Privacy Policy

Apex Study, operated by Colomba Lira Feliú, is responsible for deciding how and why personal data is processed in connection with the Service.

For any question about this Policy or about personal data, you may contact us at colomba@apexstudy.net.

We process personal data relating to the Adult Account Holder who creates and manages the account, and limited personal data relating to each student profile authorised by that Adult Account Holder.

The Service is intended for students aged 13 to 17, using profiles created and managed by a parent or legal guardian. Students under 13 may not create or use a profile.

The Adult Account Holder is responsible for providing the information needed to create a student profile and for authorising the processing of that student’s data as described in this Policy.

Account email. The email address of the Adult Account Holder, used to create and secure the account and to send service-related communications. If the Adult Account Holder signs in with Google, Google shares the account’s email address, name, profile picture and Google account identifier with us; we never receive the Google password.

Student profile names. The name or nickname chosen for each student profile.

Age. Collected to confirm the Service is being used within the intended age range and to provide age-appropriate content.

Nationality. Collected and used only in aggregate form for market statistics, to understand where our users are based and where to focus marketing. It is not used to make decisions about individual users.

Progress and usage data. Information generated through use of the Service, such as chapters completed, quiz results, stars, XP and study activity, so that progress can be tracked and displayed.

AI tutor interactions. Questions submitted to the AI tutor and the responses generated, processed to operate the feature and to apply usage limits and safety measures.

Payment information. Processed directly by Paddle, our payment provider and Merchant of Record. Apex Study does not receive or store complete payment-card details.

Communications. Records of messages you send us, such as support or complaint requests.

Device and connection data. For each device on which the course is studied: a random identifier kept in a cookie on that device, the identification string its browser sends (which names the browser, the operating system and, on some phones, the model), the IP address, the approximate location derived from it (country and city), and when the device was first and last used; and, when one device takes the place of another, a record of the swap with the devices and places involved. We use it to apply the limit of two devices per account and to detect accounts shared beyond it.

Website visits. For each page opened on the website: the page, the date, whether the visitor was signed in, and the country derived from the IP address, under a code that changes every day. The IP address itself is not stored, visits are not linked to an account, and no cookies are set for this.

Structured-question answers. The answers written to structured questions, and the marks and feedback they receive, which are produced by an artificial-intelligence system and kept with the student’s progress.

Purchase records. For each payment, as Paddle reports it: the date, the amount, the tax and Paddle’s fee, and the country it was made for, which sets the regional price. The request for immediate access given at checkout, and when paid content is first opened after a purchase, are kept to assess refund requests as described in our Refund and Cancellation Policy. The country of each payment is compared with the countries the account is used from, to check that the regional price applies.

Where applicable data-protection law requires a legal basis, we rely on: the performance of our contract with the Adult Account Holder; our legitimate interests in operating, securing and improving the Service; consent, where required, including the Adult Account Holder’s authorisation of a student’s use; and compliance with legal obligations.

Where we rely on consent, it may be withdrawn at any time by contacting colomba@apexstudy.net, without affecting processing already carried out.

The Service is designed for students aged 13 to 17, with accounts created and managed by a parent or legal guardian.

We collect only the personal data needed to provide the Service to a student and do not ask students to provide more than is necessary.

A parent or legal guardian may request access to, correction of, or deletion of a student’s personal data at any time by contacting colomba@apexstudy.net.

If we reasonably believe a profile belongs to a child under 13, we may suspend it and request verification, and may delete it and its associated personal data if adequate verification is not provided, subject to legal retention obligations.

Some service providers may process data in countries other than your own. Where this occurs, we take reasonable steps to ensure an appropriate level of protection consistent with applicable law.

We keep personal data for as long as the account is active.

When an account is closed, we delete or anonymise personal data within a reasonable period, except where we must retain certain records to comply with legal, tax or accounting obligations, or to resolve disputes and enforce our agreements.

The record of a device is kept while the account is active, and is overwritten when that device is replaced by another; the record of each swap is kept while the account is active. Records of website visits are kept for statistics and are not linked to any account.

Depending on where you live, you may have the right to access, correct, update, delete or export personal data, and to object to or restrict certain processing.

To exercise any of these rights, contact us at colomba@apexstudy.net. We may need to verify identity or parental authority before acting on a request.

You may also have the right to lodge a complaint with the data-protection or consumer-protection authority competent under applicable law.

We take reasonable technical and organisational measures to protect personal data, including secure hosting and database providers and optional PIN protection for individual student profiles.

No online service can be guaranteed to be completely secure. The Adult Account Holder is responsible for keeping login credentials and PINs confidential.

Users must not enter full names, addresses, passwords, payment information, health information, school records, photographs, confidential documents or other unnecessary personal or sensitive information into the AI tutor.

AI tutor interactions are processed to operate the feature, apply usage limits and maintain safety, as described in this Policy and in the Terms and Conditions.

We may update this Policy to reflect legal, security, technical or operational changes.

The current version and its update date will remain available through the Service. Where a change materially affects how we process personal data, we will notify Adult Account Holders by email or through the Service.