Privacy Policy
Last updated: 8 October 2026
The short version. We collect what we need to run WorksheetApp: your Google profile, what you ask us to make, and the worksheets we make for you. We don't sell your data or show ads, and we don't use advertising or analytics trackers. You can delete your account and everything in it from the app at any time.
1. Who we are
WorksheetApp (worksheetapp.com) is run by MB Tutoris ("we", "us"), a small partnership (mažoji bendrija) registered in Lithuania, company code 307312525, at V. Nagevičiaus g. 3, LT-08237 Vilnius, Lithuania. We are the controller of the personal data described here. For anything about your data, write to support@worksheetapp.com.
2. What we collect
Your account
You sign in with Google. Google tells us your name, email address, profile picture and a Google account ID. We don't see or store your Google password.
What you make
- Your prompts and chats, meaning what you type into the app, and the worksheets, tests and solutions we make in reply (the PDF and the source it was typeset from).
- Files you attach, such as photos or PDFs of an exercise you want solved. These are sent to our AI provider to make your worksheet and deleted from our storage within 24 hours.
- PDFs you upload to the viewer, and pen annotations you draw on a worksheet.
- Share links and live sessions you create, and what other people draw on a live session you share with them.
Please don't put other people's personal data, such as students' full names or grades, into prompts or attachments unless you need to.
Payments
If you subscribe, payment is handled by Stripe. We never see or store your card number. We keep your Stripe customer and subscription IDs and your subscription status.
Usage and technical data
- Your country, worked out from your connection. We use it to show prices in your currency.
- Your IP address, logged with each worksheet you generate. Used for security and abuse prevention.
- How you found us: the campaign tags in the link you arrived on (for example
utm_source), the website that referred you (the site name only, not the full address), and whether you signed up on a phone, tablet or computer. - Product events, such as "saw the pricing", "started checkout", "downloaded a worksheet" or "a generation failed". We use them to understand what works and what's broken.
- A device check, explained in section 6.
- Email activity: which onboarding emails we sent you, and whether you clicked a link in one (links carry a tag saying which email they came from). We don't use tracking pixels.
3. Why we use it, and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating your account, making your worksheets, keeping your library, shares and annotations | Performing our contract with you |
| Taking payment and managing your subscription | Contract; legal obligation (tax and accounting records) |
| Preventing abuse of the free plan, keeping the service secure | Legitimate interest in protecting the service |
| Product events, sign-up source, aggregated reports | Legitimate interest in understanding and improving the product |
| Onboarding and product emails about WorksheetApp | Legitimate interest; every email has a one-click unsubscribe |
| Showing prices in your currency | Legitimate interest |
We do not sell personal data, share it for advertising, or use it for automated decisions that have legal or similarly significant effects on you.
4. Who we share it with
We use these service providers to run WorksheetApp. They process data only on our instructions and under data processing terms.
| Provider | What for | What it receives |
|---|---|---|
| Cloudflare | Hosting, database and file storage | Everything stored in the service. Our database runs in Europe. |
| Google Cloud | Turning worksheets into PDFs | The worksheet being typeset. Runs in Belgium, nothing is kept. |
| Sign in with Google | Your sign-in | |
| Stripe | Payments | Your email, payment details and subscription |
| AI model providers (currently Lithos AI and Deep Infra) | Writing your worksheets | Your prompts, attachments and the worksheet being edited. They don't keep this data or train on it. |
| SMTP2GO | Sending email | Your name and email address |
We may also disclose data if the law requires it, or to a buyer if the business is sold, in which case this policy continues to apply.
5. International transfers
Some of our providers are in the United States or process data there. Where personal data from the EU, EEA or UK goes outside those areas, we rely on the EU–US Data Privacy Framework where the provider is certified under it, or on the European Commission's Standard Contractual Clauses.
6. Cookies, local storage and the device check
We don't set cookies of our own. We store a few things in your browser's local storage, and all of them are needed for the app to work:
- your sign-in session;
- small preferences, such as the chat you had open or a tip you dismissed;
- a device check: a random ID, and a summary of your browser and device traits (screen size, time zone, language, graphics card and similar). This is how we stop the free plan being used again and again by making new accounts on the same device. We only ever store a salted hash of these values, never the values themselves. It never locks anyone out of an account or a paid plan, and it is deleted with your account.
Two third-party services we use set their own cookies:
- Google, for Sign in with Google.
- Stripe, for fraud prevention on payments.
We don't use advertising, analytics or social media tracking cookies.
7. How long we keep it
- Your account, chats, worksheets, uploads and annotations: until you delete them or your account.
- Files attached to a prompt: deleted within 24 hours.
- Share links: they stop working after 7 days.
- IP addresses in usage logs: removed after 90 days.
- Product events: deleted after 180 days.
- Deleted accounts: when you delete your account, any subscription is cancelled straight away and the account is closed. Everything is permanently erased 30 days later. Until then you can change your mind by signing in again.
- Payment records: kept by Stripe and by us for as long as tax and accounting law requires.
8. Your rights
Depending on where you live, and in all cases in the EU, EEA and UK, you have the right to:
- access the personal data we hold about you and get a copy of it;
- have it corrected;
- have it erased. You can do this yourself with Delete account in the app's settings menu;
- receive it in a portable format;
- object to, or ask us to restrict, processing based on legitimate interest;
- stop marketing emails at any time with the unsubscribe link.
To use any of these rights, email support@worksheetapp.com from the address on your account. We will reply within one month. If you are unhappy with our answer, you can complain to our lead supervisory authority, the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt), or to the data protection authority where you live.
California residents: we do not sell or share personal information as the CCPA defines those terms, and you have the same access and deletion rights described above.
9. Children
WorksheetApp is made for teachers, tutors and other adults. You must be at least 16 to create an account (13 if you are in the United States). We don't knowingly collect personal data from children under those ages. If you believe a child has given us personal data, write to us and we will delete it.
10. Security
Data is encrypted in transit and at rest by our hosting providers. Access to production data is limited to what running the service needs. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.
11. Changes
If we change this policy in a meaningful way, we'll update the date above and, for significant changes, tell you by email or in the app.