Privacy Policy

1. Information We Collect

Personal Information You Provide:

• Name and email address (when you create an account)
• Payment information (processed securely by Stripe — we do not store credit card numbers)
• Target score and test date (optional, for personalization)

Information Collected Automatically:

• Practice session data (questions attempted, answers, scores, time spent)
• Usage data (pages visited, features used, session duration)
• Device and browser information
• IP address

2. How We Use Your Information

• To provide and maintain the Service
• To personalize your learning experience (adaptive difficulty, weak-area identification)
• To process payments and manage subscriptions
• To communicate with you about your account or the Service
• To improve the Service based on aggregate usage patterns
• To provide AI Tutor responses relevant to your practice context

3. Data Sharing

We do not sell your personal information. We share data only with:

• Stripe: For payment processing (governed by Stripe's privacy policy)
• Supabase: For database hosting and authentication (governed by Supabase's privacy policy)
• Anthropic: For AI Tutor functionality — question context may be sent to generate tutoring responses (governed by Anthropic's privacy policy)
• Analytics: We may use anonymized, aggregate data for service improvement

4. Data Retention

• Account data is retained as long as your account is active.
• Practice session data is retained to provide progress tracking and analytics.
• If you delete your account, all personal data will be permanently removed within 30 days.

5. Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS/SSL)
• Row Level Security on all database tables (users can only access their own data)
• Secure authentication via Supabase Auth
• Stripe PCI-compliant payment processing
• Environment variables for all sensitive keys (never exposed to client-side code)

6. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your practice history data
• Opt out of non-essential communications

7. Children's Privacy

The Service is intended for users aged 13 and older. If you are under 13, you may not use the Service. If you are between 13 and 18, you should review this Privacy Policy with a parent or guardian. We do not knowingly collect information from children under 13.

8. Cookies

We use essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the Service.

10. Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at: (806) 715-7619

11. California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). Contact us to exercise these rights.