Outfox Privacy Notice
Last updated 21 August 2026
This is an interim notice. Outfox is new and still being built. This notice describes exactly what the app does today, not what we plan for it. When the app changes, this notice changes with it. We would rather tell you something plain and true than something polished and aspirational.
The short version
Outfox stores your practice history so it can pick good questions for you and show your progress. We do not run ads, we do not use analytics companies, and we do not sell anything about you. The most detailed thing we hold is your practice record: which questions you have seen, how you did on each one, and which wrong answers you picked.
Who Outfox is for
Outfox is for people aged 13 and up. We do not currently check your age. There is no age question when you sign up. We are building one.
What we collect
When you sign in with Google
Google gives us four things and we store all four: your Google account ID, your email address, your name, and your profile picture. Google sends other information along with those; we ignore it and never write it down.
As you practice
- Your practice record: every question you have seen, how many times you have answered it, whether you got it right, which wrong answer you picked, and when you last saw it.
- Your skill ratings, which are our estimate of how strong you are in each topic.
- Your XP, gems, current streak, best streak, streak freezes, and how many sessions you have finished.
- Whether you are studying for the SAT, the ACT, or both.
- A log of each study session: the date, how long you studied, how many you got right out of how many, and the subject.
Crews, reminders, and logs
If you join or create a crew, we store the crew name, the join code, and who is in it.
If you turn on reminders, we store a delivery address your browser gives us, so we can send the notification.
Our server keeps request logs for fixing problems. Those record which page was requested, when, how long it took, whether it worked, and an internal account number. They do not contain your name or your email address.
Your IP address is used to limit how many requests one person can make, which protects the service. It is held in memory only and is never written to our database or our logs.
We also store a small amount of daily progress data that nothing in the app currently reads. It is left over from an earlier design. We are going to either find a use for it or delete it.
Who can see your information
Other students in your crew see your name, your profile picture, your XP for the week, your current streak, and whether you have practiced today.
Whoever created your crew, usually a parent, sees more on their dashboard: your streak, your best streak, your XP for the week, your minutes studied, your overall accuracy, when you were last active, your recent sessions, and your full practice record.
Companies that help us run Outfox
- Fly.io runs our server and stores our database, so Fly holds everything listed above.
- Cloudflare R2 stores our backups. A backup is a complete copy of the database, so R2 holds everything too. Backups are kept for 30 days.
- Sentry receives a report when the server hits an error. It gets the error type, the error message, the technical stack trace, an ID for the request, and which part of the app failed. It does not get your name, your email, your picture, or anything you sent us.
- Google provides sign-in. When you open the sign-in screen, your browser loads code from Google, which means Google can see your IP address, your browser, and the fact that you are using Outfox, even before you sign in.
- A push service delivers reminders if you turn them on. Which one depends on your browser: Google, Apple, or Mozilla. They see the delivery address for your browser and when we send a message.
What we do not do
- No advertising. There are no ads in Outfox and no advertising software of any kind.
- No analytics companies. We do not use Google Analytics or anything like it.
- We do not sell or share your information with anyone beyond the companies listed above, who only handle it to run the service.
- No cookies.
- Your practice record is used only to choose your next question and to show your progress. It is never used for advertising and never used to follow you around other apps or websites.
How long we keep things
Right now, we do not delete anything. Your account, your practice record, and your session history stay on our servers until we delete them.
Sign-in sessions are the one exception: they expire and are removed after 90 days without use.
Backups keep a copy of everything for 30 days.
Deleting your account is not something you can do yet. We are building it. Until then, if you want your data removed, email us at the address below and we will remove it by hand.
Not built yet
We would rather list these than let you assume they exist:
- An age check
- Deleting your account from inside the app
- Sign in with Apple
- A parental consent process
- Downloading a copy of your data
Things we are still confirming
- Exactly what a push service can see of a reminder's contents. Our reminders include your streak number.
- How long our hosting provider keeps its own network logs.
- How long Sentry keeps error reports.
We will update this notice once we know.
Contact
Email apps@lohco.ai with any question about this notice or your information.