Privacy Policy

What we collect

To run Pathway to Ace we keep:

• Account details: your name, email address and country (optional). Your password is stored only in scrambled (hashed) form, so we cannot read it.
• Consent: the time you accepted the Terms and this Privacy Policy.
• Plans and payments: which subjects you use, your plan dates, and your payment records (reference, amount, date, status). Bank transfers happen at your own bank. We never see your bank login.
• Usage: when you got an answer, for which subject, and the size of the answer. We use this to work out your allowance percentage. It does not include the text of your question or the answer.
• Messages to us: anything you send through the Contact page.
• Email records: which service emails we sent you and whether they were delivered.
• Technical data: your network address (IP address) and standard server logs, used for security and to stop abuse.

Your questions and the AI

When you ask the tutor a question, the conversation is sent to Google's Gemini AI service to write the answer. We also search our own study material, held with Cloudflare, to find passages that help. We do not keep the text of your questions or the answers on our servers. Your chat history is saved in your own browser on your own device, and clearing your browser data removes it. Please do not type personal or sensitive details into the tutor that you would not want a service provider to process.

Who helps us run the service

We use a small number of providers who process data for us:

• Cloudflare: website hosting, our database, search and security.
• Google (Gemini): writing the tutor's answers.
• Resend: sending our emails (verification codes, receipts, reminders, replies).
• These providers may handle data in countries outside Pakistan. We do not sell personal data and we do not share it for advertising.

Why we use your data

To create and protect your account, provide the tutor, manage plans and payments, send you service emails, answer your messages, keep the service secure and fair, and understand in summary how it is used. We send service emails only: codes, order and payment confirmations, receipts, plan-ending and allowance notices, and replies to your messages. We do not send marketing email without asking you first.

Cookies and browser storage

We use your browser's local storage to keep you signed in, remember your chat history and your light or dark choice. We do not use advertising or tracking cookies. Our pages load fonts from Google Fonts, which means Google can see that your browser asked for them.

Children

Students under 18 need a parent or guardian's permission to use Pathway to Ace. A parent or guardian can ask us at any time to see, correct or delete a child's account data.

How long we keep data

We keep your account data while your account is open. We keep payment records for as long as we need them for accounting and legal reasons. Messages to us are kept as long as needed to help you. When you ask us to delete your account we remove what we are not required to keep. We make regular encrypted-in-transit copies of our database for disaster recovery, held privately with Cloudflare and on the owner's own devices and cloud storage, and kept for about 30 days on the server. A deleted account can therefore remain in those backup copies until they expire.

Your choices

You can ask to see the personal data we hold about you, correct it, or have it deleted, by writing to us through Contact Us. We handle these requests by hand and will reply as soon as we can. You can change your password at any time from your account page.

Security

We use HTTPS, hashed passwords, one-device sign-in, limits against abuse, and two-step login for our admin accounts. No online service is perfectly secure, so please choose a strong password and keep it private.

Changes

We may update this policy. The date at the top shows the latest version. For big changes we will email you.