How Education Pals, Inc. collects, uses, and protects your information.
Last updated: June 1, 2026
Education Pals, Inc. ("Company", "we", "us", or "our") is committed to robust privacy protections. This Privacy Policy ("Privacy Policy") explains how we collect, use, and safeguard information you provide when using our Service. "Site" refers to https://educationpals.ai. "Service" refers to our website, learning platform, AI tutor, and related offerings. "You" refers to you as a user. By accessing our Site or Service, you accept this Privacy Policy and our Terms of Use at /terms, and consent to our collection, storage, use, and disclosure of Personal Information as described here.
We collect Non-Personal Information and Personal Information. Non-Personal Information includes information that cannot reasonably identify you, such as anonymous usage data, general demographic information, referring/exit pages, platform types, preferences you submit, and click counts. Personal Information includes your email address, account profile, course progress, notes, bookmarks, highlights, authentication data from providers such as Google or GitHub via Clerk, and payment-related metadata processed by Stripe — collected as described below and in our registration flow.
To activate the Service you must provide at least an email address for account creation. When you view or use the Service, we track information from your browser or application, such as referring URL, browser type, device type, access times, and similar technical data that does not personally identify you. We use cookies and similar technologies as described in our Cookie Policy at /cookies.
To become a subscriber you create a profile by registering with the Service (via Clerk), providing your email and creating credentials. By registering, you authorize us to collect, store, and use your email address in accordance with this Privacy Policy.
The Site and Service are not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18 without verifiable parental consent where required (including under 13 in the United States under COPPA, applicable EU member-state digital consent ages under Article 8 GDPR, and under 18 in India under the DPDPA). If you believe we have collected such information, contact us at privacy@educationpals.ai and we will delete it promptly.
We use Personal Information to provide and maintain the Service, personalize learning, track progress, send service communications, improve the platform, and comply with law. Except as stated here, we do not sell Personal Information for marketing. We share Personal Information with vendors performing services for us (see Sub-processors), payment processors, when required by law, or with your consent. We may share when we believe disclosure is reasonably necessary to comply with legal process, enforce our Terms, address fraud or security, or protect users or the public.
We use Non-Personal Information to improve the Service and analyze trends. We may disclose Non-Personal Information to partners and advertisers at our discretion. This Policy does not limit our use of Non-Personal Information.
If we undergo a merger, acquisition, or sale of assets, Personal Information may be transferred. You acknowledge such transfers may occur and are permitted by this Policy. An acquirer may continue processing under this Policy. Material practice changes will be posted on the Site.
If you are in the EU, EEA, or UK, we rely on lawful bases under Article 6 GDPR: contractual necessity for account features and delivering tutor, quiz, and mastery services; consent for analytics and marketing cookies; legitimate interests for security, reliability, product improvement, and evaluating or improving AI tutoring quality (including reviewing anonymized or pseudonymized usage patterns); and legal obligations for billing and lawful requests. You may withdraw consent via Settings > Privacy or Cookie Preferences.
We use cookies as described in our Cookie Policy at /cookies. You may manage preferences via the footer or Settings > Privacy.
We do not sell your personal data. We share information with sub-processors, payment networks, when required by law, or with your explicit consent.
Sub-processors include: Clerk (authentication, US); Amazon Web Services (hosting, us-west-2 and us-east-1, US); Stripe (payments, US); PostHog (analytics, US); Google (Tag Manager/Analytics, Consent Mode v2); Meta (Pixel with marketing consent); and AI providers for tutoring and content (US). We update this list before adding processors that handle personal data.
Data is stored and processed in the United States. Transfers from the EU/EEA/UK use Standard Contractual Clauses (2021 modules) with supplementary measures including encryption, access controls, and MFA. UK transfers use the UK Addendum.
We have appointed or will appoint an EU representative under Article 27 GDPR before broad EU launch. Contact details will be listed here when finalized.
We have appointed or will appoint a UK representative under Article 27 UK GDPR. Contact details will be listed here when finalized.
We are not required to appoint a DPO under Article 37 GDPR. Reach our privacy team at privacy@educationpals.ai for data-protection questions or to exercise rights.
We retain personal data only as long as needed for the purposes described here. Account profile, settings, course progress, tutor sessions (conversations, messages, turns, and feedback), concept mastery, quiz and flashcard activity, analytics event history, usage metrics, and related learning records are kept for the life of your account until you request deletion (then removed via our deletion process, with a 30-day soft-delete window where applicable). Aggregated platform metrics may persist without personal identifiers after account deletion. Cookie consent records — 365 days; consent audit — 3 years (pseudonymized erasure proof retained as required by law); billing and tax records — typically 7 years. Infrastructure and security logs (AWS, CDN, application diagnostics) — 90 days to 1 year, separate from your in-product activity feed. Operational rate-limit and quota counters expire automatically within hours to months and are not part of your learning history. Request a portable export or account deletion via Settings > Privacy; we respond within 30 days where GDPR applies.
Depending on location, you may access, correct, delete, object, restrict, port data, withdraw consent, and complain to a supervisory authority. Contact privacy@educationpals.ai or Settings > Privacy. We respond within 30 days where GDPR applies.
You may opt out of promotional emails via unsubscribe links or Settings > Privacy. We may still send administrative emails such as Privacy Policy updates.
We use encryption in transit and at rest, firewalls, secure socket layers, access controls, and incident-response procedures. No method is 100% secure; you assume risks of providing information online.
We use AI to personalize learning. These features do not produce legal or similarly significant decisions under Article 22 GDPR. We will update this section if that changes.
We implement technical and organizational measures including encryption, assessments, role-based access, and breach notification where required by law.
The Service may link to third-party sites. Their privacy policies apply when you use them. This Policy applies only to information collected by us through the Site and Service.
We may change this Policy at any time. Significant changes may be notified by email or prominent Site notice and take effect 30 days after notification unless otherwise stated. Non-material changes take effect immediately. Review this page periodically.
Questions about this Privacy Policy: privacy@educationpals.ai. Last updated: June 1, 2026.