Privacy Policy

This Privacy Policy explains how 67Prep ("67Prep," "we," or "us") collects, uses, shares, protects, and deletes personal information. 67Prep is operated in Florida, United States, and is intended only for people age 13 or older.

Information we collect

• Account information: name, email address, password hash, role, and consent records.
• Study profile: school, grade level, SAT goal, test date, and study preferences.
• Learning records: lesson progress, notes, reflections, assignments, practice scores, predicted scores, and OnePrep activity entered by the student.
• Uploads: diagnostic reports, practice-test reports, screenshots, and other evidence a student chooses to submit.
• Class information: class membership, educator assignments, tutoring sessions, and calendar changes.
• Security information: IP address and basic request information used to protect accounts, prevent abuse, and diagnose service problems.

How we use information

• Provide lessons, calendars, assignments, progress tracking, reminders, and educator tools.
• Calculate study guidance and estimated scores from information supplied by the student.
• Allow authorized educators to review the work and progress of students in their classes.
• Send account, class, homework, and service emails.
• Secure, maintain, troubleshoot, and improve 67Prep.
• Comply with legal obligations and enforce our Terms of Service.

Student information and educator access

Students can see only their own records. An educator can access a student's records only after the student joins that educator's class. Educators must use student information only for legitimate educational and tutoring purposes and must remove students who should no longer be in their class.

When 67Prep is used for K-12 school purposes, we do not use covered student information for targeted advertising, sell or rent it, or build profiles for purposes unrelated to the educational service. A school or district that requires FERPA-specific terms or a data-processing agreement must contact us before directing students to use 67Prep.

AI-assisted features

When a user asks the AI tutor a question or an educator requests AI planning insights, 67Prep sends the prompt and a limited, relevant learning snapshot to OpenAI to generate the response. We do not send account passwords, uploaded files, full email addresses, or school names in these requests. AI responses can be incomplete or incorrect and should be reviewed; educators remain responsible for assignments and calendar decisions. AI chat responses are not used as official scores or academic records.

When we disclose information

We do not sell personal information. We disclose it only:

• To the student's authorized educator as described above.
• To service providers that operate 67Prep, including Railway for hosting and storage, Resend for transactional email, and OpenAI for requested AI tutor and planning responses.
• When required by law, legal process, or a valid government request.
• When reasonably necessary to protect users, prevent fraud or abuse, or defend legal rights.
• As part of a merger, financing, acquisition, or sale, subject to continued protection of the information and applicable law.

Third-party learning resources

67Prep links to services such as OnePrep, Desmos, YouTube, Khan Academy, and College Board resources. Those services have their own privacy practices. Following an external link takes you outside 67Prep. We do not receive a student's OnePrep or College Board account activity unless the student chooses to enter or upload it to 67Prep.

Users age 13 through 17

67Prep does not permit accounts for children under 13. Users under 18 must have permission from a parent or legal guardian. If we learn that a child under 13 created an account, we will delete the account and associated information. Contact us immediately if you believe this has occurred.

Retention, deletion, and access

We retain account and learning records while an account is active and as reasonably necessary to provide the service, resolve disputes, prevent abuse, and meet legal obligations. A user can delete their account from the Profile page. Account deletion removes the user's database records and stored uploads, subject to limited backup, security, or legal retention periods. Users may request access, correction, export, or deletion by emailing 67prep@gmail.com.

Security and incident response

We use access controls, password hashing, encrypted HTTPS connections, restricted service credentials, rate limiting, one-time account-recovery links, and protected storage. Verification and password-reset tokens are stored as cryptographic hashes rather than usable links. No system is completely secure. If a security incident triggers a legal notification obligation, we will provide notice as required by applicable law.

Cookies and communications

We use an essential session cookie to keep users signed in and do not use advertising cookies. See our Cookie Notice. Users can turn daily homework emails on or off from Profile; essential account and security messages may still be sent.

Changes and contact

We may update this policy as 67Prep changes. The current version and effective date will remain posted here. Privacy questions and requests may be sent to 67prep@gmail.com.