Privacy Policy

1 Information We Collect

Account Information: When you register, we collect your name, email address, role (student, teacher, school admin), and password (stored encrypted).

Usage & Gameplay Data: We collect data about how you interact with ZykoStudy, including game modes played, questions answered, scores, streaks, XP earned, and session duration.

Teacher & Admin Data: For teachers and administrators, we collect class/school information, roster data, and analytics preferences.

Automatically Collected Data: We collect device type, browser, IP address, and log data when you use the platform.

Communications: If you contact us, we retain those communications to respond and improve our services.

2 How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the ZykoStudy platform
• Personalize your learning experience and adapt difficulty levels
• Generate teacher and administrator analytics dashboards
• Send important account notices and updates
• Improve our question bank, game modes, and AI tutor features
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

3 Information Sharing

We do not sell your personal information. We may share data in limited circumstances:

• Service Providers: Third-party vendors (such as Neon/Postgres for database hosting and Vercel for deployment) who process data on our behalf under strict confidentiality agreements.
• Schools & Teachers: Student performance data is visible to the teachers and school admins within your enrolled institution.
• Legal Requirements: We may disclose data when required by law or to protect the rights and safety of users.
• Business Transfers: In the event of a merger or acquisition, data may be transferred with appropriate notice.

4 Children's Privacy (COPPA)

ZykoStudy is designed for use in educational settings and may be accessed by students under the age of 13. We comply with the Children's Online Privacy Protection Act (COPPA).

• We do not knowingly collect personal information from children under 13 without verifiable parental or school consent.
• Schools act as intermediaries and are responsible for obtaining parental consent where required.
• Parents may request review, deletion, or restriction of their child's data by contacting support@zykostudy.com.

5 Student Data (FERPA)

For schools operating in the United States, ZykoStudy acts as a School Official under FERPA and handles student education records in accordance with FERPA requirements. We:

• Use student data solely for the educational purposes for which the school engaged us
• Do not disclose student education records without school or parent consent except as permitted by law
• Support schools in fulfilling parental access and correction rights

6 Cookies & Tracking

We use essential cookies to maintain your session and remember your preferences. We may also use analytics cookies to understand platform usage. We do not use third-party advertising cookies.

You can control cookie preferences through your browser settings, though disabling essential cookies may affect platform functionality.

7 Your Rights & Choices

Depending on your location, you may have rights to:

• Access and receive a copy of your personal data
• Correct inaccurate or incomplete information
• Request deletion of your account and associated data
• Restrict or object to certain processing activities
• Data portability where technically feasible

To exercise any of these rights, contact us at support@zykostudy.com. We will respond within 30 days.

8 Data Security

We implement industry-standard security measures including encrypted data storage, HTTPS in transit, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

In the event of a data breach that affects your rights, we will notify you as required by applicable law.

9 Data Retention

We retain your data for as long as your account is active or as needed to provide our services. When an account is deleted, we remove personal data within 90 days, except where retention is required by law or for legitimate business purposes such as dispute resolution.

10 Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you by email or by posting a prominent notice on the platform before the change takes effect. Continued use of ZykoStudy after the effective date constitutes acceptance of the revised policy.

11 Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

• Email: support@zykostudy.com
• Website: zykostudy.com