Privacy Policy

The short version

• We collect your email address, and the work you do in the app: which questions you answered, what you picked, whether it was right, and how long it took.
• We do not ask for your name, your birthday, your address, your phone number, or your school.
• We do not use advertising, analytics, or tracking services. We do not sell your data.
• When you type a question to the panda tutor, your message and the question you are working on are sent to an AI provider (Groq) to generate a reply. Your name, email, and account id are not sent.
• A linked parent or guardian can see your practice activity and your results in detail.
• You must be at least thirteen to use it.
• You can delete your account yourself, from the settings panel. It happens immediately and it cannot be undone.

What we collect

Account information.

• Your email address. This is the only piece of identifying information we ask for.
• A password, if you sign up with one. If you sign in with Google instead, Google confirms your identity to us and we never see a password.
• A confirmation that you are at least thirteen, stored as a timestamp of when that confirmation was recorded. We do not ask for or store your date of birth, and we do not know your actual age.
• A display name, but only when a parent creates a student account and chooses to type one in. Students are never asked for a name.
• Whether the account is a student account or a parent account.

What you do in the app.

• Practice sessions: which skill or section, when the session started and ended, and which questions were served.
• Answers: the choice you selected, or the answer you typed on a free-response question, whether it was correct, how many seconds you spent, whether you used a hint, and whether you flagged the question for review.
• Progress: which skills you have mastered, which are still open, and when each was awarded.
• Full-length practice tests: the same per-question detail, plus per-module scores and the timing of each module.
• Goals: your target test date and your target scores, and weekly study targets if you or your parent set them.
• An official practice-test score, if you or your parent choose to enter one to calibrate your estimate.
• Which section you are studying, if you set that preference to Math, to Reading and Writing, or to both.

What you send us on purpose.

• Reports. If you report a problem with a question or a tutor reply, we store the category you picked, an optional note you typed, which question it was about, and, when you are reporting a tutor reply, a short excerpt of that reply.
• Thumbs up or down on a tutor reply.
• Messages you type to the panda. See the AI section below for what happens to those.

Technical information.

• A per-account counter that limits how often each part of the app can be called. It records your account id, the feature, and a count for the current time window. It does not record your IP address or what you asked for.
• Our own application code does not write your email address, your typed answers, or your messages into our server logs. Our hosting provider keeps its own request logs, which we do not control.

We do not collect payment information, because there is nothing to pay for yet.

Cookies and things stored in your browser

• Sign-in cookies. These keep you logged in. The app does not work without them.
• Two short-lived signup cookies that carry your account type and your age confirmation from the signup form to our server. They last ten minutes and are deleted as soon as your account is set up.
• A cookie that remembers whether you collapsed the sidebar. It lasts one year.
• Your light or dark theme choice, stored in your browser.
• Your in-progress practice work, saved in your browser so that closing a tab does not lose a set. This includes the questions, your answers, and the correct answers for that set. It is cleared when you finish, and otherwise expires twenty-four hours after you started that set, the next time you open that practice page. If you never go back to that page, it stays in your browser until you clear your browser data.
• Your in-progress full-length practice test, saved the same way. This one holds your answers and which questions you flagged, not the questions or the answer key. It is cleared when you submit the module, and otherwise expires twenty-four hours after it was last saved.
• A few small interface flags: whether the panda panel is open, which screens have already greeted you, and whether you dismissed a one-time notice. These hold no personal information. Most are cleared when you close the browser, and the dismissal stays until you clear your browser data.

We do not use advertising cookies, and there are no third-party trackers on the site.

The AI tutor and the study director

Two features use a third-party AI provider, Groq: the panda tutor that walks you through a question, and the study director you can chat with about what to work on. Here is exactly what happens.

What is sent to the AI provider.

