Skip to main content

Privacy Policy

Last updated: April 3, 2026

MyAcademyVault ("we," "our," or "us") operates the MyAcademyVault website and application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

1.1 Personal Information

When you create an account, we collect:

  • Name and email address
  • Password (stored securely using bcrypt hashing)
  • Role (Student, Parent, or Teacher)
  • Grade level (for students)

1.2 Usage Data

We automatically collect information about how you use the Service:

  • Chat messages and conversations with the AI tutor
  • Practice problem attempts and answers
  • Photos uploaded for OCR processing
  • Progress and activity data
  • Daily usage counts

1.3 Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers or full payment details on our servers. We receive and store only your Stripe customer ID and subscription status.

1.4 Google Sign-In (OAuth Authentication)

If you choose to sign in using your Google account, we use Google's OAuth authentication service. When you authenticate with Google:

  • Your name, email address, and profile picture are retrieved from your Google account and stored in our system to create or link your MyAcademyVault account.
  • We store your Google user ID and the authentication token needed to maintain your session, but we do not store your Google password or full authentication credentials.
  • Your data is protected under the privacy practices described in this Privacy Policy.
  • Google's collection and use of data is governed by Google's Privacy Policy.
  • You can revoke MyAcademyVault's access to your Google account at any time through your Google Account Permissions.

2. How We Use Your Information

  • To provide and personalize the AI tutoring experience based on your grade level
  • To track your learning progress and generate insights
  • To allow parents and teachers to monitor student progress (with linked accounts only)
  • To process payments and manage subscriptions
  • To improve our AI prompts and Service quality
  • To send important Service-related communications

3. Children's Privacy (COPPA Compliance)

Our Service is designed for use by students of all ages, including children under 13. We comply with the Children's Online Privacy Protection Act (COPPA):

  • Parental Consent: For users under 13, a parent or guardian must create and link the account. We require verifiable parental consent before collecting personal information from children under 13.
  • Limited Data Collection: We collect only the minimum information necessary to provide the tutoring service.
  • Parental Access:Parents can review their child's information, request deletion, and manage their child's account through the Parent Dashboard.
  • No Third-Party Marketing:We never share children's personal information with third parties for marketing purposes.

4. Data Sharing and Third Parties

We share data with the following third-party services solely to operate the Service:

  • AI Service Providers: Chat messages are sent to our AI partners to generate tutoring responses. Messages are processed per our partners' privacy policies.
  • Stripe: Processes payments securely.
  • Amazon Web Services (S3): Stores uploaded images securely.

We do not sell your personal information to any third party.

5. Data Retention

  • Account data is retained as long as your account is active.
  • Chat history and progress data can be deleted at any time from Settings.
  • Upon account deletion, all personal data is permanently removed within 30 days.
  • Uploaded images are deleted after OCR processing is complete.

6. Data Security

We implement industry-standard security measures including:

  • Passwords hashed with bcrypt (12 salt rounds)
  • HTTPS encryption for all data in transit
  • Database encryption at rest
  • JWT-based session management
  • Role-based access controls

7. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate personal data
  • Erasure: Request deletion of your personal data
  • Portability: Receive your data in a portable format
  • Objection: Object to processing of your personal data
  • Restriction: Request restricted processing

To exercise these rights, contact us at [email protected].

8. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to delete it, and the right to opt out of the sale of personal information. We do not sell personal information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: