Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password (securely hashed). You may also provide your CFA exam date.

Usage Data

We automatically collect information about how you use the Service, including:

• Quiz and flashcard activity (scores, answers, study sessions)
• AI Tutor conversation history
• Lesson progress and completion data
• Login timestamps and streak information

Payment Information

Payment processing is handled entirely by a trusted, globally recognized payment provider. We never store your credit card numbers, bank account details, or any sensitive financial information on our servers. We only receive a transaction confirmation and order reference.

2. How We Use Your Information

• Personalization: To customize your study plan, adaptive quizzes, and AI recommendations based on your progress.
• Service Delivery: To provide access to lessons, track your learning analytics, and deliver exam readiness predictions.
• Communication: To send account-related emails (welcome emails, purchase confirmations, critical updates).
• Improvement: To analyze aggregate usage patterns and improve the Service.

3. Data Storage & Security

• Your data is stored in a secure, enterprise-grade cloud database with row-level access controls ensuring each user can only access their own data.
• All data is transmitted over HTTPS with TLS encryption.
• Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• We implement security headers (HSTS, X-Frame-Options) and additional protections to guard against common web vulnerabilities.
• We will never sell, rent, or trade your personal data to third parties for marketing purposes.

4. Third-Party Services

We partner with industry-leading, trusted third-party providers to deliver the Service. These include services for database hosting, user authentication, payment processing, AI-powered features, email delivery, and application hosting. Each provider is selected for its strong security practices, compliance certifications, and market reputation.

Three of these run inside your browser rather than on our servers, which means your browser contacts them directly and they can see your IP address:

• A privacy-friendly web analytics service, used on every page to count visits and measure page speed. It is cookieless and we do not use it to identify individual visitors.
• A translation provider, loaded only if you choose a language from the translate control. Picking a language stores your choice in a googtrans cookie (see Cookies below).
• A web font provider, used inside lesson content.

5. Data Retention

We retain your data for as long as your account is active. Account deletion is handled by our team rather than a self-service button, so ask us using the contact route in Your Rights below. Once we receive your request, we remove your personal data within 30 days, except where retention is required by law or necessary for legitimate business purposes (e.g., fraud prevention).

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data.
• Correction: Update inaccurate information through your account settings.
• Deletion: Request deletion of your account and associated data.
• Portability: Request your data in a machine-readable format.

To exercise these rights, contact us at support@edufite.com.

7. Cookies

We use essential cookies for authentication and session management. We do not use advertising cookies, and we do not use cookies to track you across other websites or to build a profile of you.

One non-essential cookie exists. If you pick a language from the translate control, a googtrans cookie stores that choice so the page stays translated. It is set only when you choose a language, and clearing it in your browser or switching back to English removes it.

8. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or in-app notification. Your continued use of the Service after changes constitutes acceptance.

10. Contact

For privacy-related inquiries, please contact us at support@edufite.com.