Privacy Policy

1. What Information Do We Collect?

Information You Provide Directly

We collect personal information that you voluntarily provide when you register on Prepridge or use our Services. This includes:

• Account information: Full name, email address, username, password
• Age verification: Date of birth (required for COPPA compliance)
• Parental consent: Parent or guardian email address (required for users under 18)
• Academic information: Target SAT score, test date, PSAT score (optional)

Sensitive Information

We collect the following categories of sensitive information only when necessary and with your consent:

• Account login credentials — email and password
• Student data — SAT practice scores, domain performance, study progress
• Personal data from known children — for users aged 13–17 with parental consent

Information We Do NOT Collect

We do not collect payment information, location data, biometric data, social security numbers, or any government identifiers. We do not use tracking cookies, advertising pixels, or third-party analytics. All user data is stored locally in your browser.

2. How Do We Process Your Information?

We process your information for the following purposes:

• To deliver our Services — creating and managing your account, providing practice questions, AI tutoring, and progress tracking
• To personalize your experience — adaptive practice recommendations, score predictions, and personalized study plans based on your performance
• To improve our Services — identifying usage trends and improving platform features
• To communicate with you — sending administrative information, responding to support inquiries
• To protect our Services — fraud monitoring, security, and abuse prevention
• To comply with legal obligations — including COPPA, FERPA, and CCPA requirements

We process your information only when we have a valid legal reason — primarily to fulfill our contract with you (providing the Services) or to comply with applicable law.

3. When and With Whom Do We Share Your Information?

We share your information only with the following third-party service providers who help us operate Prepridge:

• Anthropic, PBC — Your messages to the AI Tutor are processed by Anthropic's Claude API to generate educational responses. Anthropic processes this data in accordance with their privacy policy at anthropic.com/privacy.
• Netlify, Inc. — Hosts the Prepridge platform and serverless functions. Netlify processes server logs in accordance with their privacy policy.

We never sell your personal information. We do not share your data with advertisers, data brokers, or any other third parties beyond the service providers listed above.

We may disclose your information if required by law, court order, or to protect the rights and safety of Prepridge users.

4. Do We Offer AI-Based Products?

Yes. Prepridge offers an AI Tutor powered by Anthropic's Claude technology. By using the AI Tutor, you acknowledge that:

• Your messages are sent to Anthropic's API for processing to generate educational responses
• AI responses are generated automatically and may occasionally contain errors
• AI Tutor responses are for educational guidance only
• You may opt out at any time by simply not using the AI Tutor feature — all other platform features remain fully functional

To request deletion of AI conversation data, email hello@prepridge.com with subject line "AI Data Opt-Out Request."

Our AI features include: AI bots, AI insights, AI predictive analytics, machine learning models, natural language processing, and text analysis — all used solely for educational SAT preparation purposes.

5. How Long Do We Keep Your Information?

We keep your personal information for as long as you have an active account with us. When you delete your account, we will delete or anonymize your personal information within 30 days, unless we are required by law to retain it longer.

To request account deletion, email hello@prepridge.com with subject line "Account Deletion Request."

6. How Do We Keep Your Information Safe?

We implement appropriate technical and organizational security measures including:

• HTTPS/SSL encryption on all data in transit
• API keys secured via server-side functions — never exposed in browser code
• Security headers (Content Security Policy, XSS Protection, X-Frame-Options)
• Rate limiting on AI endpoints to prevent abuse
• Login attempt throttling to prevent brute force attacks
• Password strength requirements and common password blocking
• Prompt injection filtering on all AI requests

However, no electronic transmission over the internet can be guaranteed to be 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. What Are Your Privacy Rights?

Depending on your location, you may have the following rights regarding your personal information:

• Right to access — request a copy of the personal information we hold about you
• Right to correct — request correction of inaccurate information
• Right to delete — request deletion of your personal information
• Right to opt out — opt out of any processing of your data for purposes beyond providing the Services
• Right to non-discrimination — we will not discriminate against you for exercising your privacy rights

To exercise any of these rights, contact us at hello@prepridge.com. We will respond within 30 days.

California Residents — Shine the Light Law

California Civil Code Section 1798.83 permits California residents to request information about personal data shared with third parties for direct marketing. Prepridge does not share personal data with third parties for direct marketing purposes.

8. Children's Privacy (COPPA)

Prepridge serves high school students, including users aged 13–17. We comply with the Children's Online Privacy Protection Act (COPPA):

• Minimum age: Users must be at least 13 years old. We hard-block registration for users under 13.
• Parental consent: Users aged 13–17 must provide a parent or guardian email address and parental consent before accessing the platform.
• No advertising: We do not display advertising to any users, including minors.
• No data selling: We never sell personal information, especially that of minors.
• Parental rights: Parents may review, correct, or request deletion of their child's information by contacting hello@prepridge.com.

If we discover that we have collected information from a child under 13 without proper consent, we will immediately delete that information.

FERPA Awareness

Prepridge handles student education data with care consistent with the principles of the Family Educational Rights and Privacy Act (FERPA). Student performance data is used solely to provide and improve our educational services and is never shared with schools, districts, or third parties without consent.

9. US State Privacy Rights

If you are a resident of California, Colorado, Connecticut, Virginia, or other US states with privacy laws, you have additional rights including the right to know what personal information we collect, how we use it, and with whom we share it. You also have the right to request deletion and to opt out of the sale of personal information (we do not sell personal information).

Categories of Personal Information We Collect

To submit a privacy request, email hello@prepridge.com or visit prepridge.com.

10. Do We Make Updates to This Policy?

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email at least 30 days before the changes take effect. The "Last updated" date at the top of this policy reflects the most recent revision.

Your continued use of Prepridge after the effective date constitutes acceptance of the updated policy.

11. How Can You Contact Us?