Privacy
Privacy contact
Privacy contact: hello@sanytis.com. Beta notice dated 23 September 2026.
Demo requests
When a school requests a demo from the website, we use the name, role, school, city, email, phone and message provided only to reply to that request. No account is created and the details are not used for anything else.
Data and purposes
We process email, display name, study profile, optional school, authorized roles/classes, notes, files, maps, goals, calendar, quizzes and progress, Sany conversations and AI usage metadata, and explicit reading acknowledgements. Providers also process connection and security data. Do not upload patient-identifying information or real health records.
Legal bases and sharing
Account and requested features: provision of the service; abuse prevention and quotas: legitimate interest in security; legal obligations where applicable. School membership and class sharing are optional. Private content is available to its owner; shared content to authorized class members. Teachers see students and acknowledgements in assigned classes. We do not make automated educational decisions.
Sany and providers
Supabase handles accounts, database and files in an EU project region; Vercel hosts the site; Hostinger sends email; OpenAI powers Sany. We send your question, brief conversation context and explicitly selected notes to OpenAI. Requests use store:false, which does not eliminate all retention. API data is not used for model training by default; abuse monitoring logs may be retained for up to 30 days, subject to provider exceptions.
Retention and transfers
During beta, account content remains until you delete it or request deletion. Requests are handled manually. Automatic inactivity deletion is not active. TO CONFIRM before public launch: precise log, backup and inactive-account retention; account-specific DPA and international transfer safeguards. An EU database region does not exclude provider processing outside the EEA.
Your rights
Contact us or use the buttons below to request access, correction, deletion, restriction, portability or objection where applicable under GDPR. You may complain to the Italian Garante or your competent supervisory authority. This describes the beta and is not a compliance certification.
OpenAI — data controls · Supabase DPA · Vercel DPA
Account data
Requests are handled manually by the administrator. Deletion is not immediate.