Privacy Policy

1. Introduction

MaxYourScore ("we," "us," or "our") operates the website maxyourscore.com and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting the privacy of our users, many of whom are students under 18. We comply with the Children's Online Privacy Protection Act (COPPA), the Family Educational Rights and Privacy Act (FERPA), and applicable state privacy laws.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account.
• Profile Information: School name, grade level, AP subjects of interest, and profile picture (optional).
• Payment Information: When you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your full credit card number on our servers.
• Study Data: Quiz answers, practice exam scores, flashcard progress, video watch history, and AI tutor conversations.
• Communications: Messages you send through our contact form or support channels.

2.2 Information Collected Automatically

• Usage Data: Features used and study progress needed to run the Service. Product analytics (pages visited and interaction patterns) is collected only if you accept analytics cookies — see Section 7.
• Device Information: Browser type, operating system, device type, and screen resolution.
• Log Data: IP address, access times, and referring URLs.
• Cookies: We use essential cookies for authentication and session management, and analytics cookies only with your consent. See Section 7 for details.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our Service.
• Personalize your learning experience through spaced repetition scheduling, score predictions, and AI tutor interactions.
• Process payments and manage subscriptions.
• Send you important updates about your account, the Service, and study reminders you have opted into.
• Analyze usage patterns to improve our content and platform, only if you have accepted analytics cookies.
• Respond to support requests and communications.
• Prevent fraud and ensure the security of our Service.

4. How We Share Your Information

We do not sell your personal information. We may share information in the following limited circumstances:

• Service Providers: With trusted third parties that help us operate our Service (e.g., Stripe for payments, Cloudflare for content delivery, Supabase for database hosting, Sentry for error monitoring, and PostHog for product analytics when you consent to it). These providers are bound by contractual obligations to protect your data.
• Legal Requirements: If required by law, regulation, or legal process.
• Safety: To protect the rights, property, or safety of MaxYourScore, our users, or others.
• With Your Consent: When you explicitly authorize us to share your information (e.g., leaderboard participation, study room activity).

5. Student Data Protection

We take the privacy of student users seriously. We comply with COPPA and FERPA requirements:

• We do not knowingly collect personal information from children under 13 without parental consent.
• Student educational records are used solely to provide and improve the Service.
• We do not use student data for targeted advertising.
• Parents and eligible students can request access to, correction of, or deletion of their data by contacting us.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS/SSL), encryption at rest, secure authentication, and regular security audits. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Cookies and Tracking

We use the following types of cookies and similar storage:

• Essential Cookies: Required for authentication, session management, and security. These cannot be disabled. Your sign-in session lasts 14 days after your last visit; after that you need to sign in again.
• Functional Storage: Remembers your preferences such as theme settings, study preferences, and your analytics cookie choice.
• Analytics Cookies (optional): We use PostHog to understand how the Service is used so we can improve it, and Sentry performance tracing and Session Replay to see what is slow or what went wrong when a page breaks. All of these run only after you click Accept in our cookie banner. If you click Decline or ignore the banner, PostHog is never loaded, no performance traces are sent, Session Replay never starts, and no analytics cookies are set; any PostHog identifier left from an earlier visit is removed.

Error monitoring

To keep the Service working, we send error reports to Sentry whether or not you accept analytics: the error message, the page address (with sign-in links, codes, and tokens removed), your browser and operating system, and the steps that led to the error. Error reports do not set cookies and do not include performance traces or recordings unless you have accepted analytics.

What PostHog collects when you accept

• Pages you visit and the page you came from, with sign-in links, codes, tokens, and email addresses removed from web addresses.
• Browser, operating system, device type, screen size, and approximate location derived from your IP address.
• A random identifier stored in a first-party cookie and local storage so visits can be counted.
• Clicks on our public pages (such as the home, pricing, and subject pages), with the text and attributes of what you clicked hidden. Clicks inside the study app — lessons, quizzes, practice exams, study tools, your dashboard, and settings — are not recorded.

What Sentry performance tracing records when you accept

For about 1 in 10 visits, Sentry performance tracing records how long pages take to load, the pages you move between (with sign-in links, codes, and tokens removed), the timing of requests the page makes to our servers, and how quickly the page responds when you click or type — including a short technical description of the element you used, such as its type, name, or label. This covers pages inside the study app too. It does not record what you type or your quiz and exam answers, and it does not set cookies.

What Sentry Session Replay records when you accept

For about 1 in 10 visits, and for the minute before an error, Sentry Session Replay records the layout of the pages you view — including pages inside the study app — along with your clicks, scrolling, and page changes, so we can reproduce problems. All text on the page is replaced with placeholder characters and all images, video, and audio are blocked before anything leaves your browser, so a replay does not show your name, what you type, or your quiz and exam answers. Replay keeps a session record in your browser's session storage (sentryReplaySession), which is removed when you withdraw consent.

Analytics never captures what you type or your quiz and exam answers.

Changing your choice

You can change or withdraw your choice at any time using the "Cookie settings" link in the site footer or this button: Cookie settings. Withdrawing consent stops analytics, performance tracing, and Session Replay immediately and removes the PostHog identifier from your browser.

We honor Global Privacy Control and Do Not Track: if your browser sends either signal, analytics stays off and cannot be turned on in that browser.

We do not use third-party advertising cookies or trackers.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes. Anonymized, aggregated data may be retained indefinitely for analytics.

When you delete your account we cancel any active subscription and ask our payment processor, Stripe, to remove your name and email address from your billing customer profile. Stripe keeps that profile, and the invoices, receipts, and payment records Stripe keeps for tax, refund, and dispute purposes still show the name and email address used at purchase. To have those records removed too, contact us at the address below.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing of your data.
• Export your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at privacy@maxyourscore.com.

10. Third-Party Services

Our Service integrates with third-party services including Google (for OAuth sign-in), Apple (for OAuth sign-in), Stripe (for payments), Anthropic (for AI features), Sentry (for error monitoring and, with your consent, performance tracing and session replay), and PostHog (for product analytics, with your consent). Each service has its own privacy policy, and we encourage you to review them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

• Email: privacy@maxyourscore.com
• Support: maxyourscore.com/contact