Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password (securely hashed). You may also provide your CFA exam date.

Usage Data

We automatically collect information about how you use the Service, including:

• Quiz and flashcard activity (scores, answers, study sessions)
• AI Tutor conversation history
• Lesson progress and completion data
• Login timestamps and streak information

Payment Information

Payment processing is handled entirely by a trusted, globally recognized payment provider. We never store your credit card numbers, bank account details, or any sensitive financial information on our servers. We only receive a transaction confirmation and order reference.

2. How We Use Your Information

• Personalization: To customize your study plan, adaptive quizzes, and AI recommendations based on your progress.
• Service Delivery: To provide access to lessons, track your learning analytics, and deliver exam readiness predictions.
• Communication: To send account-related emails (welcome emails, subscription confirmations, critical updates).
• Improvement: To analyze aggregate usage patterns and improve the Service.

3. Data Storage & Security

• Your data is stored in a secure, enterprise-grade cloud database with row-level access controls ensuring each user can only access their own data.
• All data is transmitted over HTTPS with TLS encryption.
• Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• We implement security headers (HSTS, X-Frame-Options) and additional protections to guard against common web vulnerabilities.
• We will never sell, rent, or trade your personal data to third parties for marketing purposes.

4. Third-Party Services

We partner with industry-leading, trusted third-party providers to deliver the Service. These include services for database hosting, user authentication, payment processing, AI-powered features, email delivery, and application hosting. Each provider is selected for its strong security practices, compliance certifications, and market reputation.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or necessary for legitimate business purposes (e.g., fraud prevention).

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data.
• Correction: Update inaccurate information through your account settings.
• Deletion: Request deletion of your account and associated data.
• Portability: Request your data in a machine-readable format.

To exercise these rights, contact us at support@edufite.com.

7. Cookies

We use essential cookies for authentication and session management only. We do not use third-party tracking cookies, advertising cookies, or any analytics cookies that identify individual users.

8. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or in-app notification. Your continued use of the Service after changes constitutes acceptance.

10. Contact

For privacy-related inquiries, please contact us at support@edufite.com.