Privacy Policy

1. Information we collect

• Account information: your email address, name, role (student or parent), and — for students — grade level.
• Learning activity: problems you attempt, answers, progress and accuracy, mock-test results, and your conversations with the AI coach.
• Uploads: files you submit to features like ProblemLab (e.g. PDFs or images) and any content extracted from them.
• Payment information: if you subscribe or buy credits, our payment processor (Stripe) handles your card details. We receive limited billing information (such as status and a customer ID) but not your full card number.
• Technical data: basic information needed to operate and secure the service, such as authentication session cookies and limited request metadata.

2. Your AI provider key (BYOK) stays in your browser

If you choose “bring your own key,” your AI provider API key is stored only in your browser (local storage). It is never saved to our database or servers. It is sent with a request only to reach your chosen AI provider, used in memory for that request, and not logged. Clearing your browser data removes it.

3. How we use information

• to provide the coaching service, track progress, and personalize practice;
• to generate hints, explanations, and problems using AI;
• to operate accounts, process payments, and provide support;
• to secure the service and prevent abuse;
• to communicate with you about your account (e.g. confirmation or notification emails).

We do not sell your personal information, use it for behavioral advertising, or use your content to train AI models.

4. How we share information (service providers)

We share information only with vendors that help us run VectorCoach, under agreements that limit their use of it:

• Hosting, database & authentication: Supabase.
• Payments: Stripe.
• Email delivery: Resend.
• AI model providers: to generate coaching content, the text or files you submit (your questions, problem content, and uploads) are sent to AI providers such as Groq, Anthropic, Google, OpenAI, and/or Meta, depending on the model in use. If you use BYOK, requests go to the provider for your own key. We send this content only to generate responses for you, not to train models; each provider processes it under its own terms, which we encourage you to review.

We may also disclose information if required by law or to protect rights, safety, and the integrity of the service.

5. Children's privacy

VectorCoach is designed for students, including children under 13. We are committed to protecting children’s privacy and complying with applicable laws (such as COPPA in the United States).

• We collect only the information needed to provide the educational service (such as name, email, grade, and learning activity).
• A parent or guardian must consent to a child’s use of VectorCoach. Parents can link to their child’s account to review progress.
• We do not show children behavioral advertising and do not sell their information.
• A parent or guardian may review their child’s information, ask us to correct it, or request that we delete the child’s account and data by emailing us.

6. Cookies & local storage

We use cookies that are necessary to sign you in and keep your session secure. We use your browser’s local storage for preferences (such as light/dark theme) and, if you enable BYOK, to store your AI key as described above. We do not use third-party advertising or cross-site tracking cookies.

7. Data retention

We keep your information while your account is active. When you delete your account (or ask us to), we remove your personal information from our active databases within 30 days. Residual copies may remain in encrypted backups and security logs for up to 90 days, after which they are deleted. We may keep anonymized, aggregated statistics (which no longer identify you) indefinitely, and we may retain limited records longer where required for legal, security, or accounting obligations.

8. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

9. Your rights & choices

Depending on where you live (for example, under the EU/UK GDPR or California’s CCPA), you may have rights to access, correct, delete, or export your personal information, to withdraw consent, or to object to certain processing. We do not sell your personal information. To exercise these rights — or for a parent to act on a child’s behalf — email [email protected]. We may need to verify your identity first.

10. International users

VectorCoach is operated from [COUNTRY/REGION], and your information may be processed there and by our service providers in other countries. In particular, when you use the AI coach, your content may be processed by AI providers located in the United States. By using the service, you understand your information may be transferred to and processed in locations with different data-protection laws than your own.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the date above and, for material changes, take reasonable steps to notify you.

12. Contact us

For privacy questions or requests, email [email protected]. See also our Terms of Service.