Privacy Policy
Effective July 27, 2026
This is a plain-language starting template, not legal advice — it hasn't been reviewed by an attorney. If you collect data from users in a specific region (e.g. the EU/UK under GDPR, California under CCPA, or children under 13 under COPPA), have this reviewed before relying on it.
1. What we collect
- Account info: the email address, name, and password you sign up with. Passwords are stored as a salted hash — never in plain text.
- Study activity: your study plan, session and review history, streaks, badges, wordbank entries, and imported decks — everything needed to schedule reviews and show your progress.
- Usage events: timestamps and types of actions (lesson started/finished, review answered, deck generated) used for scheduling, your dashboard stats, and to help us detect misuse of the Service (see Section 5).
- Contact form submissions: whatever you enter (name, phone, email, message) if you use the contact form.
2. How we use it
To run the Service: authenticate you, schedule what to review next, generate practice questions, track your streak and badges, and respond to messages you send us. We don't sell your data.
3. Third-party services
We rely on a small number of infrastructure providers:
- Vercel — hosts the application.
- Neon (Postgres) — stores account, study, and activity data.
- Google Gemini— generates practice questions, example sentences, and synonyms from the vocabulary terms you're studying (word and definition text is sent to Gemini to generate this content).
Each of these providers has its own privacy practices governing infrastructure they operate on our behalf.
4. Cookies
We use a single first-party session cookie to keep you signed in. It's functional, not for advertising or tracking across other sites.
5. Security & suspicious activity
Passwords are hashed and salted. Account-related requests require an authenticated session. We rate-limit and log activity on the Service (see Section 1) partly to protect your data and partly to detect automated scraping or abuse of the Service's content and question bank.
6. Children's privacy
KT AI Learn is a study tool for SSAT preparation, and many of our users are under 13. We don't knowingly collect more information than needed to run the Service (an email, a name, and study activity), and we don't use that data for advertising or sell it to third parties. If you're a parent or guardian and want to review, update, or delete your child's account data, contact us using the details below and we'll act on that request.
7. Your choices
You can edit your study plan and delete individual wordbank/deck entries directly in the app. To access, correct, or delete your account and associated data entirely, contact us — we'll handle it manually and confirm once it's done.
8. Data retention
We keep account and activity data for as long as your account is active, so your progress and schedule stay intact. If you ask us to delete your account, we'll remove your personal data within a reasonable time, except where we need to retain limited records to comply with law or resolve disputes.
9. Changes to this policy
We may update this policy as the Service evolves. Material changes will be reflected by updating the effective date above.