Privacy Policy

What we collect

• Account info: name, login, and contact details.
• Learning data: progress, scores, responses, and study patterns.
• Device basics: browser type, settings, and IP address (for security and reliability).
• Conversations with our AI: to generate lessons, personalize learning, and provide support.

How we use it

We use data only to run and improve the learning service:

• Personalize lessons for each student.
• Track progress and fill in knowledge gaps.
• Keep the service secure and working properly.
• Improve IntelX using de-identified, aggregated insights.

What we don't do

• We never sell personal information — full stop.
• We don't use student data for advertising.
• We don't use your data to train outside AI models.
• We don't share private data with third parties, except the vendors that operate IntelX (secure hosting, payment processing, and AI) or when required by law.

Parents and schools are in control

• Parents create and manage accounts for children under 13.
• Parents and schools can review, download, or delete student data — and we honor deletion requests.
• Schools maintain control of educational records when IntelX is used through a school program.

How we protect data

• Data is encrypted in transit and at rest.
• Strict, least-privilege access controls keep information secure.
• If a breach ever affects your data, we notify you and your school.
• We align our practices with COPPA, FERPA, GDPR, and CCPA.

Important note

This page is a summary for families. For the complete, legally binding policy, please see our Full Privacy Policy.

1. Introduction and scope

This Privacy Policy ("Policy") describes how IntelX LLC ("IntelX," "Company," "we," "us," or "our") collects, uses, stores, shares, and protects information from users ("you," "your," or "User") of our educational platform, services, applications, and related offerings (collectively, the "Service").

We provide the Service both directly to individuals and families and to schools and educational institutions ("Educational Partners"). When we handle student information on behalf of an Educational Partner, we act as a "school official" under the Family Educational Rights and Privacy Act (FERPA), and the Educational Partner directs how that information is used.

By using the Service, you agree to the practices described in this Policy. This Policy is incorporated into and forms part of our Terms of Service.

2. Information we collect

2.1 Information you provide

• Account and identity data: name, username, email address, and login credentials.
• Billing data: for paid plans, payment information collected and processed by our payment processor (we do not store full card numbers).
• Communications: messages, feedback, support requests, and survey responses.

2.2 Learning data

• Progress and performance: lesson activity, responses, assessment results, and completion.
• Study patterns and engagement signals: time on task, pacing, and interaction with content, used to adapt lessons. We do not collect biometric data or make clinical or medical determinations.
• AI interactions: the questions, prompts, and content you exchange with our AI tutor, and the responses it generates.

2.3 Technical data

• Device and connection: IP address, browser and device type, and basic diagnostic and usage data, used for security, reliability, and troubleshooting.
• Cookies: session and functional cookies needed to sign you in and run the Service.

2.4 Information from Educational Partners

When you access the Service through a school, we may receive roster, enrollment, or class information from that Educational Partner as needed to provide the Service.

3. How we use information

We use information solely for the following educational and operational purposes:

• Provide, maintain, and personalize the learning experience.
• Track progress, identify knowledge gaps, and adapt content and difficulty.
• Keep the Service secure, prevent fraud and abuse, and debug and improve reliability.
• Improve our own Service using de-identified or aggregated data that cannot reasonably identify an individual.
• Process payments and manage subscriptions.
• Communicate with you about your account, support requests, and material changes to the Service.
• Comply with legal obligations.

We do not sell personal information or student data. We do not use personal information for third-party advertising. We do not use student personal information to build profiles for any purpose other than the educational services requested.

4. Artificial intelligence

The Service uses artificial intelligence, including the OpenAI API, to generate and personalize educational content and to power the AI tutor.

• We do not use identifiable student data to train third-party or foundation AI models.
• Our AI provider processes the data we send only to return a response to us and, under its applicable business and API terms, does not use that data to train its models.
• Any improvement of our own systems and models uses de-identified or aggregated data.

5. How we share information

5.1 Service providers (subprocessors)

We share information with a limited set of vendors strictly as needed to operate the Service. Each is bound by contract to protect the data and is prohibited from selling it or using it for their own purposes:

• Vultr — cloud hosting and infrastructure.
• Stripe — payment processing.
• OpenAI — AI processing for content generation and tutoring.

We will keep this list current and update it when our subprocessors change.

5.2 Educational Partners

If you access the Service through a school, we share your learning data and progress with that Educational Partner, which controls how that data is used within the school.