• For the tutor: the question you are working on, its answer choices, the passage if it is a Reading and Writing question, the correct answer, the worked solution, the pre-written walkthrough steps, and your recent messages in that conversation. When you are reviewing a question you already answered, it also includes which answer you picked and whether it was right.
• For the study director: your recent messages, plus a summary of where you are in the course. That summary names the skills at the top of your queue and the stage you have reached on each, counts of how many you have cleared, whether you have taken the placement check, and, for each skill it offers you, a one-line reason drawn from your own results. Those reasons say things like that you missed or skipped the skill on the placement, or that you had it mastered and it slipped on a later checkpoint.
• Your recent messages are capped. Only the last several turns are sent, and each is truncated.

What is not sent.

• Your name, your email address, your account id, and your session id are never included in what we send to the AI provider. As far as the provider is concerned the request is anonymous.

What we keep.

• We do not store your conversations with the panda. There is no chat history table, and closing the question ends the conversation for good.
• The one exception: if you report a tutor reply, a short excerpt of that reply is saved with your report so we can look into it.
• We do count how often each account uses the feature, through the rate-limit counter described above.

When the AI is not called.

• Tapping through the steps of a walkthrough does not call the AI at all. Those steps are written ahead of time and served from our database. The AI is called when you type a real question.
• Messages typed from a parent account are answered with a fixed reply and are never sent to the AI provider.

The AI provider processes what we send in order to generate a reply. Under its published terms it does not keep those requests by default and does not use them to train its models. It may log them for a short time while investigating a reliability problem or suspected abuse, and it keeps those logs for up to thirty days unless the law requires it to keep them longer. That handling is governed by the provider’s own terms rather than by this policy.

Walkthroughs, tutor replies, and study-director replies are machine-generated. They have not been checked by a person, and they can be wrong. Walkthrough steps and tutor replies each carry a report control, and we would rather you use it than trust something that looks off. Study-director replies do not carry one yet.

Who else receives data

We use a small number of service providers to run the product. We do not sell personal information, and we do not share it for advertising.

• Supabase. Runs our database and our sign-in system. Your account and everything listed under "What we collect" is stored there.
• Vercel. Hosts and serves the site. Like any host, it processes the requests your browser makes.
• Groq. Generates tutor and study-director replies, as described above.
• Desmos. The graphing calculator is loaded into your browser directly from Desmos. That means Desmos can see your IP address, your browser, and which page you loaded it from. This happens on practice pages, and also on our homepage, before you have an account and whether or not you ever create one.
• Google. Only if you choose to sign in with Google. Google tells us your email address so we can identify your account. What Google records about that sign-in is governed by Google’s privacy policy.

We do not use any analytics, advertising, error-reporting, or session-recording service. There are none in the product today.

We may also disclose information if we are legally required to, or to protect someone’s safety.

Email we send you

We use your email address to confirm your account, to send a sign-in link if you ask for one, and to reset your password. These are sent through our sign-in provider. We do not send marketing email today.

A parent inviting a student types that student’s email address into the app. No email is sent for an invite. The invite waits in the app until the student signs in with that address and accepts it.

Parent and guardian accounts

A parent account can be linked to a student account in one of two ways. Either the parent sends an in-app invite to the student’s email address and the student accepts it after signing in, or the parent creates the student’s account directly, choosing the student’s email address and their starting password.

While a link is in place, the parent can see the student’s study data. Specifically, a linked parent can access:

• Practice sessions and full-length practice test attempts, including when they happened and how long they took.
• Per-question results, including which answer the student selected, including answers the student typed, and whether each was correct.
• Hints used, questions flagged for review, and per-skill progress.
• Goals and targets, and any official practice-test score on the account.
• The student’s email address, and a display name if one is set.

The parent screens in the app deliberately show summaries rather than question content or answers. The access itself is broader than those screens: a parent’s account is authorized to read the per-question detail above through our interface. We are telling you this because a policy that described only the screens would be describing less than what the account can actually reach.

A linked parent cannot see:

• Conversations with the panda tutor or the study director. Those are not stored at all.
• Reports the student filed, or the notes the student typed in them.
• Thumbs up or down the student gave on tutor replies.
• The student’s age confirmation.

