Legal

Privacy Policy

Last updated: 25 July 2026 — this is placeholder legal text for a work-in-progress product. Have a lawyer review and finalize it, especially before handling real student data or payments.

1. What we collect

To provide the Service, we collect:

  • Account information — name, email, and password (stored securely, never in plain text).
  • Study data — sessions, subjects, topics, durations, and retention-check responses you log.
  • Usage data — basic technical information like device type and general activity, used to keep the Service reliable.
  • Billing information — handled by our payment processor; we don't store full card numbers ourselves.

2. How we use it

  • To run the core product — session tracking, dashboards, and analytics.
  • To generate anonymised, aggregated benchmarks (e.g. batch comparisons) that never expose your individual data.
  • To send account-related emails (billing, security) and, if you opt in, product updates.
  • To improve the Service based on how it's actually used.

3. What we don't do

We don't sell your personal data. We don't share individual study sessions with anyone outside your account — including coaching institutes on the Cohort plan, who only ever see aggregated, anonymised numbers unless you explicitly choose to share more.

4. Data retention

We keep your data for as long as your account is active. If you delete your account, your personal data and study history are permanently removed from our systems within a reasonable period, except where we're required to retain limited records for legal or billing purposes.

5. Your rights

  • Access and export your data as CSV at any time from Account Settings.
  • Correct inaccurate account information.
  • Delete your account and associated data.
  • Opt out of non-essential emails at any time.

6. Cookies

We use essential cookies to keep you logged in and the Service functioning. We may use limited analytics cookies to understand overall usage patterns — never to build advertising profiles.

7. Security

We use industry-standard practices — encrypted connections, hashed passwords, and access controls — to protect your data. No system is perfectly secure, but we treat study data with the same care we'd want for our own.

8. Children's privacy

If you're a minor using the Service with a parent or guardian's permission, we only collect what's needed to provide the core product, and we don't use minors' data for advertising.

9. Changes to this policy

We'll notify you by email or in-app notice of material changes before they take effect.

10. Contact

Questions about this policy can be sent through our contact page.