Privacy Policy
Last updated: 19 October 2026
TarkoAI turns what a student uploads into exam prep. To do that we have to handle personal information, including the uploads themselves. This policy explains what we collect, why, who helps us process it, and how you control it. We wrote it to be read, not skimmed past.
Who we are
TarkoAI is run by ParakeetAI d.o.o., a company registered in Slovenia at Slovenska cesta 55b, 1000 Ljubljana (VAT SI96761202). We decide how your personal information is used, which makes us the data controller under the EU GDPR and the data fiduciary under India's Digital Personal Data Protection Act, 2023. Write to us at support@tarko-ai.com about anything in this policy.
What we collect
What you give us
- Account details: your name and email address, and your Google profile picture if you sign in with Google.
- Profile: your age, class or level, school or college, and the avatar you pick.
- Your study material: photos of notes, PDFs, documents, pasted text, videos and video links you add, and the text we read from them.
- What you make and do: exam preps, flashcards, quizzes and your answers, Ask AI conversations, exam dates, study days and your streak.
- Payments: which plan you're on and when it renews. Stripe, or Google Play for Pro bought in the phone app, holds the payment details; we never see them.
- Invites: if you join through a friend's invite link, we record who invited you so both of you get the reward.
What we collect automatically
- Technical logs: IP address, browser and device type, and error reports, kept by our hosting provider to run and secure the service.
- Product events: actions such as finishing a step or starting Pro, recorded against your account so we can see which parts of TarkoAI help students.
- Analytics in your browser: pages viewed and how you got to them, and recordings of how you move through the app (clicks, scrolling and the layout of each screen, with everything you type and all text and images on screen hidden before they leave your device), recorded against your account while you're signed in, only if you accept analytics cookies (see Cookies).
- Email opens and clicks: when we email you about TarkoAI, whether you opened the email and which of its links you clicked, through a tiny image and links that pass through Postmark. Some email apps load images for everyone, so opens are an estimate.
How we use it
- To provide TarkoAI: read your uploads, build your exam prep, answer your questions and keep your progress. This is the contract between us.
- To sign you in and keep your account secure.
- To take payments and keep the records tax law requires.
- To understand how TarkoAI is used and improve it. For analytics in your browser we rely on your consent; for product events on our servers, on our legitimate interest in improving the service.
- To email you now and then about TarkoAI: tips, new features and exam-season reminders, on our legitimate interest in helping you use it. Every such email has an Unsubscribe link, and once you use it we stop. Opens and clicks tell us which emails help.
- To answer you when you write to us.
We do not sell your personal information. We do not show ads, and we do not build advertising profiles of students.
Your uploads and AI
Your uploads are sent to the AI models listed below so they can be read and turned into lessons, quizzes, flashcards and answers. We use these models through their business APIs, under terms that do not let the providers train their models on what we send. We do not train AI models on your uploads either.
AI can misread a page or get an answer wrong. Check anything important against your textbook or teacher.
Who processes it for us
These companies process personal information on our behalf, only to provide their service to us:
| Provider | What they do |
|---|---|
| Vercel Inc. (USA) | Hosts the app, stores your uploaded files, and routes requests to the AI models below |
| Neon Inc. (servers in the USA) | The database: your account, profile, exam preps, quiz answers, chats and streak |
| Google LLC (USA) | Google sign-in, if you choose it, Google Play payments for Pro bought in the Android app, and Gemini models that watch video links and index your uploads so they can be searched |
| OpenAI, L.L.C. (USA) | Models that read your uploads, write lessons, quizzes and flashcards, answer Ask AI questions, and transcribe audio and video |
| Stripe Payments Europe, Ltd. (Ireland) | Takes payments for Pro. Card and UPI details go to Stripe, never to us |
| RevenueCat, Inc. (USA) | Checks Google Play purchases so Pro bought in the phone app turns on. It gets your account ID, never your name, email or notes |
| Postmark (ActiveCampaign, LLC, USA) | Sends sign-in codes, account emails and our emails about TarkoAI, and records when those are opened and clicked |
| Mixpanel, Inc. (EU data residency) | Product analytics: how the app is used, so we can improve it |
| Functional Software, Inc. (Sentry, EU data residency) | Error reports: what failed and where, tied to your account id |
We may also share information when the law requires it, or with a buyer if TarkoAI is ever sold, under this same policy.
Where it is stored
Your account and files are stored in the United States. Where information leaves India or the EU, we rely on the safeguards our providers offer for international transfers, such as the EU Standard Contractual Clauses.
How long we keep it
We keep your information while your account exists. When you delete your account (Profile, then Delete account, on the website or in the phone app, or by emailing us from your account's address), we delete your profile, files and everything made from them, and cancel any Pro plan bought on our website. Deleting your account doesn't cancel Pro bought in the phone app: cancel it yourself in Google Play's subscription settings, or the store keeps charging for it. We keep payment and invoice records for as long as tax law requires, and technical logs for a short period set by our hosting provider.
Product events already sent to our analytics tool stay there after you delete your account. They carry only a random account ID, never your name, email or uploads, and nothing links that ID back to you once the account is gone.
Error reports already sent to Sentry also stay there after you delete your account. A report holds what failed, the page you were on, your browser and device type, and your account ID if you were signed in.
Students under 18 and parent consent
Most TarkoAI students are under 18. India's DPDP Act needs a parent or guardian's consent before we process the data of anyone under 18, and in the EU the GDPR needs it for children under the age of digital consent where they live (13 to 16, depending on the country). So TarkoAI asks students under 18 to use it only with a parent or guardian's agreement.
Pro is bought by the parent: the student sends them a link, and the parent reviews what TarkoAI includes, agrees, and pays from their own device. In the Android app, Pro is bought with the phone's Google account, and Google Family Link's purchase approvals let a parent approve a child's purchase first.
For students under 18 we do not track behaviour for advertising, show targeted ads, or sell information. A parent or guardian can ask us at support@tarko-ai.com to see, correct or delete their child's information, or to withdraw consent, which closes the account.
Your rights
Depending on where you live, you can ask us to:
- give you a copy of your personal information;
- correct information that is wrong or incomplete;
- delete your information, or delete your account yourself;
- withdraw a consent you gave, such as for analytics cookies;
- object to or limit how we use it, or move it to another service.
Write to support@tarko-ai.com; we answer within 30 days. If you are unhappy with our answer, you can complain to the Data Protection Board of India, to the Slovenian Information Commissioner (Informacijski pooblaščenec), or to the data protection authority where you live.
Cookies and similar storage
We use a few cookies and browser storage items that the site needs to work, and analytics only if you accept them. Change your answer any time with Cookie settings at the bottom of the page.
| What | Why | Needs consent |
|---|---|---|
| Sign-in session cookie | Keeps you signed in | No |
| Language cookie | Remembers English, Hindi or Hinglish | No |
| Invite cookie | Remembers a friend's invite link until you sign up (up to 30 days) | No |
| Pro hint cookie | Remembers whether you have Pro, so the page header loads without a Go Pro button flashing in (up to 1 year) | No |
| Theme and cookie choice (browser storage) | Remembers light or dark mode and your cookie answer | No |
| Mixpanel (browser storage) | Analytics: which pages are used and how, and session recordings | Yes |
Security
Information travels encrypted (HTTPS) and is stored with providers that encrypt it at rest. Only the people who need it to run TarkoAI can reach it. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
Changes to this policy
When we change this policy we update the date at the top. For changes that matter, we tell you in the app or by email before they apply. See also our Terms.