  • Parent or guardian means the adult responsible for a Student under 18.
  • Payment Provider means the company that processes payments and identity verification, including know-your-customer checks, for the Service.

1. Personal Data we collect

When you use Drillby, we collect the information needed to provide the Service. This includes:

  • Account information
    Your name, email address, role (Tutor or Student), timezone, country of birth, profile photo, and other details you add when you create or manage an account.
  • Class Content
    Messages, lesson materials, audio, video, transcripts, replays, summaries, and notes from classes on Drillby.
  • Invites and connections
    Information used to invite a Tutor or Student and to connect accounts.
  • Support messages
    What you send us when you contact chat support.
  • Payment status
    Limited information we receive from the Payment Provider, such as whether a payment or an identity check succeeded. Card numbers and government ID documents are described in the payments section below.
  • Usage and technical information
    Pages you visit, features you use, actions you take, IP address, browser type, device information, operating system, and error reports collected when you access the Service.

2. Classes, replays, and AI

When a class runs on Drillby, we store the Class Content for the Tutor and the Student in that class. That includes the replay, transcript, summary, notes, and key moments.

The Tutor and the Student in that class can see the replay and the notes. We use Class Content to provide summaries, reports, and continuity from one class to the next.

Our transcription and summary providers process Class Content to produce those materials for the people in the class. We do not use Class Content to train general models.

Summaries and notes can be incomplete. Teaching stays with the Tutor.

3. Students under 18

A Student under 18 uses Drillby with a Parent or guardian. The Parent or guardian accepts responsibility for that Student’s account and for the Student’s use of the Service.

A child under 13 does not open an account on their own. The Parent or guardian is the contact for that Student’s Personal Data.

A Parent or guardian can ask for access to, or deletion of, the Student’s Personal Data using the contact details at the end of this policy.

4. How We Use Your Information

We use the information we collect to operate, maintain, and improve Drillby. Specifically, we use it to:

  • Provide the Service
    Including accounts, classes, scheduling, replays, summaries, and notes.
  • Communicate with you
    To send service email, including invites, class notices, and account notices.
  • Provide support
    To respond to questions and issues in chat.
  • Understand the product
    To see which features are used and where the Service can be improved.

We do not sell personal information. We do not use Personal Data for third-party advertising. Improving the Service means product analytics. It does not mean training general models on Class Content.

5. Payments and Identity Verification

Drillby does not store or process payment card information or government-issued identification documents (such as passports or national ID cards).

Payments and any required identity verification (including know-your-customer or “KYC” checks) are handled by the Payment Provider, in accordance with applicable laws and regulations.

Payment details and identification documents are submitted directly to the Payment Provider and are not accessible to or stored by Drillby.

We may receive limited payment or verification-related information (such as payment status or confirmation that verification was completed) solely for accounting, compliance, customer support, and service-related purposes.

6. Who else processes data

Other companies process Personal Data so we can run Drillby. They do so to provide their service to us.

  • Hosting and storage keeps accounts and other data we store for the Service.
  • Payment Provider handles payments and identity checks, as described above.
  • Product analytics measures how the Service is used and collects error reports. This processing runs in the United States.
  • Chat support receives the messages you send when you contact us.
  • Service email sends invites, class notices, and account notices.
  • Transcription and summary providers process Class Content to produce transcripts, summaries, and notes for the people in that class.

The Tutor and the Student in a class can see that class’s replay and notes. That sharing is described in the classes section above.

7. Cookies and similar tools

We use cookies and similar tools to run Drillby and to understand how it is used.

  • Sign-in
    A session cookie, stored as drillby-auth-token, keeps you signed in.
  • Product analytics
    On the marketing site and in the app, analytics tools measure how the Service is used and collect error reports.
  • Chat
    Chat support uses similar tools when you open it.
  • Invites and connections
    Cookies remember an invite or a connection while you sign in or finish setting up your account.

How we use these tools, and how you can control them, is described in our Cookie Policy.

8. How long we keep data

We keep account information and Class Content while your account is open.

After we verify a deletion request, we delete that data or remove the identifiers, except payment, tax, fraud, and legal records we have to keep.

9. Data Security

The security of your Personal Data is important to us. We take reasonable and appropriate measures to protect your information from unauthorized access, loss, misuse, or disclosure.

Class Content is available to the people in that class and to the systems that run the class.

These measures include administrative, technical, and organizational safeguards designed to protect Personal Data. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

10. Your Data Rights

Depending on your location, you may have certain rights regarding your Personal Data. These rights may include the ability to:

  • Access your Personal Data
    Request a copy of the Personal Data we hold about you.
  • Correct inaccurate or incomplete data
    Ask us to update or correct information that is inaccurate or incomplete.
  • Request deletion of your data
    Ask us to delete your Personal Data, subject to certain legal or contractual obligations.
  • Object to or restrict processing
    Object to, or request restrictions on, how we process your Personal Data in certain circumstances.
  • Request data portability
    Request that we provide your Personal Data in a structured, commonly used format or transfer it to another service where technically feasible.

A Parent or guardian can make these requests for a Student under 18. California residents can use the same contact path. We do not sell Personal Data or share it for advertising.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before responding. We respond within the time required by applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the Service. When we do, we will update the “Last updated” date at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have any questions about this Privacy Policy, you can contact us by chat support here.

This Privacy Policy describes how we handle Personal Data. The Terms of Service govern your use of the Service.