Privacy Policy

1. Information We Collect

Information you provide:

• Account information: Username, email address, and password (stored securely hashed).
• Practice data: Your answers to practice problems, accuracy statistics, and learning progress.
• AI tutor conversations: Questions you ask the AI tutor and the responses generated.
• Paper trading activity: Simulated trades, portfolio data, and trading history.
• Feedback: Bug reports, feature requests, and screenshots you submit.

Information collected automatically:

• Usage data: Pages visited, features used, session duration, and interaction patterns.
• Device information: Browser type, operating system, and screen size.
• Log data: IP address, access times, and error logs for security and debugging.

2. How We Use Your Information

• Provide the Service: Track your progress, generate personalized practice problems, and power the AI tutor.
• Improve the Service: Analyze usage patterns to fix bugs, improve features, and develop new content.
• Communications: Send account-related emails (password resets, subscription confirmations). We do not send marketing emails without your consent.
• Security: Detect and prevent fraud, abuse, and unauthorized access.
• Billing: Process subscription payments through Stripe.

3. Information Sharing

We do not sell your personal information. We share data only in these limited circumstances:

• Stripe: Payment processing. Stripe receives your payment information directly; we never see or store your full card number. See Stripe's Privacy Policy.
• OpenAI: AI tutor questions are sent to OpenAI's API for response generation. These are sent without your personal identifying information. See OpenAI's Privacy Policy.
• Legal requirements: We may disclose information if required by law, subpoena, or court order.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner.

4. Data Security

• Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• All data is transmitted over HTTPS encryption.
• We use CSRF protection, secure session cookies, and security headers to protect against common attacks.
• While we take reasonable measures to protect your data, no system is 100% secure. Use a strong, unique password for your account.

5. Data Retention

• Active accounts: We retain your data for as long as your account is active.
• Deleted accounts: If you request account deletion, we will delete your personal data within 30 days. Some anonymized, aggregated data may be retained for analytics.
• AI tutor logs: Conversation history is retained to provide your chat history feature and improve the Service.

6. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate personal information.
• Deletion: Request deletion of your account and personal data.
• Export: Request your practice data and progress history in a portable format.
• Opt out: Unsubscribe from non-essential communications at any time.

To exercise these rights, contact us through the Feedback page on the platform.

7. Cookies

We use essential cookies to keep you logged in and maintain your session. We use a theme preference cookie to remember your light/dark mode choice. We do not use third-party tracking cookies or advertising cookies.

8. Children's Privacy

OptionsPractice is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a user under 18, we will delete that information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Service. The "Last updated" date at the top reflects the most recent revision.

10. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us through the Feedback page on the platform.