Privacy Policy

INFORMATION COLLECTION

In the course of using the Services, we collect the following categories of personally identifiable information:

Account Information:

When you create an account, we collect your email address, username, and password (securely hashed). You may optionally provide additional profile information such as a display name.

Learning & Practice Data:

To provide our educational services, we collect your problem attempts and solutions, practice session history and progress, AI tutor conversation history, mock interview results, and topic and difficulty preferences. AI tutor conversations are processed to provide responses and are not used to train models or shared with third parties.

Usage Data:

We automatically collect IP address and device information, browser type and version, pages visited and time spent, and feature usage patterns. This data is used to support the internal operations of our Services.

COOKIES AND OTHER TECHNOLOGIES

Like many websites and applications, we use "cookies" to collect information. A cookie is a small data file that we transfer to your device for record-keeping purposes. We may use session cookies to enable certain features of the Site, to better understand how you interact with it, and to monitor aggregate usage.

You can instruct your browser to stop accepting cookies or to prompt you before accepting a cookie. If you do not accept cookies, you may not be able to use all portions of the Site or all functionality of the Services.

INFORMATION SHARING AND DISCLOSURE

WE WILL NOT SHARE, SELL, RENT, OR TRADE YOUR PERSONAL INFORMATION WITH OTHER PARTIES EXCEPT AS PROVIDED BELOW:

Service Providers:

We employ third-party companies to facilitate our services. These include Supabase for database and authentication infrastructure, and Stripe for payment processing. These parties have access to your personal information only to perform tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Aggregate Information:

We may share aggregated, non-identifying information with third parties for industry analysis and service improvement.

Compliance with Laws:

We may disclose personal information if required to do so by law or in the good-faith belief that such action is necessary to comply with state and federal laws, respond to a court order, or protect the security or integrity of the Services.

SECURITY

We are committed to taking reasonable steps to protect your personal information from unauthorized access and use. Specifically:

• Passwords are securely hashed using modern algorithms.
• All data transmission is encrypted via HTTPS/TLS.
• Database access is restricted and monitored.
• Payment processing is handled by PCI-compliant providers (Stripe).

No method of transmission over the Internet or electronic storage is one hundred percent secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

INTERNATIONAL TRANSFER

Your information may be transferred to and maintained on computers located outside of your state, province, or country where privacy laws may differ. If you are located outside the United States and choose to provide information to us, we may transfer and process it in the United States. Use of our Services represents your consent to this Privacy Policy and your agreement to that transfer.

LINKS TO OTHER SITES

Our Services may contain links to other websites or online services. The fact that we link to a website is not an endorsement or representation of our affiliation with that third party, nor is it an endorsement of their privacy practices. We do not exercise control over third-party websites and encourage you to read their privacy policies.

ACCOUNT DELETION

You can request to delete your Epigram account at any time through your account settings. Before proceeding, please understand the following:

• You will lose access to all content, progress, and records associated with your account.
• You will lose access to any active subscriptions or purchased content.
• You will not be able to recover any account-related information.

If you have an active subscription, please cancel it before requesting account deletion.

YOUR DATA RIGHTS

You have the right to:

• Access – Request a copy of your personal data.
• Rectification – Correct inaccurate information.
• Erasure – Request deletion of your account data.
• Portability – Export your data in a machine-readable format.
• Restriction – Limit how we process your data.

To exercise these rights, contact us at info@epi-gram.app.

CHILDREN'S PRIVACY

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal data, please contact us immediately.

CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be revised periodically, as reflected by the "last modified" date above. Our amended Privacy Policy will automatically take effect 30 days after the change. If you do not agree with any changes, you may terminate your use of the Services.