Privacy Policy

2.1 Account Information

When you sign in using Google or Apple (OAuth), we receive your name, email address, and a unique account identifier. We do not receive or store your Google or Apple password.

2.2 Birth Details

To create your personalized learning profile (cognitive archetype profiling), we ask for your date of birth, time of birth (optional), and place of birth. This information is used solely to generate your cognitive archetype and personalize your educational experience. We do not sell or share this data with third parties for any purpose.

2.3 Learning Data

We collect information about your learning activity, including:

• Course progress and completion rates
• Quiz and mastery assessment answers
• Credit earning and spending history
• Concept question responses (used for verification and earning)
• Content creation submissions (videos, visuals, analyses)
• Session duration and frequency

2.4 Sathi Conversations

Free-tier users: Sathi conversations are processed in real-time and not stored beyond the current session.

Paid-tier users: Sathi conversations may be stored to provide session memory (Sathi remembers previous interactions within a course). This data is encrypted, never shared with third parties, and deletable at any time.

2.5 Technical Data

We automatically collect:

• Device type and browser information
• IP address (used for security and approximate location)
• Session timestamps and page views
• Typing patterns (anonymized, used for anti-gaming verification only)

2.6 What We Do NOT Collect

• Social Security numbers or government IDs
• Financial account information (payments processed by third-party providers)
• Photos, videos, or biometric data (unless voluntarily submitted as creation content)
• Location data beyond what's needed for the cognitive archetype profiling

4.1 We Never Sell Your Data

JyoLing LLC does not sell, rent, or trade personal information to third parties. Period.

4.2 AI Service Providers — Privacy by Design

Sathi uses AI language models from Anthropic (Claude). The AI layer receives only three things: the course ID, the concept ID, and the student's message. It cannot identify your child.

No name. No email. No age. No location. No school. No birth data. The authentication token identifies the user on our backend — it never reaches the AI layer. This is not a policy. It is the architecture.

Each system only sees what it needs:

• • AI (Sathi): course, concept, and question only. Cannot identify the student.
• • Stripe: handles payment. Cannot see learning data or birth details.
• • Google OAuth: provides sign-in identity only. Cannot see learning data or payment info.
• • Birth data: stored separately, encrypted. Never sent to AI. Never shared with third parties.

No single system — including our own without explicit authorized access — can link all pieces of a student's data together. Privacy isn't a feature. It's the architecture.

4.3 Infrastructure Providers

We use Amazon Web Services (AWS) for data storage and processing. Your data is stored in encrypted databases in the United States.

4.4 Payment Processors

Token purchases are processed by third-party payment providers. We do not store credit card numbers or bank account details on our servers.

4.5 Educational Institutions

For students using Academy through a school, the institution may receive aggregate, anonymized engagement metrics (e.g., class-level Reward Pool depletion rates). Schools do not receive individual Sathi conversations or personal learning data without explicit student/parent consent.

4.6 Legal Requirements

We may disclose information if required by law, court order, or government regulation, or if necessary to protect the rights, safety, or property of JyoLing LLC, our users, or the public.

5.1 COPPA Compliance

For users under 13 (where applicable), we require verifiable parental consent before collecting personal information. Our standard target audience is 14+, but younger students may access Academy through institutional accounts with parental consent arranged by the school.

5.2 FERPA Compliance

When Academy is used in an educational setting, student records are treated as education records under FERPA. We provide data processing agreements to schools and act as a "school official" with legitimate educational interest.

5.3 No Advertising to Students

Academy does not serve advertisements. We do not use student data for targeted advertising. We do not share student data with advertisers or data brokers.