Privacy Policy

Last Updated: October 15, 2025

Welcome to Yeti Scholar (“we,” “us,” or “our”). We respect your privacy and are committed to protecting it through our compliance with this Privacy Policy. This Policy explains what information we collect about you, how we use it, who we share it with, and your rights and choices regarding that information when you visit or use our web application, services, and related features (collectively, the “Services”).

By accessing or using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

1. Information We Collect

A. Information You Provide Directly

Account Information: When you sign up or log in through our third-party authentication provider (Auth0), we receive certain personal information, which may include your unique user ID (Auth0 ID), name, and email address.
Contact Form Submissions: If you contact us via a contact form, we collect your name, email address, subject line, and message content.

B. Automatically Collected Information

Usage Data: We may collect information about how you access and use the Services. This may include IP addresses, browser type, device information, and usage patterns to help us maintain and improve the Services.

C. User Progress and Performance Data

User Progress Data: When you use our educational features, we store information about your progress, such as completed tests, test results, learned words, formulas, reading speed practice data, and custom test configurations.
Custom Test Data: For certain test features, we store your test attempts, the questions you have answered (correctly or incorrectly), marked questions, time spent, and other detailed metrics to personalize and enhance your learning experience.
Self-Reported SAT Profile (optional): If you choose to provide it, your current or most-recent SAT score, any weaknesses you identify, your confidence level in each SAT section, and your target (“dream”) score.

D. Subscription and Payment Information

Stripe Integration: We use Stripe for payment processing. For individual PRO subscriptions, we receive and store your Stripe Customer ID, subscription status, plan, and renewal or expiration information. For School Plans (one-time term purchases), we receive invoice/checkout identifiers and plan attributes (e.g., seats, term length, amount). We do not store full payment card details on our servers. Stripe processes payment details under its own privacy policy.
Plan Types: Individual PRO subscriptions are auto-renewing (monthly or yearly). School Plans are one-time term purchases (not auto-renewing). Prices may change for future purchases; you will always see the current price before you pay.

E. Profile & Identity

Nickname & Change History: Your chosen display nickname and timestamps of any nickname changes.
AI-Tutor Thread ID: Identifier linking you to your AI-Tutor conversation history.

F. Onboarding & UI State

Animation Shown: Flag to track whether UI animations (e.g., subscription flow) have been displayed to you.

G. AI-Tutor Data

Question Payloads: Text of questions, answer choices, your selected answer, correctness flags, and any crossed-out choices.
Images: Any images you provide with a question and flags indicating their presence.
Chat History: Your back-and-forth messages with the AI tutor during each session.
Topic Metadata: Topic group and name for each question you review.

H. Gamification

Experience & Ranks: Total XP, rank label, streak data, and mastery metrics (e.g., learned formulas, reading stages, vocabulary units).
Latest Actions: Recent actions and timestamps for gamification tracking.

I. Peer-Tutoring Metadata

Tutor/Student Requests: Records of sent, received, and active tutoring requests, including other users’ public nickname, email, and timestamps.
Switching Flags: Indicators when you switch between tutor and student roles.

J. School Plan Data (Owner, School Officials, Students)

Student Data Shared Within a School: When a student joins a School Plan, the student’s email and in-platform progress/performance are shared with that school’s Owner and School Officials. This can include XP, latest actions timestamps, full-length test scores and section subscores (math; reading & writing), attempts history, custom-test counts, math formulas learned, vocabulary units completed, reading-speed levels completed, and similar progress metrics.
Owner Email Shared: The School Owner’s email address is visible to Students and School Officials who join that school for roster context and notices.
Domain Restriction (if enabled): If the school enforces an email domain (e.g., @example.edu), only users with that domain may join. Public email providers are not accepted for domain-restricted plans.
CSV Exports: Owners and School Officials can export school-scoped CSVs with the student data described above.

2. How We Use Your Information

We use the information we collect for various purposes, including:

Account and Authentication: To identify you as a user, maintain your account, and allow you to log in securely.
Providing and Improving Services: To deliver the Services, track your educational progress, generate personalized tests, display your results, and enhance your learning experience.
Personalized Prep Plans: To design practice tests, personalized tasks, and progress milestones matched to any self-reported goals, strengths, and weaknesses you choose to share.
Customer Support: To respond to your inquiries, troubleshoot issues, and provide technical support.
Personalization: To tailor the content and features you see, recommend tests or materials based on your progress, and remember your preferences (e.g., hiding instructions or showing specific learning modules).
Subscription and Plan Management: To manage individual PRO subscriptions (auto-renewing) and School Plans (one-time term), including access control, invoices/receipts, and plan status.
School Plan Operations: To operate school features such as rosters, domain enforcement (if enabled), dashboards, school-only leaderboards, capacity checks, CSV exports, and related notifications.
Analytics and Performance: To understand how our Services are used, gather usage statistics, and improve performance, reliability, and features.
Service Improvement Using De-identified Data: To use de-identified and aggregated performance data to improve, develop, and personalize the Services. We do not publicly disclose individual performance data.
Security and Compliance: To ensure the security of the Services, detect and prevent fraud or abuse, comply with legal obligations, and enforce our Terms of Service.
AI-Tutor Processing: To power and improve our AI-Tutor service—processing your question data and chat history to generate personalized explanations.
Gamification: To track your XP, streaks, ranks, and related progress in order to deliver rewards, leaderboards, and progress badges (school-only leaderboards are restricted to the associated school).
Peer-Tutoring: To facilitate connection requests between tutors and students and manage your tutoring relationships.

