Privacy Policy

1. Information collected and why

When you request access, we collect your email address, the source of the request, and a timestamp to maintain the waitlist and manage beta invitations. The service may create an email-linked profile with invitation status and dates. When you sign in, Supabase verifies your email and maintains authentication records and sessions. We store your authenticated user ID and a dated, versioned age-16+/US-residence confirmation with your profile.

We store your email, selected research domains, onboarding choices, and bookmarks in your browser. Bookmarks include a paper snapshot and saved time. When you are signed in to an eligible beta account, selected domains and bookmark additions/removals are also sent to our server and stored with that email. Cloud sync is best effort; local and cloud copies may differ.

Hosting infrastructure may process IP addresses, request URLs, browser information, and error logs to deliver and secure the service. Some current requests include an email address in the URL. Avoid sharing request URLs or logs containing personal information.

2. Service providers and research sources

Supabase provides email-link authentication and the database used for waitlist entries, email-linked profiles, research interests, invitation status, and saved-paper snapshots. Our hosting provider processes requests needed to deliver the app. Provider access, processing locations, and retention depend on the service configuration and applicable agreements.

Our server requests paper metadata and abstracts from arXiv using selected research categories; the feed request does not send your email or bookmark list to arXiv. Following an external link sends a request directly from your browser to that website, which has its own privacy practices.

3. Et AI and recommendations

Et AI currently generates scripted replies in your browser. Your questions are held in the active reader session and are not sent to an AI provider or saved as cloud chat transcripts by this version. Do not enter sensitive or confidential information. Double-tap feedback does not share a paper with other users.

If we introduce a real AI service, social sharing, or materially different data uses, the notice and relevant choices must be updated before those features process your information.

4. Browser storage and tracking

The app uses localStorage to remember your choices and necessary HttpOnly cookies to maintain sign-in sessions. Signing out clears Goodall’s device cache; clearing browser preferences alone does not end a session. The current app code does not include advertising trackers or third-party analytics SDKs, and we do not sell personal information or share it for cross-context behavioral advertising.

Do Not Track and Global Privacy Control signals do not change the current app behavior because it has no sale, advertising-sharing, or optional tracking feature to disable. Necessary hosting requests still occur. You can manage local data at /privacy/controls or through your browser settings.

5. Retention and deletion

Browser records remain until you remove them or your browser clears them. Cloud waitlist, profile, and bookmark records currently have no automatic expiry. Removing a bookmark attempts to remove its cloud copy when you are signed in; network failures may prevent that removal.

Clearing local data does not remove your cloud profile or waitlist entry. Signed-in users can export account data and permanently delete their account, cloud profile, bookmarks, and associated waitlist entry at /account. Waitlist-only users can contact us for verified requests. Copies in backups and infrastructure logs may have separate retention; those periods and any legally required retention need to be assessed when handling a request.

6. Your choices and requests

You can export and clear this browser’s Goodall records at /privacy/controls. Signed-in users can manage cloud exports and account deletion at /account. For other requests, contact early-access@levelplatforms.com with the email used for Goodall and the type of request. Do not send passwords, access tokens, or identity documents in an initial request. Ownership must be verified before disclosing, changing, or deleting another person’s information.

Depending on your location and the laws that apply, you may have rights to access, correct, delete, or receive a copy of personal information, object to or restrict processing, withdraw consent where processing relies on consent, appeal a decision, or complain to a privacy regulator. Mandatory rights are not limited by this notice.

7. Children

Goodall is intended for people age 16 or older in the United States. People under 16 should not use the service or submit personal information. New waitlist requests require confirmation of age eligibility and US residence; this is self-attestation, not identity or age verification. We do not request an exact date of birth. If you believe a child has provided personal information, contact us so the information can be investigated and addressed. The current service does not provide a parental-consent flow.

8. Changes and contact

This notice describes the current version of the service. Material changes require appropriate notice and, where required, permission before new data uses begin. Updating this text alone does not authorize a new use of existing information.