Privacy Policy

Effective date: March 30, 2026

Codex Labs Corp ("we," "us," "our") operates the Slate Pro, Slate Student, and Slate Kids mobile applications (collectively, the "Apps") under the Slate Suite brand. This Privacy Policy describes what information we collect, how we use and protect it, and your choices regarding your data.

By downloading or using any of the Apps, you agree to this Privacy Policy. If you do not agree, please do not use the Apps.

1. Overview by App Variant

2. Information We Collect

2.1 Information You Provide

• All Apps: Images you capture with the camera are sent to Google's Gemini API for real-time AI processing. We do not store, log, or retain these images on any server we operate. Processing occurs in real-time and the image data is discarded after the AI response is returned.

2.2 Information Collected Automatically

• All Apps — Purchase receipts: RevenueCat (our in-app purchase provider) processes anonymous purchase receipts to manage subscriptions and consumable purchases. RevenueCat assigns a device-scoped anonymous user ID — no email, name, or other personal information is linked.
• Slate Pro only — Product analytics: We use PostHog to record anonymous paywall, scan, and subscription-lifecycle events (e.g. "paywall_impression", "purchase_completed") so we can improve Pro. Events carry the RevenueCat anonymous user ID, app version, and flavor — no personal information is collected, no advertising trackers are used, and data is not sold or shared with advertisers. Slate Student and Slate Kids do not send any PostHog events.
• Slate Pro only — Crash reports: We use Sentry to capture unhandled errors so we can fix bugs. Crash reports include stack traces, OS version, device model, and the RevenueCat anonymous user ID. No user input or personal information is included. Slate Student and Slate Kids do not send any Sentry data.
• All Apps: Apple and Google may additionally collect crash reports and basic diagnostic data through their respective app stores, subject to their own privacy policies, independent of our SDKs.

2.3 Information We Do NOT Collect

• We do not collect email addresses, names, phone numbers, or other direct personal identifiers in any app
• We do not collect advertising identifiers (IDFA, GAID)
• We do not use advertising trackers in any app
• We do not collect location data
• We do not collect contacts, calendar, or health data
• We do not sell, rent, or trade any information with advertisers or data brokers
• Slate Student and Slate Kids collect nothing remotely — no analytics, no crash reports, no behavioural data. All scan history stays on the device.

3. Children's Privacy (COPPA & GDPR-K)

For Slate Student and Slate Kids:

• No personal information of any kind is collected, stored, or transmitted
• No user accounts are created
• No analytics, tracking, or behavioral data is gathered
• All scan history and usage data is stored exclusively on the local device
• Images sent for AI processing are transmitted directly to Google's Gemini API over an encrypted connection and are not retained
• In-app purchases in Slate Kids require parental verification (a randomized math challenge) before any purchase can proceed
• A 30-second cooldown between scans in Slate Kids prevents compulsive usage

We do not knowingly collect personal information from children under 13 (or the applicable age in your jurisdiction). If you believe your child has provided personal information to us, please contact us immediately at privacy@thecodexlabs.com and we will promptly delete it.

4. How We Use Information

• To provide the service: Processing images through AI to deliver analysis, homework help, or digital artwork
• To manage purchases: Processing subscriptions and consumable token purchases through Apple/Google payment systems via RevenueCat
• To improve Slate Pro: Anonymous paywall and scan-funnel events (via PostHog) and anonymous crash reports (via Sentry) are used to diagnose bugs and inform product decisions. No personal information is transmitted, and these SDKs are not initialized on Slate Student or Slate Kids.

5. Third-Party Services

The Apps integrate with the following third-party services, each with their own privacy policies:

Slate Student and Slate Kids do not load PostHog or Sentry. The SDKs are hard-gated off at startup — no network connection is opened to either service from those flavors, regardless of the app's configuration.

6. Data Storage and Security

• Local data: Scan history, usage state, and cached images are stored on-device using the platform's secure storage mechanisms (iOS App Sandbox, Android SharedPreferences within the app sandbox)
• AI processing: All image data is transmitted over HTTPS/TLS encrypted connections
• Analytics + crash reports (Slate Pro only): PostHog and Sentry receive data over HTTPS/TLS connections to PostHog's US cloud and Sentry's managed infrastructure respectively. Neither service receives personal information.
• We implement industry-standard security measures to protect your data, but no method of electronic transmission or storage is 100% secure

7. Data Retention

• Local scan history: Retained on your device until you delete it (via Settings → Clear All History or Settings → Delete Account & My Data) or uninstall the app
• Captured images: Stored locally on-device. Not retained on any remote server after AI processing
• Purchase records: Managed by Apple/Google and RevenueCat per their respective retention policies
• Slate Pro analytics + crash reports: Retained per PostHog's (12-month default) and Sentry's (90-day default) retention policies. No personal information is collected, so retained records cannot be linked back to an individual user.

8. Data Deletion

Because Slate Student and Slate Kids store all user data exclusively on the local device, the in-app Delete flow fully removes your data. No data is retained on any server we operate.

For Slate Pro, the in-app Delete flow wipes local scan history and usage state. PostHog and Sentry records are anonymous (no personal identifiers are ever sent) — they cannot be linked back to a specific user, so no separate deletion request is required. If you nonetheless want your anonymous device-scoped RevenueCat identifier's associated PostHog events removed from our analytics retention, email privacy@thecodexlabs.com with the subject line "Analytics Deletion Request" and we will process your request within 30 days.

Purchase records managed by Apple, Google, and RevenueCat are retained per their respective policies and are required for transaction history, refunds, and compliance with applicable tax and consumer protection laws.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Port your data to another service
• Object to or restrict certain processing
• Withdraw consent at any time

For Slate Student and Slate Kids, simply uninstalling the app removes all data since nothing is stored remotely. For Slate Pro, email privacy@thecodexlabs.com to request account deletion or data export.

10. International Data Transfers

Images processed by the Google Gemini API may be transmitted to Google servers located outside your country of residence. Google operates under their own data processing agreements and privacy certifications. No other cross-border data transfers occur.

11. California Privacy Rights (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at privacy@thecodexlabs.com.

12. European Data Protection (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, our legal basis for processing personal data is:

• Contract performance: Processing necessary to provide the service you requested (AI analysis)
• Legitimate interest: Managing purchases and maintaining service quality
• Consent: Where required, such as optional account creation in Slate Pro

You may contact your local data protection authority if you have concerns about our data practices.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through an in-app notice or update to the app store listing. The "Effective date" at the top of this page reflects the latest revision.

14. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

• Email: privacy@thecodexlabs.com
• Support: support@thecodexlabs.com

© 2026 Codex Labs Corp. All rights reserved.