5.3 Legal and safety

We may disclose information when required by law, court order, or valid legal process, or where we believe in good faith it is necessary to protect the safety, rights, or security of users or the public.

5.4 Business transfers

If IntelX is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. Any successor will be bound by this Policy, and for student data, affected Educational Partners will receive notice and may request deletion.

5.5 No sale of data

We do not sell personal information or student data, and we do not share it with advertisers, data brokers, or for any commercial purpose unrelated to providing the Service.

6. Student data and FERPA

• For students who access the Service through an Educational Partner, IntelX acts as a "school official" with a legitimate educational interest under FERPA.
• The Educational Partner owns and controls the education records; we use them only for the authorized educational purpose.
• We do not sell student data or use it for advertising or non-educational commercial purposes.
• We return or delete student data at the Educational Partner's request, and we will not materially change how we use student data without the Educational Partner's consent.
• Where IntelX and an Educational Partner have entered into a Data Privacy Agreement or similar contract, that agreement governs student data and controls in the event of any conflict with this Policy.

7. Children's privacy (COPPA)

For users under 13 years of age:

• Parental or school consent: accounts for children under 13 must be created by a parent or legal guardian, or an Educational Partner provides consent on the parent's behalf as permitted by COPPA in the school context.
• Data minimization: we collect only the information reasonably necessary to provide the educational service.
• No behavioral advertising: we do not use children's data for behavioral advertising, and we do not condition participation on providing more information than is reasonably necessary.
• Parental rights: parents, guardians, and schools may review the child's information, request its deletion, and refuse to permit further collection or use.

8. Data retention

• We retain personal data while your account is active and for a limited period afterward as needed to operate the Service, comply with law, and resolve disputes.
• On a verified deletion request from you, a parent or guardian, or an Educational Partner, we delete or de-identify the associated personal data within 45 days, except where law requires us to retain specific records (for example, certain payment or tax records).
• Backups are purged on a rolling schedule.
• We may retain de-identified or aggregated data, which cannot reasonably identify an individual, to operate and improve the Service.

9. Your privacy rights

9.1 Access, correction, deletion, and portability

You may request to access, correct, delete, or export your personal data. To make a request, use the contact details in Section 13. We respond to verified requests within 30–45 days.

9.2 California (CCPA/CPRA)

California residents have the right to know what personal information we collect, to access and delete it, and to opt out of the "sale" of personal information. We do not sell personal information. We will not discriminate against you for exercising these rights.

9.3 European users (GDPR)

Where GDPR applies, you have the rights of access, rectification, erasure, portability, and objection or restriction of processing. Our legal bases for processing include performance of our contract with you, your consent, compliance with legal obligations, and our legitimate interests in operating and securing the Service.

10. Security

We implement reasonable technical and organizational measures to protect personal data, including:

• Encryption: data is encrypted in transit using TLS/HTTPS and encrypted at rest for our database and backups.
• Credential protection: passwords are hashed using bcrypt, and the application will not run without its secret key configured.
• Access controls: role-based, least-privilege access to production data; application secrets are stored as environment variables, not in source code.
• Account protections: rate limiting and lockout after repeated failed login attempts.
• Resilience: regular backups and periodic internal security reviews.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We work to protect your data and will notify you and affected Educational Partners if a breach occurs, as described below.

11. Data breach notification

If a security breach affects your personal data, we will notify affected users and Educational Partners without undue delay and as required by applicable law, and we will take reasonable steps to contain, investigate, and remediate the incident.

12. International data transfers

The Service is operated in the United States, and personal data is processed and stored in the United States. If you access the Service from outside the United States, you understand that your information is transferred to and processed in the United States, where data protection laws may differ from those in your home country.

13. Contact us

For questions about this Policy, or to exercise your privacy rights, contact us at:

• IntelX LLC
• Email: privacy@intelx.app
• Mail: [Company mailing address]
• You may also submit requests through the contact form on our website.

We aim to respond within: general questions, 5–10 business days; formal privacy requests, 30–45 days (as required by law); urgent security matters, 24–48 hours.

14. Changes to this Policy

We may update this Policy from time to time. For material changes affecting personal or student data, we will post the updated Policy and notify account holders and Educational Partners through the Service or by email. Changes will not be applied retroactively in a way that reduces the protections that applied to data already collected, except as required by law. The "Last updated" date above reflects the most recent revision.

Disputes relating to this Policy are governed by the dispute-resolution terms of our Terms of Service.