Privacy Policy
Last Updated: December 2024
1. Introduction
PrepCurve ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and services (collectively, the "Service").
By accessing or using the Service, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.
2. Information We Collect
We collect information in the following ways:
2.1 Information You Provide
- Account Information: When you create an account, we collect your name, email address, and password. If you sign up through Google or another third-party service, we receive your name and email from that provider.
- Profile Information: You may provide additional information such as your grade level, target test date, and score goals.
- Payment Information: When you purchase a subscription, our payment processors collect your billing information. PrepCurve does not store your full credit card number or payment details.
- Communications: When you contact us for support or feedback, we collect the information you provide in those communications.
2.2 Information Collected Automatically
- Usage Data: We collect information about how you use the Service, including practice test results, questions answered, time spent studying, and feature interactions.
- Device Information: We collect information about your device, including IP address, browser type, operating system, device identifiers, and screen resolution.
- Log Data: Our servers automatically record information when you access the Service, including your IP address, access times, pages viewed, and referring URLs.
- Cookies and Similar Technologies: We use cookies, pixels, and similar technologies to collect information, remember your preferences, and improve your experience. See Section 8 for more details.
2.3 Information from Third Parties
- Social Login Providers: If you sign in using Google or another social login, we receive basic profile information from that service.
- Analytics Providers: We receive aggregated analytics data from third-party services that help us understand how users interact with our Service.
3. How We Use Your Information
We use the information we collect to:
- Provide the Service: Create and manage your account, deliver practice tests and study materials, track your progress, and personalize your learning experience.
- Improve the Service: Analyze usage patterns, identify areas for improvement, develop new features, and optimize our AI tutoring algorithms.
- Communicate with You: Send you account-related notifications, subscription reminders, service updates, and respond to your inquiries.
- Marketing: With your consent, send you promotional communications about new features, special offers, and educational content. You can opt out at any time.
- Security and Fraud Prevention: Detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities.
- Legal Compliance: Comply with applicable laws, regulations, legal processes, or governmental requests.
- Research: Conduct anonymized and aggregated research to improve educational outcomes and develop better learning tools.
4. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: We share information with third-party vendors who perform services on our behalf, such as payment processing, email delivery, analytics, and cloud hosting. These providers are contractually obligated to protect your information and use it only for the services they provide to us.
- Legal Requirements: We may disclose your information if required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- Business Transfers: If PrepCurve is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
- With Your Consent: We may share your information for other purposes with your explicit consent.
- Aggregated Data: We may share anonymized, aggregated data that cannot reasonably be used to identify you for research, analytics, or marketing purposes.
5. Data Security
We implement reasonable technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:
- Encryption of data in transit using TLS/SSL protocols.
- Encryption of sensitive data at rest.
- Regular security assessments and monitoring.
- Access controls limiting employee access to personal information.
- Secure password hashing and authentication practices.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Data Retention
We retain your personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:
- Account Data: Retained while your account is active and for a reasonable period afterward to allow for reactivation or compliance with legal requirements.
- Usage Data: Retained for up to 3 years to analyze learning patterns and improve our Service.
- Payment Records: Retained as required by tax and financial regulations (typically 7 years).
- Support Communications: Retained for up to 3 years after resolution.
You may request deletion of your personal information at any time (see Section 9). After deletion, some information may be retained in anonymized form for research purposes.
7. Children's Privacy (COPPA Compliance)
PrepCurve is intended for users who are at least 13 years of age. We do not knowingly collect personal information from children under 13 without verifiable parental consent.
If you are under 13, you may not use the Service. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at privacy@prepcurve.com. We will take steps to delete such information from our systems.
For users between 13 and 18, we encourage parents and guardians to monitor their children's online activities and help enforce this Privacy Policy.
8. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience. Types of cookies we use:
- Essential Cookies: Required for the Service to function properly (e.g., authentication, security).
- Functional Cookies: Remember your preferences and settings.
- Analytics Cookies: Help us understand how users interact with the Service (e.g., Google Analytics).
- Marketing Cookies: Used to deliver relevant advertisements (only with your consent).
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service. For more information about opting out of analytics, visit the Google Analytics opt-out page.
9. Your Rights and Choices
Depending on your location, you may have certain rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to certain exceptions.
- Portability: Request your data in a portable, machine-readable format.
- Opt-Out: Opt out of marketing communications at any time by clicking "unsubscribe" in emails or adjusting your account settings.
- Withdraw Consent: Where we rely on consent, you may withdraw it at any time.
To exercise these rights, contact us at privacy@prepcurve.com. We will respond to your request within 30 days (or as required by applicable law).
10. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You may request information about the categories and specific pieces of personal information we have collected, the sources of collection, our purposes for collecting the information, and the categories of third parties with whom we share it.
- Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
- Do Not Sell: We do not sell personal information as defined by the CCPA.
To exercise your CCPA rights, contact us at privacy@prepcurve.com or call us at [phone number]. You may also designate an authorized agent to make requests on your behalf.
11. International Users
PrepCurve is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.
By using the Service, you consent to the transfer of your information to the United States and other countries where we operate. We take steps to ensure that your information receives adequate protection in accordance with this Privacy Policy.
European Users (GDPR): If you are in the European Economic Area, United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including the rights listed in Section 9. Our legal bases for processing your information include your consent, performance of our contract with you, and our legitimate business interests.
12. Third-Party Links and Services
The Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access.
We are not responsible for the privacy practices or content of third-party websites or services.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page.
- Notify you by email or through a notice on the Service (for material changes).
Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Email: privacy@prepcurve.com
Address: PrepCurve, Inc.
For data protection inquiries from European users, you may also contact our Data Protection Officer at dpo@prepcurve.com.