CarSchool

Privacy Policy

CarSchool Media Player (org.chenacademy.carschool) · Last updated: October 26, 2026

  1. Version scope. As of October 26, 2026, the public App Store version is 1.1.1 (build 14, released October 10, 2026). Statements identified as build 12 behavior come from a review of an earlier TestFlight version and do not establish the same controls in other versions. 1.1.1 temporarily removes the Gemini selection and settings entry points and prevents requests from saved Gemini configurations. 1.2 is in preparation and focuses on iPhone Duo support without changing data flows; it does not apply to existing versions before release.
  2. Local features and the developer. Local playback needs no CarSchool or AI-provider account. The reviewed app paths contain no advertising or analytics SDK and no developer server receiving your library or relaying AI requests. Bringing your own key does not mean no data collection or zero retention.
  3. Your library and personal storage. Imported media, playlists, favorites, notes, playback progress and library metadata are stored on your device. Personal iCloud synchronization also stores library information in your own iCloud. Saved playlists can include the original prompt. Folder descriptions can be saved locally, synchronized through personal iCloud and written as CARSCHOOL.md in your selected media folder. Cloud copies, backups and sharing depend on your storage provider and settings.
  4. Local processing and voice. Local text processing uses file and folder names to plan playlists, recognize metadata or draft descriptions without sending those text requests to an AI provider. Voice input needs microphone and speech-recognition permission. Reviewed build 12 uses Apple Speech outside the own-account OpenAI route and requires on-device recognition only where the device and language support it; otherwise Apple service processing is possible. Typing avoids sending a recording for transcription; whether the resulting text goes to an AI provider still depends on the selected processing route.
  5. Optional processing with your own key. In reviewed older TestFlight build 12, own-account requests go directly from your device to the selected OpenAI, Google Gemini, Anthropic Claude, DeepSeek or Moonshot/Kimi API, without a developer server. The upcoming new 1.1.1 will not offer a Gemini route or allow requests using saved Gemini configurations; Gemini remains described here to explain older-version data flows. Depending on the operation, they can include your prompt or transcript, file and folder names, relative paths, media metadata, existing folder descriptions and hints you enter to plan playlists, recognize metadata or draft descriptions. Reviewed text-processing routes do not upload the contents of your imported video or audio files.
  6. OpenAI voice transcription. In reviewed build 12, voice input on the own-account OpenAI route also uploads your recorded instruction to the audio/transcriptions endpoint. This is your prompt recording, separate from imported playback media. The app attempts to delete the temporary local recording after transcription finishes or fails; this does not delete provider records.
  7. Provider retention and account association. Providers receive request content, account authentication and network and service information available to them. Requests may be associated with your provider account or project. Retention and use vary by endpoint, model, account settings, agreement and region, including service operation, safety, legal obligations or, where permitted, model and product improvement. CarSchool does not verify zero retention for your account or promise immediate deletion or universal exclusion from model improvement.
  8. Different OpenAI endpoints. OpenAI lists abuse-monitoring and application-state retention for audio/transcriptions as None, unlike Responses text processing. Responses normally stores application state for at least 30 days; ordinary abuse logs may be kept for up to 30 days, with exceptions. Reviewed build 12 omits store:false. A later version is planned to set it, but that alone does not disable abuse monitoring or other applicable retention. A transcript subsequently sent to a text endpoint is subject to that endpoint’s rules.
  9. Other providers. Anthropic normally deletes API inputs and outputs within 30 days, with agreement, model, safety and legal exceptions. For the older Gemini route, unpaid services may use content for product improvement and human review; paid-service terms exclude prompts and responses from product improvement but allow safety or legal logging. DeepSeek’s general policy does not establish downstream-app or API-specific rules. The reviewed DeepSeek and Kimi materials do not establish a fixed API retention window or no-training guarantee for every account. Consult the official sources below and your applicable agreement.
  10. Keys, stopping requests and deletion. Saved API keys are kept in the device Keychain and sent to the selected provider for authentication, not to a developer server. Remove a saved key in processing settings, select the local route, type instead of dictating, and manage microphone and speech permissions in system settings. Stopping a provider route stops future requests on that route; deleting a key or local file or revoking permission does not delete earlier provider records, cloud copies or backups. Ask the relevant provider about deletion.
  11. Family use and service eligibility. A parent playing imported media for a child is a different activity from a child using a third-party AI service. Adults should manage optional AI settings and check eligibility; do not submit another person’s private information without appropriate authorization. Gemini terms require API users to be at least 18 and prohibit API clients directed toward or likely accessed by under-18s. An adult-owned key alone does not establish client eligibility. This policy does not guarantee that the older Gemini integration satisfies that audience restriction. The upcoming new 1.1.1 will temporarily remove that route; this does not delete data previously received by the provider or mean older versions have been updated.
  12. Support correspondence. If you email support, we receive information you choose to include. This is separate from the app’s direct AI requests. Do not send API keys or unnecessary private content. Provider account, retention and deletion questions also need to be addressed to the relevant provider.
  13. Contact. Questions about the app’s handling of data: info@chenacademy.org

Official provider sources