Privacy Policy

1. Introduction

Engaij Inc, a Delaware C-Corporation ("Company," "we," "us," or "our"), operates the ExamPrepd website located at examprepd.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our scholarship exam preparation platform.

We are committed to protecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR), the Children's Online Privacy Protection Act (COPPA) in the United States, and the Privacy Act 1988 (Cth) in Australia.

2. Information We Collect

Personal Information

We collect information you provide directly to us:

• Account information (name, email address, username)
• Profile information (avatar, display alias, year level)
• Parent/guardian contact information (for child accounts)
• Payment information (processed securely through Stripe - we do not store card details)
• Support communications

Usage Information

We automatically collect certain information when you use our Service:

• Practice session data (answers, scores, time spent)
• Typing exercise metrics (speed, accuracy)
• Writing submissions and feedback
• Device information and browser type
• IP address and general location (country/region)
• Log data (access times, pages viewed)

3. Children's Privacy (COPPA Compliance)

Important: Our Service is designed for students preparing for scholarship exams, which may include children under 13 years of age. We take children's privacy very seriously and comply with the Children's Online Privacy Protection Act (COPPA).

For Users Under 13

• Verifiable Parental Consent: Children under 13 may only use our Service with verifiable parental consent. A parent or guardian must create the account and consent to our collection and use of the child's information.
• Limited Data Collection: We collect only the information reasonably necessary to provide the Service to children.
• No Behavioral Advertising: We do not use children's personal information for targeted advertising.
• Parental Rights: Parents can review their child's personal information, request deletion, and refuse further collection at any time by contacting us.

Parental Controls

Parents with linked accounts can view their child's learning progress, manage account settings, and control their child's use of the Service through the Parent Dashboard.

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Track learning progress and provide personalized analytics
• Adapt difficulty levels and recommend content based on performance
• Process payments and manage subscriptions
• Send important service updates and notifications
• Respond to support requests
• Ensure the security of our platform
• Comply with legal obligations

AI-Powered Features: We use artificial intelligence to provide writing feedback and personalized learning recommendations. Your writing submissions may be processed by our AI systems but are not used to train AI models or shared with third parties for AI development.

5. Information Sharing

We do not sell your personal information. We may share information with:

• Service Providers: Third parties who help us operate our Service, including:
  • Stripe for payment processing
  • Cloud hosting providers for data storage
  • Email service providers for transactional communications
  • AI service providers for writing feedback features
• Parents/Guardians: If you are a minor, your parent or guardian with a linked account may have access to your account information and learning progress.
• Legal Requirements: When required by law, court order, or governmental authority, or to protect our rights and safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing
• Access controls and authentication requirements
• Regular security assessments
• Secure server infrastructure

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide our Service. Specifically:

• Account data is retained while your account is active
• Learning progress data is retained to provide analytics and track improvement over time
• We may retain certain information as required by law or for legitimate business purposes
• Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your information
• Withdraw Consent: Where processing is based on consent, withdraw that consent

To exercise these rights, please contact us at [email protected]. We will respond to requests within 30 days, or as required by applicable law.

9. Australian Privacy Rights

If you are located in Australia, your personal information is protected under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). In addition to the rights above, you have the right to:

• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached your privacy rights
• Request access to your personal information without charge (except in limited circumstances)
• Not be subject to discrimination for exercising your privacy rights

We will take reasonable steps to correct or delete your personal information upon request, and will notify third parties to whom we have disclosed your information if you request correction or deletion.

10. UK and EU Users (GDPR)

If you are located in the United Kingdom or European Economic Area, the UK GDPR and/or EU GDPR apply to our processing of your personal data. In addition to the rights listed in Section 8:

Legal Bases for Processing

• Contract: Processing necessary to provide the Service you have requested (account management, practice sessions, analytics)
• Legitimate Interest: Improving the Service, preventing fraud, ensuring security
• Consent: Analytics and marketing cookies (you may withdraw consent at any time via Cookie Settings in the footer)
• Legal Obligation: Tax records, fraud prevention

Additional UK/EU Rights

• Right to Restrict Processing: You may request we limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

UK Supervisory Authority

If you are in the United Kingdom and believe we have not handled your data appropriately, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

11. Cookies and Tracking

We use cookies and similar technologies. For UK and EU users, non-essential cookies are only set after you provide explicit consent via our cookie banner.

Essential Cookies (Always Active)

• Session & Authentication: Keep you logged in and maintain security
• Preferences: Remember your theme, market, and language settings
• Cookie Consent: Store your cookie preferences (localStorage)

Analytics Cookies (Requires Consent)

• Google Analytics 4: Understand how you use ExamPrepd to improve it. Uses anonymised data and does not share personal information with Google for advertising. Provider: Google

Marketing Cookies (Requires Consent)

• Google Ads: Measure the effectiveness of our advertising campaigns and track conversions (sign-ups, purchases). Provider: Google

Managing Your Preferences

You can change your cookie preferences at any time by clicking "Cookie Settings" in the footer of any page. You can also control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

12. Third-Party Services

Our Service integrates with third-party services that have their own privacy policies:

• Stripe (Payment processing): Stripe Privacy Policy
• Anthropic (AI writing feedback): Anthropic Privacy Policy

13. International Data Transfers

As a United States company, your information may be transferred to and processed in the United States and other countries where our service providers operate. When we transfer personal information outside of Australia, we ensure appropriate safeguards are in place to protect your information in accordance with Australian Privacy Principles and this Privacy Policy.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page, updating the "Last updated" date, and where appropriate, sending you an email notification. We encourage you to review this policy periodically. Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us:

16. Complaints

If you believe we have not handled your personal information in accordance with this Privacy Policy or applicable law, you may lodge a complaint with us at [email protected]. We will investigate and respond to complaints within 30 days.

If you are not satisfied with our response, you may escalate your complaint to the relevant data protection authority:

• Australia: Office of the Australian Information Commissioner (OAIC)
• United Kingdom: Information Commissioner's Office (ICO)
• United States: Federal Trade Commission (FTC)