Privacy policy

We collect the following categories of information:

• Account information: the name, email address, profile photo, and unique identifier provided by the authentication provider you sign in through.
• Profile and study data: information you provide during onboarding (target score, test date, grade, self- identified weak areas) and information we generate as you use the Service (answers, scores, time spent, topic-level mastery, plan progress, achievements, streaks, and similar records).
• Tutoring and content interactions: messages you send to the AI tutor, voice transcripts if you choose to use microphone input, and drawings or annotations you produce in a lesson. If you attach a photo or screenshot of a question in the tutor chat, it is sent to the tutor model with that one message and is not stored: your saved chat history records only that a photo was sent.
• A parent or guardian email address, if you give us one: your profile lets you invite a parent or guardian to receive a weekly progress summary. Reports begin only after they confirm the address. You can turn reports off in your profile, and the recipient can unsubscribe. A message already being sent may still arrive. Only invite someone who is happy to hear from us.
• Device and usage data: technical information such as browser type and version, operating system, IP address (and the coarse geographic region inferred from it), language, session timestamps, and pseudonymous product-analytics events (e.g. pages viewed, features used, errors encountered).
• Cookies and similar technologies: we use cookies and browser storage necessary to keep you signed in, remember your preferences, and save your work. We also use product analytics to understand how Ace is used and to fix problems: pseudonymous usage events and session recordings in which all text and everything typed is masked. A signed-in account is identified to analytics only by an internal ID, never by name or email. Analytics is on by default; you can turn it off at any time under Privacy choices in the footer, and we honor your browser's Do Not Track setting.

We process information to:

• Provide, operate, personalize, and improve the Service, including the adaptive study plan and the AI tutor.
• Secure the Service and detect abuse, fraud, and violations of our Terms.
• Communicate with you about your account, security or service notices, and material changes to this policy.
• Conduct product analytics, research, and aggregated reporting on how the Service is used.
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information. We share information only in these limited circumstances:

• Service providers. We share limited data with trusted third-party vendors who process it on our behalf to operate the Service, including cloud infrastructure and hosting, authentication, database storage, large-language-model and speech-synthesis providers that power the AI tutor, and product-analytics providers. The providers used by the Service are listed below.
• Legal and safety. We may disclose information if we reasonably believe it is necessary to comply with a lawful request, enforce our Terms, protect the rights, property, or safety of Ace, our users, or the public, or prevent fraud or other illegal activity.
• Business transfers. If Ace is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality protections.
• With your consent. We may share information for any other purpose disclosed to you and to which you consent.

Some third-party providers may be located in countries outside your own. By using the Service, you consent to the transfer of your information to those jurisdictions.

We use the following providers to run the Service. Each receives only what it needs for its function, and each is bound to use it only to provide that function to us.

• Google Firebase (authentication, database, hosting of your profile and study records).
• Anthropic (the language model behind the tutor: receives lesson context and the messages you send it, including any photo of a question you attach).
• LiveKit (live voice sessions and room transport).
• Deepgram (speech recognition and spoken responses during live lessons).
• OpenAI (text-to-speech: receives the text the tutor is about to say in the text-based lesson experience).
• Stripe (payments: receives billing details directly. We never receive your full card number).
• Resend (transactional email, including the weekly parent summary).
• PostHog (pseudonymous usage analytics and masked session recordings; names, email addresses, lesson content and anything typed are excluded; you can turn it off under Privacy choices).
• Vercel (application hosting and delivery).

If we add or replace a provider we will update this list. We do not sell personal information, and we do not allow these providers to use your information for their own purposes.

The Service relies on third-party artificial-intelligence systems to generate lesson content, tutor responses, and audio narration. Your inputs (such as questions you ask the tutor) are transmitted to those providers solely to generate a response. We configure our use of these providers to prohibit training of their public models on your content, but we do not control their underlying infrastructure and make no warranty as to their behavior. Do not share sensitive personal information in tutor conversations.

We retain your information for as long as your account is active or as needed to provide the Service. You may delete your account at any time from Profile → Delete account. This disables access and queues removal of your profile and associated study data; cleanup can continue after you are signed out. Payment providers and Ace may retain billing records for accounting and to prevent duplicate payment processing. Residual copies may persist in backups or log files for a limited period and are deleted or de-identified in the ordinary course.

We use commercially reasonable administrative, technical, and physical safeguards to protect information, including encryption in transit, per-user database access rules, and least-privilege service-account credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your information, we will notify you and, where required, the appropriate authorities as required by applicable law.

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided personal information to us, contact us and we will take reasonable steps to delete that information. If you are between 13 and 18, you may use the Service only with the consent and involvement of a parent or legal guardian.

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to the processing of your personal information, and to data portability. You can exercise most of these rights directly inside the Service. For additional requests, contact us using the address in Section 12 and we will respond within the timeframes required by applicable law. We may need to verify your identity before honoring a request.

California residents have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA.

Ace is operated from the United States. If you access the Service from outside the United States, you acknowledge that your information will be transferred to, stored, and processed in the United States and in any other country where our service providers operate.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or in-product notice and, where required, seek your renewed acceptance. The “Last updated” date above indicates when this policy was last revised.

For questions or requests related to this policy, email support@aceactprep.com or use the Feedback button inside the app. We read every message.