3. Legal Bases for Processing (If Applicable)

If you are located in the European Economic Area (EEA), we process your personal information based on one or more of the following legal bases:

Performance of a Contract: To provide the Services you have requested (e.g., access to your account and content).
Consent: Where you have given us consent to process your information (e.g., when submitting a contact form).
Legitimate Interests: To improve and secure our Services and ensure continuity of business operations.
Legal Obligations: To comply with legal or regulatory requirements.

4. How We Share Your Information

We may share your information as follows:

Service Providers: We use trusted third parties to help operate, analyze, and improve the Services. For example:
- Auth0: For user authentication and secure login.
- Stripe: For payment processing and subscription/invoice management.
- Email Service Providers (e.g., Nodemailer with SMTP): To send transactional or inquiry-related emails.
- Hosting and Infrastructure Providers: To host and maintain our databases and servers.
These third-party service providers have access to your data only to perform tasks on our behalf and are contractually obligated not to disclose or use it for other purposes.
Within a School Plan: When you join a School Plan as a Student, your email and in-platform progress/performance are shared with that school’s Owner and School Officials. The Owner’s email address is visible to Students and School Officials who join that school. School-only leaderboards may be displayed within the school. Owners and School Officials can export school-scoped CSVs of the student data described in this Policy.
Legal Compliance and Protection: We may disclose information if required to do so by law, or in the good faith belief that such action is necessary to comply with legal obligations, protect our rights or property, investigate fraud, or ensure user safety.
Business Transactions: If we are involved in a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.
AI Service Provider: We share question data and chat history with our AI service (OpenAI) solely to generate tutoring responses. We do not use this data for any other AI training purposes.
Peer Connections: When you send or accept a tutoring request, the other user sees your public nickname and email. You control whether to accept these requests.

We do not sell your personal information to third parties.

5. Cookies and Similar Technologies

We may use cookies, web beacons, and similar technologies to recognize you when you visit our Services, remember your preferences, and improve the quality of our offerings. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. Please note that disabling cookies might affect the functionality of our Services.

6. Data Retention

We retain your personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. When we no longer need your personal data, we will securely delete or anonymize it.

7. Data Security

We implement appropriate technical and organizational measures to protect the security of your personal information. However, no security measure is perfect, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential.

8. Your Rights and Choices

Depending on where you reside, you may have certain rights regarding the personal information we hold about you. These may include the right to:

Access or update your personal information.
Request deletion of your account and personal information.
Object to, or request that we restrict, certain processing of your personal information.
Withdraw any consent you have previously given to us.

To exercise these rights, please contact us at the email address provided below. We will respond to your request in accordance with applicable law. When you request deletion, we will permanently delete or irreversibly de-identify your account and associated personal information so it can no longer be linked to you, except where we must retain limited data to comply with legal obligations, resolve disputes, or maintain security records. Please note that information already exported by your institution (e.g., CSVs) is outside our control.

If you are a School Owner with an active School Plan, you can only delete your account once there is no active plan. This prevents disruption for enrolled students (who would otherwise lose access mid-term) and preserves the integrity of school rosters and assessment records until the term concludes. After the plan expires—or if there is no longer an active plan—your deletion request will be processed promptly as described above.

9. International Data Transfers

Your personal information may be transferred to and processed in countries other than the one you reside in, including the United States, where our servers and service providers are located. We take steps to ensure that appropriate safeguards are in place to protect your personal data in accordance with this Privacy Policy and applicable laws.

10. Third-Party Links

Our Services may contain links to third-party websites, services, or integrations that are not operated or controlled by us. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party sites you visit.

11. Children’s Privacy

Our Services are not directed to children under the age of 13 (or older if required by applicable law). We do not knowingly collect personal information from children. Students must confirm they are 13 years of age or older to join a School Plan. If you believe we have collected personal information about a child without consent, please contact us so we can take appropriate measures.

12. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will become effective when we post the updated Privacy Policy on our website. Your continued use of the Services after these changes become effective signifies your acceptance of the revised Privacy Policy. We encourage you to periodically review this page for the latest information on our privacy practices.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal information, please contact us at:

Email: info@yetischolar.com

We will do our best to address your concerns and help you understand how we use and protect your information.

By using Yeti Scholar, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and disclosure of your personal information as described herein.