Privacy Policy

1. Who We Are

AZ Education ("we," "us," "our") operates the website at azeducationacademy.com and related services. We provide adaptive test preparation tools for standardized exams including the SAT, ACT, and others.

For privacy questions, contact us at: privacy@azeducation.com

2. Information We Collect

We collect the following information when you create an account and use our service:

• Account information: Email address, display name, and password (stored as a secure hash — we never see your actual password).
• Learning data: Questions you answer, whether your answers are correct, time spent per question, study session history, accuracy scores, and Bloom's Taxonomy cognitive level progression.
• Preferences: Target exam, target score, experience level, and focus areas you select during onboarding.
• Subscription data: Plan type and status (we do not store payment card numbers — see Section 6).

We do not collect: phone numbers, physical addresses, social security numbers, photos, precise location data, or payment card numbers.

3. How We Use Your Information

• Personalized learning: Your learning data powers our adaptive algorithms — spaced repetition scheduling, difficulty adjustment, and cognitive level tracking — so the platform focuses on what you need most.
• Account management: Your email and name are used to identify your account and communicate with you about the service.
• Service improvement: We may analyze aggregated, anonymized usage patterns to improve our question bank and algorithms. Individual data is never shared externally for this purpose.

We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.

4. How We Store and Protect Your Information

• Database: Your data is stored in Supabase (PostgreSQL), which provides encryption at rest and in transit.
• Authentication: Passwords are hashed using bcrypt via Supabase Auth. We never store plaintext passwords.
• Access control: API routes verify your identity via JWT tokens before serving any data. Database-level access controls restrict data to authorized users.
• Hosting: The application is served over HTTPS via Cloudflare Pages, providing TLS encryption for all data in transit.

5. Third-Party Services

We use the following third-party services to operate AZ Education:

• Supabase — Database and authentication (Privacy Policy)
• Cloudflare — Hosting and content delivery (Privacy Policy)
• Google Gemini — AI tutor feature; your questions to the AI tutor are sent to Google's API (Terms)

When payment processing is added, we will use Stripe for all payment handling. Card numbers will be processed entirely by Stripe and will never touch our servers.

6. Payment Information

AZ Education does not currently process payments. When payment functionality is added, we will use Stripe Checkout, a PCI-compliant hosted payment page. Your credit card number, expiration date, and CVV will be handled entirely by Stripe. We will only receive confirmation of payment status — never your card details.

7. Data Retention

We retain your account and learning data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days. Aggregated, anonymized data (which cannot identify you) may be retained indefinitely for service improvement.

8. Your Rights

You have the right to:

• Access your data — view your profile, learning history, and progress at any time through the dashboard.
• Delete your data — use the "Reset Progress" feature to clear learning data, or contact us to delete your entire account.
• Export your data — contact us at privacy@azeducation.com to request a copy of your data.
• Correct your data — update your display name and email through your account settings.

California residents may have additional rights under the CCPA. Contact us for details.

9. Children's Privacy

AZ Education is designed for high school students preparing for standardized tests. Users must be at least 13 years old to create an account. We do not knowingly collect personal information from children under 13. If we discover that a user is under 13, we will promptly delete their account and data.

If you are a parent or guardian and believe your child under 13 has created an account, please contact us at privacy@azeducation.com.

10. Cookies

AZ Education uses only essential cookies required for authentication (Supabase session tokens). We do not use advertising cookies, tracking pixels, or analytics cookies.

11. Data Breach Notification

In the event of a data breach affecting your personal information, we will notify affected users within 45 days of discovery, as required by Arizona law (ARS 18-552). Notification will be sent to your registered email address and will include: what happened, what data was affected, and what steps we are taking.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the site. Your continued use of AZ Education after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy questions, data requests, or concerns:
Email: privacy@azeducation.com