Privacy Policy

Elevara is for students aged 13 and over. Most of our users are between 14 and 17.

We do not knowingly collect personal information from children under 13. We ask for a date of birth when you create an account and refuse the account if it shows you are under 13. That check runs on our servers, not only in the browser. If we discover we hold information from a child under 13 without the verifiable parental consent required by the Children’s Online Privacy Protection Act (COPPA), we will delete the account and its data.

Your date of birth is used only for this age check. It is not used for personalisation, segmentation or marketing.

If you are under 18, a parent or guardian must read and agree to our terms on your behalf, and any paid subscription must be purchased by them. See section 4.

Information you give us

• Your email address and name.
• A profile image, if you choose to set one.
• Your date of birth, for the age check described above.
• Your target SAT score, intended test date, and how many minutes a day you plan to study — used to build your study plan.

Information created by using Elevara

This is most of what we hold, and it is what makes the product work.

• Every answer you submit: the question, the option you chose, whether it was correct, and how long you spent on it.
• Study sessions — questions answered, how many correct, time spent, skills covered.
• Diagnostic and mock exam results, including a per-question review record.
• An ability estimate for each section, updated after every answer and used to choose which question to give you next.
• Review progress and scheduling — for each vocabulary word and each question, how well you know it and when it is next due back.
• Your study streak and your lifetime totals of questions answered and correct.
• Account timestamps: created, updated, last active.

What we deliberately do not collect

• No analytics, advertising or tracking SDKs. There are none in the application.
• No advertising profiles, and no targeted advertising to students.
• No third-party AI service. Explanations, the diagnosis you get after a wrong answer, and your review schedule are all worked out on our own servers from the question bank and your own history. Nothing you answer is sent to an external model.
• No precise location, contacts, or biometrics, and no device identifiers beyond what an ordinary web request carries.
• We never receive your full payment card number. See section 4.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

We use these service providers, who handle data only to provide their service to us:

• Supabase — our database and sign-in system. Holds everything described in section 2.
• Vercel — hosts the application and processes ordinary web request logs, including IP addresses.
• Stripe— will process payments once paid plans launch, and will receive the payer’s billing details directly. We do not sell subscriptions today, so no data reaches Stripe yet. See section 4.
• Google— only if you choose “Sign in with Google”. Google tells us your name, email address and profile picture, and knows that you signed in to Elevara. It does not tell us your date of birth, which is why we ask for it separately on the next screen. If you sign up with an email address and password instead, Google receives nothing.
• Desmos — the graphing calculator shown on math questions is loaded from desmos.com. Desmos therefore receives your IP address, browser user-agent, and the page you loaded it from. It does not receive your Elevara account, your answers, or your scores.

We may also disclose information where we are legally required to, or to protect the rights and safety of our users. If Elevara is acquired or merged, information may pass to the acquiring party; this policy continues to govern it until you are given notice of any change.

Other students can see some things

Elevara has no leaderboard and no rankings. We do not compare you to other students, publish a score table, or show anyone how you are doing relative to anyone else.

The one place other students see you is question discussion. If you post a comment on a question, your display name and the text of your comment are visible to other students who have already answered that same question — nobody else, and not before they have attempted it.

Your individual answers, your scores, your exam results, your streak and your ability estimates are never shown to other students.

You can delete any comment you have posted at any time. If you would rather your name not appear at all, do not post comments, or email privacy@elevara.app and we will remove what you have written.

Elevara does not sell subscriptions yet. We collect no payment information today. The rest of this section describes how paid plans will work when they launch, and we will update this policy before that happens.

Subscriptions will have to be purchased by a parent, guardian, or other adult aged 18 or over. Students under 18 will not be able to buy a subscription on Elevara.

Payments will be processed by Stripe. Card details will be entered directly with Stripe, and Elevara will never receive or store your full card number. We will keep only a Stripe customer reference, the subscription tier and status, and the billing period — enough to know what the account is entitled to.

Elevara does not provide a separate parent login. An adult who pays for a subscription will manage billing through Stripe, and does not get a view of the student’s scores or activity inside the app. A parent or guardian can still exercise the rights in section 6 on behalf of a student under 18, including asking us what we hold.

• Account data: for as long as the account is open.
• Answer history and scores: for as long as the account is open. This history is what the adaptive engine reads — deleting it resets your ability estimate.
• After you delete your account: we delete or irreversibly anonymise your personal data within 30 days, except where tax or other law requires us to keep a record.
• Backups held by our hosting and database providers may retain deleted data for a limited further period, in line with those providers’ own retention schedules.

Depending on where you live, you may have the right to:

• get a copy of your data;
• correct it;
• delete it;
• export it in a portable format;
• object to or restrict some processing;
• not be treated differently for exercising any of these.

Parents and guardiansof a student under 18 may exercise these rights on the student’s behalf, including reviewing what we hold and requiring us to delete it.

Email privacy@elevara.app to make a request. We respond within 30 days, and we will verify who you are before acting.

California residents: we do not sell or share personal information as those terms are defined by the CCPA and CPRA, and we do not knowingly sell or share the personal information of anyone under 16.

Data is encrypted in transit. Access to the production database is restricted, and row-level security means one student’s records are not readable by another. Answer keys are withheld from the browser entirely — the correct answer for a question is not sent to your device until you have answered it.

No system is perfectly secure and we do not claim otherwise. If a breach affects your personal information, we will notify you and any regulator as the law requires.

We will post any change on this page and update the date at the top. If a change is material, we will give notice in the app or by email before it takes effect.

Questions about this policy, or about the data we hold on a student, can go to privacy@elevara.app.