Privacy Policy

Data handled

• Active-tab context: After the user clicks the Genie Tutor toolbar icon, Chrome temporarily supplies that tab's URL and title so the extension can confirm that it is a supported HTTP(S) page. The capture holds a URL with credentials, query text, and fragments removed, the page title, and the capture time. This context remains temporary and is not used to build a browsing history.
• Page reading: After you choose Generate quiz, Start tutoring this page, or Make flashcards from this page and accept the notice shown in the panel, the extension reads the page you are on. The reading can include its text and layout, content shown to assistive technology, content inside frames from the same site, descriptions of media, one screenshot of the visible area, and images the page has already loaded. Depending on the page, that reading can contain personally identifiable, health, financial and payment, authentication, personal communication, location, or other information you or the site put there. The extension does not sort that information into categories; it handles all of it as part of the page you chose.
• Capture position: The extension reads the current scroll coordinates and listens for a scroll change during capture. It uses them only to confirm that the page structure and visible screenshot belong to the same view. It does not monitor later activity or use the position for analytics, advertising, or profiling.
• PDF you choose: On the "Learn from a PDF" page, you choose a PDF file and the pages to learn. The extension reads the file on your device with a PDF reader that is part of the extension. It makes the text of the chosen pages. It draws an image of a chosen page when that page is shown to you, and when the AI needs to look at it. The file is not uploaded to a Genie Tutor server; there is none. Pages outside the range you chose are not sent anywhere. A PDF can contain any of the kinds of information that a webpage can contain, and the extension handles all of it as part of the pages you chose.
• What a PDF session keeps: A PDF session is kept so that you can continue later. This is different from a webpage session, which is temporary. The extension stores these things on your device only, in the extension's own browser storage: the PDF file; the text of the chosen pages; the ideas the AI found in them; each page image the AI looked at; and your progress, which is your lesson with your messages, your answers and their results, your quiz with your choices, and your cards with your ratings. The file and the text are stored when you open the pages. The rest is stored as you work. Each part is bound to the AI connection that made it.
• Temporary local analysis: To examine the page reading, the AI model may return a short piece of JavaScript. It runs only inside the isolated sandbox declared in the extension's manifest, and only against a fixed copy of that reading. It cannot reach the live page, extension APIs, your credentials, the network, or stored data. Any such code and the raw request history are discarded when the operation finishes or you cancel it. In a webpage session, the reading and captured images remain temporarily in panel memory for continued use; see "What the panel is holding". In a PDF session, the text of the chosen pages, the ideas the AI found in them, and each page image the AI looked at are saved on your device; see "What a PDF session keeps".
• What the panel is holding: In a webpage session, the questions, lessons, cards, your answers and ratings, the page material used to make them, and any inspected images stay in the panel's memory while you work. Quiz, Tutor, and Flashcards each keep their own and do not pass it to one another. It is cleared when you end that mode, and when the side panel closes or reloads. It is never written to Chrome storage. A PDF session is different: it is kept on your device, and closing or reloading the tab does not clear it. See "What a PDF session keeps".
• Authentication information: OpenAI API keys and ChatGPT Codex OAuth credentials are stored only in the user's local Chrome profile, and each is sent only to OpenAI. Choosing OpenRouter runs Chrome's web authorization redirect, which asks for no Google account and returns a key issued by the user's own OpenRouter account; that key is stored the same way and sent only to OpenRouter.
• Local preferences and diagnostics: The selected AI connection, prompt preferences, disclosure version, theme selection, and the width of the lesson on the PDF page are stored in Chrome. The extension also keeps a size-limited diagnostic log in local Chrome storage so that a user can report a problem. It records event names and a fixed list of permitted metadata fields. It never records page content, prompts, model responses, credentials, or request headers, and it never leaves the device.

