Privacy Policy — SAT ACT Ready

SAT ACT Ready ("we," "us") provides a personalized SAT/ACT test-preparation platform. This policy explains what we collect, how we use it, and the choices you have. Because our users include high-school students, we take the privacy of minors seriously.

Information we collect

Account information: name, email, password (stored only as a secure hash), and role (student or parent).
Learning data: practice answers, scores, study time, mastery estimates, and progress used to personalize your prep.
Billing data: handled by our payment processor (Square). We never see or store full card numbers.
Technical data: basic logs needed to operate and secure the service.
Usage analytics: we record a small, fixed set of product events (for example: a pricing page view, an account being created, a diagnostic being completed) so we can see where the signup process is confusing. When you are not signed in these are tied only to a random identifier stored in a first-party cookie named sp_anon, which expires after 30 days. Event details are filtered to strip anything resembling personal information, and we use no third-party analytics or advertising trackers of any kind.

How we use it

To run the service: personalize practice, track progress, generate reports, process subscriptions, send account and verification emails, and keep the platform secure. We do not sell personal information, and we do not use student learning data for advertising.

Students and minors

Student accounts require an age of 13 or older. We ask for a birth year at signup and decline student registrations below that age. We do not knowingly collect personal information from children under 13; if you believe a child under 13 has created an account, email us at madison@satactready.com and we will delete it.

Student accounts are intended to be created or approved by a parent or guardian. We collect only the data needed for tutoring. A parent or guardian may request access to, correction of, or deletion of their student's data by contacting us. A parent can only see a student's learning data if the student generates an invite code and shares it, and either side can remove that link at any time.

Service providers

We share limited data with providers that help us operate: hosting (Vercel), database (Neon), payments (Square), and email delivery (Resend). Each processes data only to provide their service.

AI tutor. If you use the AI tutor or AI coaching features, the messages you type and the question you are working on are sent to a third-party AI provider to generate a response — either OpenRouter (which routes to an underlying model provider) or Anthropic, depending on our configuration. Do not put personal details into tutor messages. These features are optional; the rest of the platform works without them.

Data retention & security

We keep your data while your account is active and delete or anonymize it on request or a reasonable period after account closure. Passwords are hashed; data is transmitted over encrypted connections.

Your choices

You can update your account details and cancel your subscription at any time from your account page. To request a copy of your data or have it deleted, email us at madison@satactready.com and we will respond within 30 days. Deleting your account removes your learning history, analytics events, and profile.

Contact

Questions about this policy, or a data request? Email madison@satactready.com.

This document is a general template and not legal advice. Have counsel review it before relying on it for compliance (e.g., COPPA, FERPA, GDPR/CCPA) as your audience grows.