1. Introduction
AceIt AI ("we", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Platform. By using AceIt AI, you consent to the practices described here.
2. Information We Collect
We collect the following types of information:
- Account data: Name, email address, school, class level, and password (stored as a secure hash).
- Usage data: Chat messages, quiz answers, scores, session duration, and feature interactions.
- Progress data: XP, credits, streaks, quiz history, and adaptive learning profile.
- Device data: IP address, browser type, and operating system (for security and analytics).
- Payment data: Transaction IDs and subscription status (payment card details are handled exclusively by our payment processor).
3. How We Use Your Information
- Providing and improving the Platform services
- Personalising AI tutor responses and adaptive learning
- Processing payments and managing subscriptions
- Sending important service updates and notifications
- Detecting and preventing fraud, abuse, or security threats
- Generating anonymised analytics to improve educational outcomes
- Complying with legal obligations
4. AI and Third-Party Data Processing
When you use the AI Tutor, your messages are sent to third-party AI providers. Currently we use:
- OpenRouter: An AI API proxy. Your messages may be processed by models from DeepSeek, OpenAI, or other providers via OpenRouter's infrastructure. See OpenRouter Privacy Policy.
- Google (Sign-In): If you sign in with Google, your Google profile information (name, email, profile photo) is shared with us. See Google Privacy Policy.
- Payment Processor: Payment processing is handled by a third-party payment gateway. Your payment card details are never stored on our servers and are processed exclusively by our payment provider under their own privacy policy.
⚠️ Do not share sensitive personal information (passwords, Aadhaar numbers, financial details) in AI chat messages.
5. Data Storage and Security
Your data is stored in secure cloud databases. We implement:
- Encrypted storage for all personal data
- Bcrypt hashing for passwords (we never store plaintext passwords)
- HTTPS/TLS for all data transmission
- HTTP-only cookies for session management (not accessible via JavaScript)
- Regular security audits and access controls
Despite these measures, no system is 100% secure. We cannot guarantee absolute security.
6. Data Sharing
We do not sell your personal data. We share data only:
- With your school (administrators can view aggregate performance data for enrolled students)
- With AI providers for generating tutor responses (message content only)
- With Razorpay for payment processing (billing data only)
- When required by law or court order
- In the event of a business merger or acquisition (you will be notified)
7. Children's Privacy
We take children's privacy seriously. For users under 13, we require verifiable parental consent. We do not knowingly collect data from children under 13 without consent. If you believe we have collected data from a child under 13 without consent, contact us immediately for deletion.
8. Your Rights
Under applicable data protection laws, you have the right to:
- Access: Request a copy of data we hold about you
- Correction: Update inaccurate personal information in your profile
- Deletion: Request account and data deletion (via profile settings or feedback)
- Portability: Receive your data in a machine-readable format
- Opt-out: Unsubscribe from non-essential communications
9. Cookies
We use HTTP-only session cookies for authentication. We also use browser localStorage for preferences (e.g., tutorial state, chat history). We do not use advertising or tracking cookies.
10. Data Retention
We retain your data as long as your account is active. Upon account deletion, data is removed within 30 days. Anonymised aggregate data (not linked to your identity) may be retained indefinitely for platform improvement.
11. Changes to this Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the Platform after changes constitutes acceptance.
12. Contact Us
For privacy concerns, data requests, or to report a violation, please use the feedback button in the app. We aim to respond within 7 business days.