Outfox Privacy Notice
Last updated 8 October 2026
This is an interim notice. Outfox is new and still being built. This notice describes exactly what the app does today, not what we plan for it. When the app changes, this notice changes with it. We would rather tell you something plain and true than something polished and aspirational.
The short version
Outfox stores your practice history so it can pick good questions for you and show your progress. We do not run ads, we do not use analytics companies, and we do not sell anything about you. The most detailed thing we hold is your practice record: which questions you have seen, how you did on each one, and which wrong answers you picked.
Who Outfox is for
Outfox is for people aged 13 and up. When you sign in, we ask which age group you are in. We store your answer, where it came from, and when you gave it. We do not ask for your birthday. If you tell us you are under 13, we block sign-in on that device, lock the account, and delete it after 14 days.
What we collect
When you sign in with Google
Google gives us four things and we store all four: your Google account ID, your email address, your name, and your profile picture. Google sends other information along with those; we ignore it and never write it down.
As you practice
- Your practice record: every question you have seen, how many times you have answered it, whether you got it right, which wrong answer you picked, and when you last saw it.
- Your skill ratings, which are our estimate of how strong you are in each topic.
- Your XP, gems, current streak, best streak, streak freezes, and how many sessions you have finished.
- Whether you are studying for the SAT, the ACT, or both.
- A log of each study session: the date, how long you studied, how many you got right out of how many, and the subject.
Crews, reminders, and logs
If you join or create a crew, we store the crew name, the join code, and who is in it.
Outfox has a leaderboard of everyone who plays. Students outside your crews never see your name or your picture there. They see an Outfox nickname we create for you, plus your rank, your league tier, your total XP, and the fox avatar you chose.
If you turn on reminders, we store a delivery address your browser gives us, your time zone, and the last day we sent you a reminder, so we can send the notification at 7 in the evening where you are, once a day at most.
Our server keeps request logs for fixing problems. Those record which page was requested, when, how long it took, whether it worked, and an internal account number. They do not contain your name or your email address.
Your IP address is used to limit how many requests one person can make, which protects the service. It is held in memory only and is never written to our database or our logs.
We also store a small amount of daily progress data: how many sessions you have done today, your XP for the week, your daily quests, and whether you have claimed the day's bonus. The app reads it back when you open Outfox on another device, so your day carries over.
Who can see your information
Other students in your crew see your name, your profile picture, the fox avatar you chose, your total XP, your current streak, and whether you have practiced today.
Whoever created your crew, usually a parent, sees more on their dashboard: your streak, your best streak, your XP for the week, your minutes studied this week, your overall accuracy, when you were last active, your recent sessions, and your full practice record.
Companies that help us run Outfox
- Fly.io runs our server and stores our database, so Fly holds everything listed above.
- Cloudflare R2 stores our backups. A backup is a complete copy of the database, so R2 holds everything too. Backups are kept for 30 days.
- Sentry receives a report when the server hits an error. It gets the error type, the error message, the technical stack trace, an ID for the request, and which part of the app failed. It does not get your name, your email, your picture, or anything you sent us.
- Google provides sign-in. When you open the sign-in screen, your browser loads code from Google, which means Google can see your IP address, your browser, and the fact that you are using Outfox, even before you sign in.
- A push service delivers reminders if you turn them on. Which one depends on your browser: Google, Apple, or Mozilla. They see the delivery address for your browser and when we send a message.
What we do not do
- No advertising. There are no ads in Outfox and no advertising software of any kind.
- No analytics companies. We do not use Google Analytics or anything like it.
- We do not sell or share your information with anyone beyond the companies listed above, who only handle it to run the service.
- We do not set cookies. Google's sign-in code, which loads on the sign-in screen, may set its own; that is covered by Google's privacy policy.
- Your practice record is used only to choose your next question and to show your progress. It is never used for advertising and never used to follow you around other apps or websites.
How long we keep things
You can delete your account inside the app. Go to Profile, open Settings, and under Danger zone choose Delete account, then type Delete and tap Delete my account to confirm. Your account, your age answer, your practice record, your session history, your crew memberships, your sign-in sessions, and your reminder settings are deleted from our live database right away.
If you own a crew when you delete your account, the crew passes to the member who joined it first. If fewer than two members would remain, the crew is deleted.
We keep one record that an account with your internal account number was deleted, when, and whether you asked for it. It holds no name, no email, and nothing else about you.
Copies take a little longer to disappear. Our backups keep a copy of everything for 30 days, and our hosting provider keeps snapshots of the server's disk for 5 days. After that, your data is gone from those too.
Sign-in sessions expire and are removed after 90 days without use.
If you cannot get into the app, email us at the address below and we will delete your account for you.
Not built yet
We would rather list these than let you assume they exist:
- Sign in with Apple
- A parental consent process
- Downloading a copy of your data
Things we are still confirming
- Exactly what a push service can see of a reminder's contents. Our reminders include your streak number.
- How long our hosting provider keeps its own network logs.
- How long Sentry keeps error reports.
We will update this notice once we know.
Contact
Email apps@lohco.ai with any question about this notice or your information.