Privacy Policy

Introduction

FinishStrong ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the FinishStrong application and website (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access the Service.

Minimum Age

The Service is intended for users who are at least 13 years of age. We do not knowingly collect personally identifiable information from children under 13. If you are under 13, please do not use the Service or provide any personal information.

Information We Collect

Account Information

When you create an account, we collect your email address and display name. Authentication is handled through Supabase Auth, a third-party authentication provider.

Usage Data

We collect data about how you interact with the Service, including questions answered, scores, time spent on sessions, streak history, confidence ratings, mastery levels, and session completion data. This data is essential to providing adaptive, personalized learning.

Device Information

We automatically collect standard technical information such as browser type, operating system, screen size, and general device category (mobile, tablet, desktop). This helps us optimize the experience for your device.

How We Use Your Information

• Provide and improve the Service: Your usage data powers the adaptive learning engine, enabling personalized question selection and progress tracking.
• Personalize your learning: We use your response history to adjust difficulty via Item Response Theory, schedule reviews via spaced repetition, and track mastery via Bayesian Knowledge Tracing.
• Generate predicted SAT scores: Based on your mastery across all 95 SAT skills, we calculate a predicted score range using equating curves from real test administrations.
• Send notifications: With your opt-in consent only, we may send streak reminders, session summaries, or product updates.

Third-Party Services

We use the following third-party services to operate the Service:

• Supabase — Authentication and database hosting. Supabase processes your email and authentication credentials.
• Vercel — Application hosting and analytics. Vercel may collect standard web analytics data.
• OpenAI— AI-powered explanations and question quality verification. Question content and anonymized usage patterns may be processed by OpenAI's API. No personally identifiable information is sent.
• ElevenLabs — Text-to-speech voice narration for question audio. Only question text is sent; no personal data is shared.
• Neon— PostgreSQL database hosting. Your usage data and account information are stored on Neon's infrastructure.

What We Do NOT Do

• We do NOT sell your personal data to anyone.
• We do NOT show advertisements.
• We do NOT share your data with data brokers or marketing companies.
• We do NOT use your data for targeted advertising.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. If you request deletion of your account, we will delete your personal data within 30 days of receiving your request. Some anonymized, aggregated data (such as question difficulty statistics) may be retained indefinitely as it cannot be traced back to individual users.

Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Deletion: Request that we delete your personal data and account.
• Export: Request a machine-readable export of your data, including your response history, mastery levels, and progress.
• Opt out: Opt out of optional communications at any time through your account settings.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: You may request that we disclose what personal information we collect, use, and share about you.
• Right to delete: You may request that we delete personal information we have collected from you.
• Right to opt-out: You have the right to opt out of the sale of your personal information. We do not sell personal information.
• No financial incentive: We do not offer financial incentives for the collection of personal information.

To exercise your CCPA rights, please contact us at privacy@finishstrong.ai. We will respond to verifiable requests within 45 days.

Cookies

We use essential cookies solely for authentication and session management. These cookies are necessary for the Service to function and cannot be disabled. We do not use tracking cookies, third-party advertising cookies, or cross-site tracking technologies.

Children's Privacy

The Service is designed for users aged 13 and older. We do not knowingly collect personally identifiable information from children under the age of 13. If we learn that we have collected personal data from a child under 13, we will take steps to delete that information as quickly as possible. If you believe a child under 13 has provided us with personal information, please contact us at privacy@finishstrong.ai.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by sending an email to the address associated with your account or by displaying a prominent notice within the Service. Your continued use of the Service after such modifications constitutes your acknowledgment and acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@finishstrong.ai.