Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password (securely hashed). You may also provide your CFA exam date.

Study Email List

If you join our study email list, we store your email address, where you joined, and which emails in the series you have received.

Website Assistant Chats

If you use the assistant on our public pages, we store your questions, the assistant's answers, the page you asked from and the topic of each question. The first three answers need no email; to keep chatting, you give an email address, which we store with that conversation. We do not store your IP address with the conversation. To stop misuse we keep your IP address, with a count of the messages sent from it, as described under Misuse Protection below. Your questions are sent to our AI providers to write the answers, so please do not type personal or sensitive details into the chat.

Misuse Protection

To stop misuse, a few public features (the study email sign-up, the free mini mock and the website assistant) keep the IP address a request comes from, with a count of the requests sent from it. These records are kept apart from your account and your conversations, and are deleted automatically within 3 days of your last request.

Question Reports

If you report a problem with a practice question, we store with your account the reason you choose, any note you add, which question it concerns and when you sent it, together with our notes on how the report was handled. New reports are also sent to us by email so we can act on them. We read these reports to correct questions, and they are deleted with your account. Please do not type personal or sensitive details into the note.

Usage Data

We automatically collect information about how you use the Service, including:

• Quiz and flashcard activity (scores, answers, study sessions)
• AI Tutor conversation history
• Lesson progress and completion data
• Login timestamps and streak information

Payment Information

Payment processing is handled entirely by a trusted, globally recognized payment provider. We never store your credit card numbers, bank account details, or any sensitive financial information on our servers. We only receive a transaction confirmation and order reference.

2. How We Use Your Information

• Personalization: To customize your study plan, adaptive quizzes, and AI recommendations based on your progress.
• Service Delivery: To provide access to lessons, track your learning analytics, and deliver exam readiness predictions.
• Communication: To send account-related emails (welcome emails, purchase confirmations, critical updates).
• Study emails (only if you opt in): If you join our study email list, through a free resource on our website or by ticking the box when you sign up, we send a short series of study emails, which may include offers for EduFite paid plans. Every one of these emails has an unsubscribe link, and unsubscribing does not affect your account.
• Website assistant: To answer your questions about EduFite, to continue the conversation once you give an email, to know you as someone interested in EduFite, and to see, in totals only, which topics visitors ask about. Giving an email to the assistant does not add you to our study email list unless you tick that box.
• Improvement: To analyze aggregate usage patterns and improve the Service.

3. Data Storage & Security

• Your data is stored in a secure, enterprise-grade cloud database with row-level access controls ensuring each user can only access their own data.
• All data is transmitted over HTTPS with TLS encryption.
• Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• We implement security headers (HSTS, X-Frame-Options) and additional protections to guard against common web vulnerabilities.
• We will never sell, rent, or trade your personal data to third parties for marketing purposes.

4. Third-Party Services

We partner with industry-leading, trusted third-party providers to deliver the Service. These include services for database hosting, user authentication, payment processing, AI-powered features, email delivery, video delivery, and application hosting. Each provider is selected for its strong security practices, compliance certifications, and market reputation.

Four of these run inside your browser rather than on our servers, which means your browser contacts them directly and they can see your IP address:

• A privacy-friendly web analytics service, used on every page to count visits and measure page speed. It is cookieless and we do not use it to identify individual visitors.
• A translation provider, loaded only if you choose a language from the translate control. Picking a language stores your choice in a googtrans cookie (see Cookies below).
• A web font provider, used inside lesson content.
• A video streaming provider, used only on lessons that have a video. The video player and the video itself load from its servers. The player may remember your playback position and settings in your browser, so a video can resume where you left off, and may send the provider anonymous technical data about playback, such as video quality and errors. To discourage copying of lesson videos, the player may show the email address of your account in a corner of the video. When it does, EduFite draws it on your screen; it is not sent to the video provider and is not written into the video.

5. Data Retention

Website assistant conversations are deleted automatically: after 90 days if no email was given, and otherwise 3 years after your last recorded activity with EduFite, such as a chat, a sign-in or a purchase. The IP address records kept for misuse protection are deleted automatically within 3 days of the last request.

We retain your data for as long as your account is active. Account deletion is handled by our team rather than a self-service button, so ask us using the contact route in Your Rights below. Once we receive your request, we remove your personal data within 30 days, except where retention is required by law or necessary for legitimate business purposes (e.g., fraud prevention). Records of your purchases (the order, its amount, any discount code used and the PayPal transaction reference) are kept after your account is deleted, without your name or email, to meet tax and accounting obligations.

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data.
• Correction: Update inaccurate information through your account settings.
• Deletion: Request deletion of your account and associated data.
• Portability: Request your data in a machine-readable format.

To exercise these rights, contact us at support@edufite.com.

7. Cookies

We use essential cookies for authentication and session management. We do not use advertising cookies, and we do not use cookies to track you across other websites or to build a profile of you.

One non-essential cookie exists. If you pick a language from the translate control, a googtrans cookie stores that choice so the page stays translated. It is set only when you choose a language, and clearing it in your browser or switching back to English removes it.

8. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or in-app notification. Your continued use of the Service after changes constitutes acceptance.

10. Contact

For privacy-related inquiries, please contact us at support@edufite.com.