Privacy Policy
Last Updated: July 13, 2026
AdaptSHSAT is a product made by AdaptSage. We are committed to protecting the privacy of our users, especially students and minors. This Privacy Policy explains what information we collect, how we use it, how we protect it, and what rights you have regarding your information.
This Privacy Policy applies to all users of our website, applications, and educational services (the "Services"). By using the Services, you agree to the practices described in this policy.
1. Information We Collect
Account information: When you create an account, we collect your name, email address, role (student, parent, tutor, or director), and grade level (for students). We collect only the information necessary to provide the Services.
Educational data: As you use the Services, we collect information about your learning activity, including:
- Practice question responses and accuracy
- Assessment and mock test results
- Study guide progress and topic mastery levels
- Time spent on questions and sessions
- Score predictions and performance analytics
- Mistake journal entries
- Cohort assignments and homework completion
Technical data: We automatically collect certain technical information, including browser type, device type, IP address, pages visited, and timestamps. This data is used for security, analytics, and improving the Services.
Tutor and director data: Educators using the platform may provide session notes, student observations, assignment details, and cohort announcements. This data is associated with the students it relates to.
2. How We Use Information
We use the information we collect solely for legitimate educational purposes:
- Delivering and personalizing the educational experience
- Generating progress reports, score predictions, and analytics
- Providing adaptive question selection and difficulty calibration
- Supporting tutors, directors, and parents with student insights
- Sending service-related communications (account verification, security alerts)
- Maintaining platform security and preventing abuse
- Improving the quality and accuracy of our educational content
We do not sell student personal information. We do not use student information for targeted advertising. We do not share student data with third parties for their marketing purposes.
3. Children's Privacy
AdaptSHSAT is designed for middle school students, some of whom may be under the age of 13. We are committed to complying with the Children's Online Privacy Protection Act (COPPA).
For users under 13:
- We require verifiable parental consent or educational institution authorization before collecting personal information
- Parents or guardians can review, correct, or request deletion of their child's information at any time by contacting us
- We collect only the minimum information necessary to provide the educational Services
- We do not condition a child's participation on providing more information than is reasonably necessary
4. School and Education Records
When a school or other educational agency uses AdaptSHSAT under a qualifying written agreement and designates us to perform an institutional service, we process education records only for the purposes described in that agreement and as permitted by applicable law. FERPA obligations depend on the educational institution, the agreement, and the circumstances; consumer and tutoring-center use is not automatically governed by FERPA.
Educational institutions using AdaptSHSAT maintain control over student education records. AdaptSHSAT will:
- Use education records only for the purposes specified by the educational institution
- Not re-disclose education records to other parties without authorization, except as required by law
- Return or delete education records when they are no longer needed or upon request from the educational institution
- Comply with FERPA requirements regarding access, correction, and audit of education records
Schools or educational organizations that require a formal Data Processing Agreement (DPA) or data security addendum may contact us at [email protected].
5. How We Share Information
We share information only in the following circumstances:
- Within the educational relationship: Student data is visible to the student's assigned tutors, directors, and linked parents, as configured by the educational organization
- Service providers: We use a limited number of third-party providers to operate the Services. These providers process data on our behalf under contractual obligations to protect it. They include:
- Neon — database hosting (stores all user and educational data)
- Resend — transactional email delivery (receives email addresses and names for account verification, password reset, and service notifications only)
- Stripe — payment processing (receives email, name, and payment information for paid subscriptions; no educational data is shared with Stripe)
- Vercel — application hosting and content delivery
- Google Cloud Vision — optical character recognition for answer sheets uploaded by authorized educators; the uploaded image is sent for text and mark extraction
- Anthropic — educational content generation and explanation features; requests are designed to use question content and content specifications rather than account profile information
- Cloudflare — network security, delivery, and limited operational traffic measurement when enabled by our hosting configuration
- Legal requirements: We may disclose information when required by law, subpoena, court order, or to protect the safety of users
- With consent: We may share information when we have explicit consent from the user or their parent/guardian
We do not share student data with third parties for advertising or unrelated marketing. Automated content features are designed not to include account profile information in model prompts. Uploaded answer-sheet images may contain student information and are processed by Google Cloud Vision for optical character recognition, so authorized educators should upload only the information needed for that purpose.
6. Automated Features
Certain features use automated systems for adaptive question selection, score prediction, question generation, and learning recommendations. When these systems process student data:
- Data is used only to generate educational outputs for that student
- We do not use student data to train third-party general-purpose models
- Automatically generated content, predictions, and recommendations are provided for educational support and may not always be accurate
7. Data Security
We implement reasonable administrative, technical, and physical safeguards to protect information from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit (TLS/HTTPS)
- Secure database hosting with access controls
- Authentication and session management
- Regular review of security practices
No system is completely secure. While we take reasonable precautions, we cannot guarantee absolute security of your information.
8. Data Breach Notification
In the event of a data breach involving personal information, we will notify affected users, parents or guardians of affected children, and applicable regulatory authorities as required by law. Notification will be provided without unreasonable delay and will include the nature of the breach, the types of information involved, steps we are taking to address the breach, and recommended actions for affected individuals.
9. Data Retention
We retain personal information only for as long as necessary to provide the Services, comply with legal obligations, and maintain legitimate educational records. When an account is deleted or data deletion is requested, we remove personal information within a reasonable timeframe, except where retention is required by law.
10. Your Rights
Depending on your location and applicable law, you may have the right to:
- Access the personal information we hold about you or your child
- Correct inaccurate information
- Delete your account and associated data
- Export your data in a portable format
- Withdraw consent for data processing
- Opt out of non-essential communications
To exercise any of these rights, contact us at [email protected].
11. Cookies and Tracking
We use essential cookies for authentication, security, session management, and saved preferences such as theme. We do not currently use advertising cookies, third-party tracking cookies, or non-essential analytics cookies. If that changes, we will update this policy and request consent where required before activating them.
12. Third-Party Links
The Services may contain links to third-party websites. We are not responsible for the privacy practices of other websites. We encourage you to review the privacy policies of any third-party services you access.
13. New York Educational Agency Arrangements
When AdaptSHSAT enters a qualifying contract with a New York educational agency and receives covered student data, the contract and processing must satisfy the requirements that apply to the educational agency and its third-party contractors, including applicable Education Law 2-d requirements. Direct consumer or independent tutoring use may fall outside that statutory framework.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy with a revised effective date. If we make material changes that affect how we handle children's information, we will provide notice and obtain any additional consent required by law.
15. Contact Us
If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how we handle student data, please contact us:
AdaptSHSAT
Email: [email protected]
Website: adaptshsat.com