Chispapps

Privacy Policy — Repasito

Last updated: 14 October 2026

This policy explains what Repasito does with personal data. Repasito is a homework-checking app used at home by a parent or legal guardian to support a child’s learning.

We comply with the EU General Data Protection Regulation (GDPR), the EU Artificial Intelligence Act (AI Act) and, where applicable, the U.S. Children’s Online Privacy Protection Act (COPPA).


1. Who is responsible for your data


2. Who should use Repasito

Repasito is designed to be used at home by an adult with parental responsibility. By using the app you confirm that you are at least 18 years old and that you are the parent or legal guardian of any child whose homework you scan.

Repasito is a home study aid. It is not intended for use by schools, teachers or other educational institutions to grade, assess, admit, place or rank pupils, nor for any official evaluation of a child’s learning.

The app is not directed to children under 13 for independent use. A child’s work appears in the app because checking it is the point of the app, but the account and every control in it belong to the adult.


3. You do not create an account

Repasito has no sign-up, no login and no password. On first launch the app creates an anonymous session, which is a random identifier used to keep your scan count and your subscription status attached to your installation.

We never ask for, and never receive, your name, your email address or your phone number.


4. What stays on your phone

The following never leaves your device:

Repasito does not let you attach a photograph of a child to a profile. Profiles use a fixed set of illustrated avatars instead. If you used an older version that stored such a photo, the app deletes it automatically when you update.

Everything in this section is removed when you uninstall the app or clear its storage.


5. What we store on our servers

Our backend runs on Supabase. Attached to your anonymous identifier we store:

We do not store the homework photograph itself. We do not store your children’s names — those stay on your phone, as described above.


6. Artificial intelligence

Repasito uses artificial intelligence — Google’s Gemini models — to read homework, check answers, write explanations and answer the follow-up questions you ask in the app.


7. Homework images and AI analysis

When you scan homework, the image is sent from the app to our server, which forwards it to Google’s Gemini API for analysis and returns the structured result to you. The image is held only for the duration of that request and is never written to storage.

Google processes the image under its own terms: https://ai.google.dev/gemini-api/terms and https://policies.google.com/privacy.

Worth knowing as a parent: if the page shows your child’s handwritten name, their school, or anything else identifying, that appears in the image sent to Google and may appear in the stored analysis text. Cover or crop it first if you would rather it did not.


Purpose Legal basis (GDPR)
Running the app and analysing the homework you submit Performance of a contract, Art. 6(1)(b)
Enforcing weekly page limits and subscription tiers Legitimate interest in preventing abuse, Art. 6(1)(f)
Keeping your scan history so progress can be shown Performance of a contract, Art. 6(1)(b)
Paying commission to the partner whose code you redeemed Legitimate interest in running the referral programme, Art. 6(1)(f)
Tax and accounting records for purchases Legal obligation, Art. 6(1)(c)

We do not use your data for advertising or profiling, we do not use it to train AI models, and we do not sell it.


9. Who else touches the data

There are no advertising SDKs and no third-party analytics in this app.


10. Where your data goes

Supabase, Google, RevenueCat and Apple may process data in the European Union, the United Kingdom, the United States or other countries where they operate. Transfers outside the EEA rely on the European Commission’s Standard Contractual Clauses.


11. How long we keep it


12. Your rights

Under GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. You can also withdraw consent at any time.

To exercise any of these, email aissa.b.code@gmail.com. We answer within 30 days.

Because the app has no login, please include your Repasito ID (in the app: Profile → Your Repasito ID) so we can identify the right records. Step-by-step instructions for deleting your data are on this page.

You can remove everything held on your device at any time by uninstalling the app or clearing its storage. That does not remove the server-side records, which we delete on request as above.

You may also complain to the Spanish data protection authority, the AEPD (https://www.aepd.es), or to your local supervisory authority.


13. Children’s data (COPPA)

Repasito is for adult operators. We do not knowingly collect personal data from children under 13 for commercial purposes, we show no targeted advertising, and we do not track anyone across apps or websites.

If you believe we hold data about a child under 13 without parental consent, email aissa.b.code@gmail.com and we will delete it promptly.


14. Security

No system is perfectly secure. If a breach affects your data we will notify you and the supervisory authority within 72 hours, as GDPR Art. 33 requires.


15. Changes

We update this policy when the app changes. The date at the top always reflects the most recent change, and we will tell you in-app before anything material takes effect.


16. Contact

aissa.b.code@gmail.com