Chrome Web Store data categories

The Chrome Web Store counts local processing and direct transmission to the selected AI provider as data handling. It also treats a sensitive category as handled when that information appears inside the selected page, screenshot, or learner input. The same categories apply to the pages of a PDF you choose, because those pages can contain the same kinds of information. For this reason, the Store disclosure selects all nine available data categories:

• Personally identifiable information: A selected page or screenshot can contain a name, address, email address, username, account number, or other identifier.
• Health information: A selected page or screenshot can contain medical or health information.
• Financial and payment information: A selected page or screenshot can contain transactions, payment details, financial statements, or similar information. Genie Tutor itself takes no payment information.
• Authentication information: The extension handles the user's OpenAI API key, ChatGPT Codex credentials, or OpenRouter key. A selected page or screenshot can also contain authentication information.
• Personal communications: A selected page can contain email, chat, or social posts. Tutor also sends the learner's typed messages to the selected provider.
• Location: A selected page or screenshot can contain an address, region, IP address, map, or other location information. The extension does not use a device-location API.
• Web history: The extension handles the selected page URL, title, and capture time for the user-facing learning operation. It does not build or retain a list of visited pages.
• User activity: The extension handles the current scroll position and a scroll-change signal during capture. It does not log clicks, keystrokes, or later browsing activity.
• Website content: The extension handles selected-page text, structure, links, images, media descriptions, and a visible screenshot. For a PDF, it handles the text and the images of the chosen pages, and the title or the file name.

How data is used and shared

When you start a quiz, a tutoring session, or a deck, the extension sends the page reading, or the chosen PDF pages, to the AI provider you chose. A long page is sent in parts, in the order the page presents them. While the model works it may search the text it was given, run temporary JavaScript against it as described above, or look at an image from the page when the picture is needed to answer. Audio and video are never sent; only their descriptions are.

One quiz, session, or deck usually takes several requests. The extension asks the model to write the material, then asks it to check that material against the same page text before you see it, and repeats a step when a check fails. Later requests can also carry exact excerpts from the page, your answers, and the messages you type to the Tutor.

In OpenAI API-key and ChatGPT Codex modes, that content goes directly from the extension to OpenAI. In OpenRouter mode it goes directly from the extension to OpenRouter, which routes the request to the model it serves; OpenRouter's own privacy terms govern its handling, and the request is billed to the user's OpenRouter account.

No Genie Tutor server sits in that path. Genie Tutor does not receive, proxy, log, or store these requests, the page content inside them, the responses, or the credentials that authorize them.

The selected provider -- OpenAI, or OpenRouter when that connection is chosen -- processes Quiz, Tutor, and Flashcards requests. Its handling is governed by its own privacy terms. Requests set store: false, which prevents later retrieval through the provider's API but is not a promise of Zero Data Retention; the user's OpenAI account controls and OpenAI's policies govern its processing. Data is not sold, used for personalized advertising, or transferred for unrelated purposes.

Retention and control

Everything Genie Tutor keeps is stored on the user's own device. There are no server-side records to retain, because there is no server.

Saved credentials remain until you disconnect the connection or remove the key. Disconnecting an AI connection or removing its key removes that credential only. It does not delete your saved PDFs or your progress in them. Clearing the extension's data or uninstalling the extension removes everything. You can disconnect a connection, remove a saved key, clear what a mode is holding, or uninstall the extension at any time. Content already sent to a provider is governed by that provider's retention policy and controls.

A PDF session stays on your device until you delete it. Under "Your PDFs" you can delete one set of pages or everything. Clearing a lesson, ending a quiz, or ending a deck removes that part and keeps the rest. If the PDF, or a later step of your work, cannot be saved, the PDF page tells you, and what was saved before stays. The browser can also remove this storage by itself when the device is short of space, unless it has agreed to keep it; the PDF page says which applies. After a deletion, the extension can recover nothing.

Security and limited use

User data is transmitted over HTTPS. The extension has no persistent access to visited pages; Chrome grants temporary page access only after the user invokes the toolbar action. Direct modes request optional access limited to the OpenAI API, sign-in, and ChatGPT service origins, or the OpenRouter origin, and only when the user selects that connection. Genie Tutor's use and transfer of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.

Contact

For privacy questions, email huangaustin496@gmail.com.