Privacy Policy

Last updated: March 4, 2026

We believe privacy policies should be readable by actual humans — not just lawyers. This document explains exactly what data we collect, why, and what we do with it. No legal fog.

1. Who we are

Edveera is operated by [REGISTERED BUSINESS NAME], a company registered in [COUNTRY/STATE] with registration number [REGISTRATION NUMBER].

Registered address: [FULL REGISTERED ADDRESS].

When we say "Edveera", "we", "us", or "our" in this policy, we mean [REGISTERED BUSINESS NAME].

2. What data we collect

We collect only what we need to provide you with the Edveera service. Here is exactly what we store and why:

Account information: Your email address and display name — so you can log in and we can contact you about your account.

Purchase history: Which exam season passes you have purchased, when, and for which subjects — so we can grant you the correct access.

Usage data: Which questions you have viewed, which explanations you have saved, and your quality ratings (thumbs up/down) — so we can improve the product and personalise your dashboard.

Payment information: We do NOT store your credit card number, CVV, or any payment card details. All payments are processed by Stripe. We only store a Stripe customer ID and payment status.

Analytics data: Anonymous usage events (pages visited, features used) collected via PostHog to help us understand how students use the product and where to improve it.

3. What we do NOT collect

We want to be explicit about what we do not do:

We do not sell your data: To anyone. Ever. Under any circumstances.

We do not share your data with advertisers: Edveera has no ads and never will.

We do not track you across other websites: Our analytics are limited to your activity on edveera.com.

We do not store your exam answers permanently: If you submit an answer for AI evaluation, it is processed in real-time and not retained beyond your session unless you explicitly save the explanation.

4. How we use AI

Edveera uses the Anthropic Claude API to generate mark scheme explanations. When you request an explanation:

What is sent: The question text and official mark scheme content from our database, along with your submitted answer if you provide one.

What is NOT sent: Your name, email, or any personal information. The AI receives only the academic content needed to generate the explanation.

Data retention: Anthropic does not use API inputs to train their models. Your academic content is processed and discarded.

5. Cookies

We use essential cookies only — the minimum required for the site to function:

Authentication cookie: Keeps you logged in across pages and sessions.

Analytics cookie: PostHog uses a first-party cookie to track anonymous usage within edveera.com only.

We do not use advertising cookies, third-party tracking cookies, or any cookie-based retargeting.

6. Data storage and security

Your data is stored in a Supabase-managed PostgreSQL database with the following protections:

Encryption in transit: All connections use TLS 1.2 or higher.

Encryption at rest: All stored data is encrypted at the database level.

Row Level Security: Database-level rules ensure you can only access your own data, even if application code has a bug.

Password hashing: Your password is hashed using bcrypt before storage. We never see or store your plain-text password.

7. Third-party services

We use a small number of trusted third-party services. Each one has been chosen for reliability and privacy standards:

Stripe: Payment processing. Their privacy policy: stripe.com/privacy.

Supabase: Database and authentication hosting. Their privacy policy: supabase.com/privacy.

Cloudflare: Website hosting and security. Their privacy policy: cloudflare.com/privacypolicy.

Anthropic: AI processing for mark scheme explanations. Their privacy policy: anthropic.com/privacy.

PostHog: Product analytics. Their privacy policy: posthog.com/privacy.

Resend: Transactional emails (password reset, purchase confirmation). Their privacy policy: resend.com/legal/privacy-policy.

8. Your rights

Regardless of where you are in the world, you have the following rights:

Access: You can request a copy of all data we hold about you.

Correction: You can ask us to correct any inaccurate data.

Deletion: You can ask us to delete your account and all associated data. We will do so within 30 days.

Export: You can request your data in a portable format.

To exercise any of these rights, email us at support@edveera.com. We will respond within 14 days.

9. Children's privacy

Edveera is designed for high school students aged 15-19. We do not knowingly collect data from children under 13. If you are under 13, please do not create an account.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at support@edveera.com and we will delete it promptly.

10. Changes to this policy

If we make material changes to this privacy policy, we will notify you by email and update this page. Minor clarifications may be made without notification.

We will never retroactively reduce your privacy protections without your explicit consent.

11. Contact

If you have questions about this privacy policy or how we handle your data:

Email: support@edveera.com

Address: [FULL REGISTERED ADDRESS]