Privacy Policy

CodeTutor AI by MokaIO

How CodeTutor AI handles account information, submitted code, AI processing, subscriptions, security records, and deletion.

1. About this policy

This Privacy Policy explains how MokaIO processes information when you use CodeTutor AI, an educational coding assistant for Android. It applies to the mobile app, its account and subscription features, and the backend services used to provide code analysis.

By using the app, you acknowledge the practices described here. If you do not agree, do not use the service.

2. Information we process

Email address, user/account ID, display name when provided, authentication state, preferred language, and explanation language.

Code snippets you submit, programming language, optional problem description, AI-generated explanations, corrected code, history, and favorites.

Analysis counters, plan level, feature access, streak/usage state, and timestamps needed to operate daily limits and history.

Product/entitlement identifiers, store, subscription status, renewal/expiry state and related purchase status. We do not receive your full payment-card details.

Limited audit/security records may include action type, timestamp, IP address, user agent, and technical error/diagnostic information needed to prevent abuse and maintain the service.

If you choose Google sign-in, authentication information supplied through Google and Supabase is used to create or access your CodeTutor account.

CodeTutor AI does not intentionally request your contacts, SMS/MMS, precise or approximate location, health data, photos, videos, microphone recordings, or advertising ID for advertising purposes.

3. How we use information

• Authenticate users, maintain accounts, and restore sessions.
• Analyze submitted code and generate educational explanations.
• Store analysis history and favorites when those features are available to your plan.
• Apply free/paid plan limits and verify subscription entitlements.
• Provide support, troubleshoot failures, protect accounts, prevent abuse, and enforce service limits.
• Comply with legal obligations and protect the rights, security, and integrity of users and the service.

We do not sell your personal information and we do not use your submitted code to serve third-party advertising.

4. Service providers

To operate CodeTutor AI, information may be processed by service providers acting as infrastructure or processing partners, including:

• Supabase — authentication, database, and backend infrastructure.
• Google Gemini API — processes submitted code and related context to generate code-analysis and learning responses.
• RevenueCat — subscription entitlement and purchase-state management.
• Google Play — app distribution, billing, purchase processing, and subscription management.
• Google — Google sign-in when you choose that authentication method.

These providers may process technical or transactional information according to their own terms and privacy practices. We use them only as needed to provide, secure, and maintain the service.

5. Submitted code and AI processing

When you request an analysis, the code and optional description you submit are transmitted to our backend and may be sent to the Google Gemini API to produce the requested analysis. The generated response is then returned to the app and may be stored in your CodeTutor analysis history.

Do not submit secrets or highly confidential material. Avoid API keys, passwords, private keys, access tokens, personal data, proprietary source code you are not authorized to share, or other confidential information.

AI-generated output can be inaccurate or incomplete. You should review generated code and explanations before relying on them.

6. Data retention and deletion

Account and learning data are generally kept while your account remains active or as needed to provide the service. Individual analyses can be deleted from the app where that feature is available.

If you permanently delete your CodeTutor account, we will delete or irreversibly de-identify personal data under our control that is no longer needed. Limited records may be retained where reasonably necessary for billing, fraud prevention, security, dispute resolution, tax/accounting, or legal compliance.

Residual copies may remain temporarily in routine backups or provider systems and are removed according to applicable backup/provider retention cycles. Third-party transaction records maintained by Google Play or RevenueCat may be subject to their own retention obligations.

7. Your choices

• Review or update supported profile preferences in the app.
• Delete individual analyses where the app provides that action.
• Add or remove analyses from Favorites when your plan supports Favorites.
• Cancel a Google Play subscription through Google Play.
• Request permanent deletion of your CodeTutor account and associated data through our Delete Account page .
• Contact us regarding access, correction, deletion, or privacy questions where applicable law grants those rights.

8. Security

We use technical and organizational safeguards appropriate to the service, including authenticated backend access and encrypted network transport. No online service can guarantee absolute security, so users should also protect their credentials and devices.

9. Children and younger users

CodeTutor AI is designed for users aged 13 and older who are learning or practicing programming. It is not directed to children under 13. Where local law requires parental or guardian consent for a minor to use an online service, the user must obtain that consent before creating an account.

10. International processing

Our service providers may process data in countries other than your own. Their processing locations and safeguards are governed by their respective infrastructure, contracts, and applicable law.

11. Changes to this policy

We may update this policy when the app, service providers, legal requirements, or data practices change. The effective date at the top of this page will be updated when material revisions are made.

12. Contact

Privacy questions or requests can be sent to fortajroba@gmail.com . Please do not send passwords, access tokens, API keys, or private keys.