privacy policy

We collect the following categories of information:

• Account information: the name, email address, profile photo, and unique identifier provided by the authentication provider you sign in through.
• Profile and study data: information you provide during onboarding (target score, test date, grade, self- identified weak areas) and information we generate as you use the Service (answers, scores, time spent, topic-level mastery, plan progress, achievements, streaks, and similar records).
• Tutoring and content interactions: messages you send to the AI tutor, voice transcripts if you choose to use microphone input, and drawings or annotations you produce in a lesson.
• A parent or guardian email address, if you give us one: onboarding and your profile both let you add an address so a weekly progress summary can be sent to it. It is optional, we use it for nothing else, and removing it from your profile stops the emails. Because that address belongs to someone else, only add it if that person is happy to hear from us.
• Device and usage data: technical information such as browser type and version, operating system, IP address (and the coarse geographic region inferred from it), language, session timestamps, and pseudonymous product-analytics events (e.g. pages viewed, features used, errors encountered).
• Cookies and similar technologies: we use cookies and browser storage necessary to keep you signed in, remember your preferences, and measure product usage in aggregate.

We process information to:

• Provide, operate, personalize, and improve the Service, including the adaptive study plan and the AI tutor.
• Secure the Service and detect abuse, fraud, and violations of our Terms.
• Communicate with you about your account, security or service notices, and material changes to this policy.
• Conduct product analytics, research, and aggregated reporting on how the Service is used.
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information. We share information only in these limited circumstances:

• Service providers. We share limited data with trusted third-party vendors who process it on our behalf to operate the Service, including cloud infrastructure and hosting, authentication, database storage, large-language-model and speech-synthesis providers that power the AI tutor, and product-analytics providers. These vendors are contractually bound to use the data only for the services they provide to us and to protect it with appropriate safeguards. We do not disclose the identities of specific vendors in this policy; they may change from time to time.
• Legal and safety. We may disclose information if we reasonably believe it is necessary to comply with a lawful request, enforce our Terms, protect the rights, property, or safety of Ace, our users, or the public, or prevent fraud or other illegal activity.
• Business transfers. If Ace is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality protections.
• With your consent. We may share information for any other purpose disclosed to you and to which you consent.

Some third-party providers may be located in countries outside your own. By using the Service, you consent to the transfer of your information to those jurisdictions.

We use the following providers to run the Service. Each receives only what it needs for its function, and each is bound to use it only to provide that function to us.

• Google Firebase (authentication, database, hosting of your profile and study records).
• Anthropic (the language model behind the tutor: receives lesson context and the messages you send it).
• OpenAI (text-to-speech: receives the text the tutor is about to say so it can be spoken aloud).
• Stripe (payments: receives billing details directly. We never receive your full card number).
• Resend (transactional email, including the weekly parent summary).
• PostHog (pseudonymous product analytics).
• Vercel (application hosting and delivery).

If we add or replace a provider we will update this list. We do not sell personal information, and we do not allow these providers to use your information for their own purposes.

The Service relies on third-party artificial-intelligence systems to generate lesson content, tutor responses, and audio narration. Your inputs (such as questions you ask the tutor) are transmitted to those providers solely to generate a response. We configure our use of these providers to prohibit training of their public models on your content, but we do not control their underlying infrastructure and make no warranty as to their behavior. Do not share sensitive personal information in tutor conversations.

We retain your information for as long as your account is active or as needed to provide the Service. You may delete your account at any time from Profile → Delete account, which permanently removes your Ace profile and associated study data from our primary database. Residual copies may persist in backups or log files for a limited period and are deleted or de-identified in the ordinary course.

We use commercially reasonable administrative, technical, and physical safeguards to protect information, including encryption in transit, per-user database access rules, and least-privilege service-account credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your information, we will notify you and, where required, the appropriate authorities as required by applicable law.

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided personal information to us, contact us and we will take reasonable steps to delete that information. If you are between 13 and 18, you may use the Service only with the consent and involvement of a parent or legal guardian.

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to the processing of your personal information, and to data portability. You can exercise most of these rights directly inside the Service. For additional requests, contact us using the address in Section 12 and we will respond within the timeframes required by applicable law. We may need to verify your identity before honoring a request.

California residents have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA.

Ace is operated from the United States. If you access the Service from outside the United States, you acknowledge that your information will be transferred to, stored, and processed in the United States and in any other country where our service providers operate.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or in-product notice and, where required, seek your renewed acceptance. The “Last updated” date above indicates when this policy was last revised.

For questions or requests related to this policy, use the Feedback button inside the app. We read every message.