AYDEXA Privacy Policy

This Policy takes effect on the date it is first published on AYDEXA's legal website. AYDEXA is an independent informational service operated by Grodify LLC. We are not a government agency or affiliated with or endorsed by one. For privacy questions or requests, contact support@aydexa.com.

AYDEXA is intended for adults age 18 or older. Its catalog may describe programs for families or young people, but AYDEXA accounts are intended only for adults.

1. Information that stays on your device

You can explore public AYDEXA information without an account. Your language choice, display preferences, and saved public-program bookmarks are kept locally until you change or clear them or remove the app. Needs-guidance and Document Checklist choices are temporary session information, not an application or government case record. They are not sent to an official screening service or joined to an AYDEXA account or Analytics.

Read Aloud uses the device's local speech service to speak selected content. AYDEXA does not create an audio file or a listening history and does not request microphone access for this feature.

2. Explain this letter: image, text, and OpenAI

When you choose Explain this letter and grant camera permission, AYDEXA makes a temporary image on your device. The image is never uploaded to AYDEXA or OpenAI. Optical character recognition (OCR) runs on the device. The app deletes the temporary image after the page is processed and attempts cleanup on cancellation, error, backgrounding, or exit. A temporary Camera session has a ten-minute limit.

Before an explanation request, AYDEXA redacts the sensitive identifiers that its local protection supports. It stops the request if it detects a failure of that protection. No automated redaction method can recognize every possible sensitive detail in every document. Only text produced from the document after local protection—not the image—is sent through AYDEXA's authenticated server function to OpenAI to generate the explanation you request. Your signed-in account is used to authorize and limit the request, so this processing is associated with your account while the request is handled. AYDEXA does not use the document text to build an advertising or eligibility profile.

AYDEXA sends the OpenAI Responses API request with store: false, which disables storage of that response for later API retrieval. This is not a promise of zero retention by OpenAI. OpenAI may keep separate safety and abuse-monitoring records under its own policy; those records may include request or response content. Its published standard period is generally up to 30 days, subject to stated exceptions. AYDEXA does not persist the document body or explanation in its ordinary database or logs, and does not send them to Analytics. Protected text and the explanation remain in the app only for the temporary Camera session, which is cleared on deletion, cancellation, error, backgrounding, exit, or the session limit.

An explanation can be incomplete or mistaken. Compare it with the original document and verify important information with its sender or official source.

3. Accounts and sign-in

AYDEXA Free remains available without an account. If you create an account or sign in, Supabase Auth processes your email address or verified Apple or Google sign-in identity, an internal user identifier, and information needed to maintain a secure session. Apple may give us a private-relay email instead of your usual address. AYDEXA does not ask for your legal name, home address, date of birth, Social Security number, immigration status, or personal documents to create an account. Administrative accounts are separate and protected by additional controls.

If you use Sign in with Apple, AYDEXA may keep a server-side encrypted credential solely to request revocation of Apple access when you delete your AYDEXA account. It is not placed in the mobile app.

4. AYDEXA+ purchases and reminders

Apple or Google processes subscription payments and full payment-card details. RevenueCat helps AYDEXA verify, restore, and update subscription access. AYDEXA and RevenueCat process a pseudonymous billing customer identifier, store and product identifiers, purchase or entitlement status, and relevant verification or paid-through dates. AYDEXA links the entitlement to your account to provide AYDEXA+; it does not keep full card details or raw store receipts or purchase tokens in its ordinary citizen database.

If you create a premium reminder, AYDEXA stores the public program reference, the official date or a date you confirmed, the reminder time, and its status for your account. This is not a government application or case-status record.

5. Optional personalized alerts

Personalized alerts are optional. If you activate them and grant notification permission, AYDEXA uses the topics you explicitly select and the minimum device information needed for delivery. This may include a pseudonymous installation identifier, an encrypted push token, device platform, language, time-zone information, and permission or revocation status. Alert topics are not inferred from searches, needs guidance, Camera, or Analytics. You can turn alerts off in the app or through device settings. AYDEXA does not use an alert installation as an Auth or Analytics identifier.

6. First-party usage Analytics

AYDEXA uses first-party infrastructure to count eight types of interactions: app opened, session started, language changed, category viewed, program viewed, program saved, program unsaved, and official link clicked. An allowed event may include a public program or category reference, language, platform, app/build version, and release channel. AYDEXA uses a random Analytics identifier separate from your account and turns activity into protected aggregate counts. It does not send search text, needs-guidance answers, documents, images, OCR text, account email, or sensitive case details to Analytics. It does not use cross-app tracking or behavioral advertising, sell personal information, or connect a third-party advertising analytics SDK.

7. Support and necessary technical information

If you email support@aydexa.com, we receive your email address and what you choose to send so we can respond and handle the request. Please do not send letters, identity documents, account numbers, passwords, or sensitive case details through ordinary email. Network and security providers may process connection information needed to deliver requests, prevent abuse, and maintain the service. AYDEXA's ordinary technical logs and aggregate Camera quality metrics are designed not to contain document images, document text, or explanations.

8. Service providers and official links

Supabase provides authentication, database, and server-function infrastructure. OpenAI processes locally protected text only for a Camera explanation you request. RevenueCat coordinates subscription status with Apple App Store or Google Play, which handle purchases. Expo/EAS supports app distribution and notification infrastructure. These providers process information to perform their services under their own applicable terms and privacy practices. AYDEXA does not authorize document content for advertising.

Opening an official link takes you to an organization outside AYDEXA. That organization controls its own website, decisions, and privacy practices. We may also disclose information if required by applicable law or reasonably necessary to protect people, rights, or service security.

9. Retention and account deletion

Local settings and bookmarks remain until changed, cleared, or the app is removed. Needs-guidance and Document Checklist choices last only for their temporary sessions. Camera images and protected text follow the temporary cleanup described above. AYDEXA keeps pseudonymous Analytics activity material for no more than 35 days and identifier-free aggregate counts for no more than 25 months. Account, entitlement, and reminder information is kept while the account is needed to provide those features, subject to deletion and limited records required for security, billing integrity, or law.

You can request account deletion in Profile → Help and legal information → Delete account, or contact support@aydexa.com if you cannot use the app. The in-app process deletes the AYDEXA Auth account and associated citizen records, clears the local entitlement cache, and requests deletion of the pseudonymous RevenueCat customer. Apple sign-in access is revoked when the protected credential is available; otherwise the app provides Apple's manual revocation route. If a provider deletion request cannot be confirmed, AYDEXA reports it as pending rather than claiming it is complete. Limited security or billing audit records may remain when necessary and lawful. Deleting your AYDEXA account does not cancel an Apple or Google subscription; cancel store billing separately in the applicable store account.

10. Your choices and requests

You can choose a language, save or remove bookmarks, decline optional Camera or notification permissions, stop using optional features, and remove the app. People with an account can request deletion from the app or through the published deletion process. Applicable law may also give you rights to access, correct, or delete personal information; contact support@aydexa.com and we will handle requests under applicable law. We will not ask you to email a password or sensitive document to make a privacy request.

11. Security, children, and changes

AYDEXA uses HTTPS, restricted server access, encryption for protected credentials, and administrative MFA. No system is perfectly secure. AYDEXA does not knowingly create accounts for children under 18. If you believe a minor has an account, contact support@aydexa.com.

We may update this Policy as the service or law changes. An updated version will show its effective date, and we will provide notice of material changes when required by law. A new Policy does not retroactively authorize an undisclosed data use. For questions, contact Grodify LLC at support@aydexa.com.