Privacy Policy

Data We Collect

• Account information (name, email, grade)
• Progress data (lesson views, quiz attempts, scores)
• Usage analytics (session duration, device type)
• Payment information (handled by Stripe — we never store card numbers)

COPPA (Children Under 13)

We collect only the minimum data necessary for students under 13 and require verifiable parental consent before account activation. Parents may request deletion of their child's data at any time by contacting [email protected].

GDPR (EU Users)

EU users have the right to access, rectify, erase, and port their data. To exercise these rights, contact our Data Protection Officer at [email protected].

FERPA (School Users)

For students enrolled through a school, we act as a school official under FERPA. Student educational records are not shared with third parties without consent.

SOPIPA (Student Data Privacy — California)

In compliance with the Student Online Personal Information Protection Act, we do not use student data to target advertising, build profiles for non-educational purposes, sell student information, or disclose it to third parties except as needed to provide the educational service. Student data is used solely to deliver and improve the StudyBuddy learning experience.

CCPA / CPRA (California Residents)

California residents have the right to know what personal information we collect, request deletion of their data, and opt out of the sale or sharing of personal information. We do not sell or share personal information as defined by the CCPA. To exercise your rights, contact [email protected].

Data Retention

Active account data is retained while your account is active. Upon account deletion, personal data is removed within 30 days. Anonymised analytics data may be retained indefinitely.

Third-Party Services

• Auth0 — authentication
• Stripe — payment processing
• AWS — infrastructure (S3, CloudFront, RDS)
• SendGrid — transactional email