A linked parent can also change some things:

• They can set or change the student’s target test date, target scores, and weekly study targets. While a link is in place, the student cannot change their own goals.
• Their account is also authorized to record an official practice-test score on the student’s record, or record a newer one that supersedes it, though no screen in the app currently offers that.

Only the parent can remove the link. A student can request that the link be removed, and the parent then approves or declines it. Removing a link ends the parent’s access through the link, and it does not delete anything: the student’s account and all of their study data remain.

One important caveat. If your parent created your account, they chose its password, and removing the link does not change it. If they still know that password they can sign in as you, which reaches more than the link ever showed them. Set your own password if you have not already. "Forgot password?" on the sign-in page works whether or not a link is in place.

Age, and what we do and do not check

DawnPrep is for people aged thirteen and over. It is not intended for children under thirteen, and we do not knowingly collect information from them.

We want to be straightforward about how weak that check is. When you sign up, you tick a box confirming you are at least thirteen. We do not ask for a birthday, we do not verify anything, and we record only that the confirmation happened. We have no way to know a user’s real age.

Not every account is asked at the moment it is created. An account made for a student by a parent is not asked then, and neither is one created from the sign-in page through a sign-in link or through Google. Accounts that predate the check were never asked either. Instead, any account with no confirmation on file is stopped on its next visit: we show a page asking for it, and until it is given, that account cannot reach the study pages. It cannot be dismissed.

The app does not treat users aged thirteen to seventeen differently from adults, and there is no parental-consent step. A parent account is not a consent mechanism. It is a way for a parent to see a student’s progress, and creating one requires nothing more than the same thirteen-and-over confirmation.

If you believe a child under thirteen has an account, email us at service.dawnprep@gmail.com and we will delete the account and the study data attached to it.

How long we keep data, and how to get it deleted

We keep your account and your study data for as long as your account exists. There is no automatic expiry and nothing is deleted on a schedule.

You can delete your account yourself. Open the settings panel, go to Account, and choose Delete account. We ask you to confirm twice and then to type your email address, because the deletion happens immediately, it is permanent, and there is no grace period and no way for us to bring it back afterwards.

Deleting the account removes the account record and the study data linked to it: sessions, answers, progress, goals, scores, reports, practice tests, and any parent link. It also removes our rate-limit counters for the account, and any invite a parent had addressed to your email address.

One record survives, deliberately. We keep a short note that an account was deleted: a one-way scramble of the email address, whether it was a student or a parent account, and the date and time. The scramble cannot be turned back into the address. It lets us confirm a deletion actually happened and lets us notice an account being deleted and recreated to get around a limit, and it holds nothing else and none of your study data.

There is still no button that exports your data. To ask for a copy, email us at service.dawnprep@gmail.com from the address on the account and we will put it together by hand. Do that before you delete the account, because afterwards there is nothing left for us to send.

Work saved in your own browser is separate from all of this, and you can clear it by clearing your browser data.

Where data is stored

Our database and our hosting are both in the United States. If you use the product from elsewhere, your information is processed in the United States.

Security

Between accounts, each user can only read their own data, enforced by access rules in the database rather than only in the app. Reports you file are unreadable to every user account, including your own. Answer keys are held server-side and are not sent to the browser before a question is answered. Parent access is limited to students actually linked to that parent.

We can read the reports you file ourselves, through an internal tool we use to fix bad questions. That tool is limited to an operator list we configure, which is closed unless we open it, and it is enforced by our application rather than by the database rules above.

No system is completely secure, and we cannot promise that yours never will be. If you think something is wrong with your account, email us at service.dawnprep@gmail.com.

Changes to this policy

If we change this policy we will update the date at the top of this page. If a change materially affects what we collect or who receives it, we will tell account holders by email before it takes effect.

Contact

Questions about this policy, or about your data, go to service.dawnprep@gmail.com.