Privacy Policy

Key Principles

Quick Summary

This is a plain-English summary. The full legal policy follows below.

What We Collect:

• Account info (name, email, age)
• Learning data (problems solved, mastery levels, session history)
• Usage data (how you use the app, device info)

How We Use It:

• Personalize your learning experience
• Track your progress and mastery
• Improve our AI and teaching methods
• Communicate important updates

What We Don't Do:

• Sell your data to third parties
• Share data with advertisers
• Use your data for unrelated purposes
• Track you across other websites

Your Rights:

• Access your data anytime
• Export your data (CSV/JSON)
• Delete your account and data
• Opt out of marketing emails
• Control what parents/teachers see

1. Information We Collect

1.1 Information You Provide

Account Information:

• Name
• Email address
• Password (encrypted, we never see it)
• Date of birth (for age verification)
• Grade level
• School name (optional)

Profile Information:

• Learning preferences (study time, difficulty level)
• Goals (exam dates, target scores)
• Accessibility needs (font size, contrast settings)

1.2 Information We Collect Automatically

Learning Data:

• Problems attempted and answered
• Concepts studied
• Time spent on each problem
• Hint requests and usage
• Session durations and timing
• Mastery levels and progress
• Test scores and performance
• Error patterns and misconceptions

Device Information:

• Device type (phone, tablet, computer)
• Operating system
• Browser type and version
• IP address (for security and location services)
• Screen size (for interface optimization)

2. How We Use Your Information

2.1 Core Educational Services

Personalized Learning:

• Adapt content difficulty to your level
• Select next concepts based on your mastery
• Schedule spaced repetition reviews
• Provide targeted hints and feedback
• Detect misconceptions and errors

Progress Tracking:

• Calculate mastery levels
• Track learning velocity
• Predict readiness for exams
• Generate progress reports
• Identify strengths and weaknesses

2.2 Product Improvement

We use anonymized data to improve our teaching algorithms, enhance content recommendations, refine difficulty calibration, and optimize learning paths.

2.3 Communication

• Essential Notifications: Account security alerts, billing confirmations, service updates
• Educational Communications (opt-in): Study reminders, streak notifications, learning tips
• Marketing Communications (opt-in): Product updates, new features, promotional offers

3. How We Share Your Information

We DO Share With:

Service Providers (Data Processors):

• Cloud hosting (AWS, Google Cloud)
• Payment processing (Stripe)
• Email service (SendGrid)
• Analytics (anonymized only)
• Customer support tools

These providers are contractually bound to protect your data and can only use it for providing services to us.

Parents/Guardians:

Student progress and performance, study time and engagement, achievements and milestones. Students have control over what parents see (age-appropriate).

4. Data Security

How We Protect Your Data

Encryption:

• All data encrypted in transit (TLS 1.3)
• All data encrypted at rest (AES-256)
• Passwords hashed with bcrypt (we can't see them)

Access Controls:

• Strict employee access policies
• Two-factor authentication required for staff
• Regular security audits
• Penetration testing

Infrastructure:

• SOC 2 Type II certified
• Regular security updates
• Automated threat detection
• 24/7 security monitoring

5. Your Privacy Rights

5.1 Access & Portability

You can: View all your personal data, download your data (CSV/JSON format), request a copy of your data, verify accuracy of your data.

How: Settings → Privacy → Download My Data

5.2 Correction

You can: Update your profile information, correct inaccurate data, add missing information.

How: Settings → Profile → Edit

5.3 Deletion

You can: Delete specific learning sessions, clear your learning history, delete your entire account.

How: Settings → Privacy → Delete Account

Warning: This action is permanent and cannot be undone.

5.4 Opt-Out

You can opt out of: Marketing emails, product announcements, research participation, analytics tracking, parent dashboard sharing (age-appropriate).

How: Settings → Privacy → Communication Preferences

6. Children's Privacy

COPPA Compliance

PrepGraph complies with the Children's Online Privacy Protection Act (COPPA).

For Users Under 13:

• Parental consent required before account creation
• Limited data collection
• No behavioral advertising
• Parents can review, delete, or control data

How Parental Consent Works:

1. Child enters email to create account
2. We send consent request to parent's email
3. Parent reviews and approves
4. Account activated after consent

FERPA Compliance

For schools, PrepGraph complies with the Family Educational Rights and Privacy Act (FERPA). We act as a "School Official" and use data only for educational purposes.

7. International Users

GDPR Compliance (EU Users)

For users in the European Union, we provide additional rights including:

• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to object to processing
• Right to data portability
• Right to lodge complaint with supervisory authority

Contact Our EU Representative: gdpr@prepgraph.com

California Privacy Rights (CCPA)

For California residents, you have the right to know what personal information we collect, whether we sell your personal information (we don't), delete your personal information, and opt-out of sale (not applicable, we don't sell data).

8. Cookies & Tracking

What Are Cookies?

Cookies are small text files stored on your device to remember your preferences and improve your experience.

Cookies We Use

• Essential Cookies (Required): Session management, security, load balancing
• Functional Cookies (Recommended): Remember preferences, language selection, accessibility settings
• Analytics Cookies (Optional): Understand usage patterns (anonymized data only)

Your Cookie Choices: You can accept all cookies, accept only essential cookies, customize cookie preferences, or clear cookies anytime.

Certifications & Compliance

Privacy Policy Summary

Category	What You Need to Know
What We Collect	Account info, learning data, usage data
How We Use It	Personalize learning, track progress, improve AI
Who We Share With	Service providers, parents/teachers (your choice)
What We DON'T Do	Sell your data, share with advertisers
Your Rights	Access, download, delete, opt-out anytime
Data Security	Encrypted, SOC 2 certified, secure infrastructure
Kids Under 13	COPPA compliant, parental consent required
Contact	privacy@prepgraph.com

This Privacy Policy was last updated on January 1, 2025.