Skip to main content

Privacy Policy

Last updated: April 3, 2026

MyAcademyVault ("we," "our," or "us") operates the MyAcademyVault website and application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

1.1 Personal Information

When you create an account, we collect:

  • Name and email address
  • Password (stored securely using bcrypt hashing)
  • Role (Student, Parent, or Teacher)
  • Grade level (for students)

1.2 Usage Data

We automatically collect information about how you use the Service:

  • Chat messages and conversations with the AI tutor
  • Practice problem attempts and answers
  • Photos uploaded for OCR processing
  • Progress and activity data
  • Daily usage counts

1.3 Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers or full payment details on our servers. We receive and store only your Stripe customer ID and subscription status.

1.4 Google Sign-In (OAuth Authentication)

If you choose to sign in using your Google account, we use Google's OAuth authentication service. When you authenticate with Google:

  • Your name, email address, and profile picture are retrieved from your Google account and stored in our system to create or link your MyAcademyVault account.
  • We store your Google user ID and the authentication token needed to maintain your session, but we do not store your Google password or full authentication credentials.
  • Your data is protected under the privacy practices described in this Privacy Policy.
  • Google's collection and use of data is governed by Google's Privacy Policy.
  • You can revoke MyAcademyVault's access to your Google account at any time through your Google Account Permissions.

2. How We Use Your Information

  • To provide and personalize the AI tutoring experience based on your grade level
  • To track your learning progress and generate insights
  • To allow parents and teachers to monitor student progress (with linked accounts only)
  • To process payments and manage subscriptions
  • To improve our AI prompts and Service quality
  • To send important Service-related communications

3. Children's Privacy

Our Service is used by students of all ages, including children under 13. Here is how that works and what we ask of the adults involved:

  • An adult sets up the account:If the student is under 13, the account must be created and supervised by a parent, guardian or teacher, who agrees to this policy on the child's behalf. By creating an account you confirm you are at least 13 years old, or that you are the adult responsible for the student who will use it.
  • Limited Data Collection: We collect only the minimum information necessary to provide the tutoring service.
  • Parental Access:Parents can review their child's information, request deletion, and manage their child's account through the Parent Dashboard.
  • No Third-Party Marketing:We never share children's personal information with third parties for marketing purposes, and we do not show ads.
  • If we got it wrong: If you believe a child under 13 created an account without an adult, contact us and we will delete the account and its information promptly.

3a. Information Collected Automatically

Like any website, our servers record basic technical information when you visit: your IP address, browser and device type, the pages you request and the time of the request. We use it to keep the Service running, to apply usage limits, and to investigate abuse and errors. If you accept analytics in our cookie banner, Google Analytics also records which pages and features you use. See our Cookie Policy for what that involves and how to refuse it.

4. Data Sharing and Third Parties

We share data with the following third-party services solely to operate the Service:

  • AI Service Providers: Chat messages are sent to our AI partners to generate tutoring responses. Messages are processed per our partners' privacy policies.
  • Stripe: Processes payments securely.
  • Amazon Web Services (S3): Stores uploaded images securely.
  • Google Analytics: Only if you accept analytics cookies. It receives which pages you visit, not your name, email or anything you type into the tutor.
  • Error monitoring (Sentry): When something breaks, technical details about the error are sent so we can fix it. It is configured to leave out personal information and does not record your screen.

We do not sell your personal information to any third party.

5. Data Retention

  • Account data is retained as long as your account is active.
  • Chat history and progress data can be deleted at any time from Settings.
  • Upon account deletion, all personal data is permanently removed within 30 days.
  • Uploaded images are deleted after OCR processing is complete.

6. Data Security

We implement industry-standard security measures including:

  • Passwords hashed with bcrypt (12 salt rounds)
  • HTTPS encryption for all data in transit
  • Database encryption at rest
  • JWT-based session management
  • Role-based access controls

7. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate personal data
  • Erasure: Request deletion of your personal data
  • Portability: Receive your data in a portable format
  • Objection: Object to processing of your personal data
  • Restriction: Request restricted processing

To exercise these rights, contact us at [email protected].

8. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to delete it, and the right to opt out of the sale of personal information. We do not sell personal information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: