Privacy Policy

Effective date: June 10, 2026. This policy describes what AcuPass collects, why, and the choices you have.

1. What we collect

• Account data — name, email address, and password (stored as a hash by our authentication provider, Supabase).
• Study data — your answers, confidence ratings, time per question, session results, study-plan settings (exam date, minutes per day), and spaced-repetition scheduling state.
• Tutor questions — text you type into the “Ask why” tutor, which is processed by an AI provider (Anthropic) together with the related question and its verified source entry.
• Payment data — handled by our payment processor; we never see or store full card numbers.

2. How we use it

Study data powers the product itself: readiness estimates, weakness targeting, spaced repetition, study plans, and anonymous cohort statistics (percentiles are only shown when a cohort has at least 30 students). We do not sell your personal data, and we do not use your data to train AI models.

3. Where it lives

Data is stored with Supabase (PostgreSQL) and processed by the infrastructure providers that host the Service. Tutor requests are sent to Anthropic under their commercial API terms, which exclude training on customer data.

4. Retention and deletion

We keep your data while your account is active. You can request deletion of your account and associated study data at any time by emailing contact@acupass.ai; we delete or anonymize it within 30 days, except records we must keep for tax or legal reasons.

5. Cookies

We use strictly-necessary cookies for sign-in sessions. We do not use third-party advertising cookies.

6. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. Email us and we’ll honor verified requests.

7. Contact

Privacy questions: contact@acupass.ai.