Privacy Policy

1. Who We Are and How to Contact Us

KYOEDU operates the website and application at https://kyoedu.com. For privacy questions, account requests, student data requests, deletion requests, or school data inquiries, contact us at login@kyoedu.com. When contacting us, please include the email address connected to your account so we can verify and process the request.

2. Information We Collect

We collect only the information needed to provide a secure exam practice and learning record service. Depending on how a user uses KYOEDU, this may include:

• Account information: email address, display name, profile image, account identifier, authentication method, verified email status, password hash when password login is enabled, and session identifiers.
• Google Sign-In information: Google account identifier, email address, email verification status, display name, and profile image when a user chooses to sign in with Google.
• Email verification information: email address, temporary verification code records, verification timestamps, and delivery status for login or account confirmation.
• Learning profile information: selected exam categories, grade or year level, target schools or programs, country or region, study goals, support needs, and contact preference when a user provides them.
• Exam and learning activity: selected products, question attempts, submitted answer choices, correct or incorrect status, scores, timing, completion status, bookmarks, notes, mistake review records, learning history, reports, and progress data.
• Order or credit activity: credit balance, order status, product access records, and related support information when purchase or credit features are used.
• Support communications: messages, request details, attachments a user voluntarily provides, and follow-up records needed to answer support or school administration requests.
• Technical and security data: IP-derived security signals, request timestamps, browser type, device type, pages visited, session cookies, error logs, anti-abuse signals, and basic usage events needed for reliability, debugging, fraud prevention, and security.

3. Google User Data and OAuth Scopes

KYOEDU uses Google Sign-In only for authentication and account creation. If a user chooses “Continue with Google,” Google may provide KYOEDU with basic profile information that the user has authorized, such as the user's Google account identifier, email address, email verification status, display name, and profile image.

We use Google user data only to create or access the user's KYOEDU account, verify that the email address is controlled by the user, prevent duplicate accounts, keep the user signed in, display the user's account identity inside KYOEDU, and connect learning history to the same account. KYOEDU does not request, access, read, store, or share Gmail messages, Google Drive files, Google Calendar events, Google Contacts, Google Photos, or other Google Workspace content.

KYOEDU's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Information

We use collected information for the following purposes:

• Authenticate users through Google Sign-In, verified email codes, or password login.
• Create and maintain user accounts and secure sessions.
• Send verification emails, account access emails, support replies, and important service notices.
• Show exam categories, practice products, timed tests, answer choices, explanations, and relevant study paths.
• Score practice attempts, calculate results, save learning history, and show attempt reports.
• Store bookmarks, notes, mistakes, selected exams, and progress so users can continue studying later.
• Support parent, tutor, school, or learning center workflows when accounts are managed or supported by an organization.
• Operate credits, access records, and order support when these features are enabled.
• Detect abuse, prevent unauthorized access, troubleshoot errors, measure reliability, and improve product quality.
• Comply with legal obligations, enforce our terms, and protect the rights and safety of users and KYOEDU.

We do not sell personal information. We do not use Google user data or student learning records for third-party advertising. We do not use Google user data to train generalized artificial intelligence or machine learning models.

5. Email Verification, Passwords, and Sessions

Users may sign in with Google, a verified email code, or password access when available. Email verification codes confirm that a user controls the email address they provide. Verification code records are temporary and are used only for login, account verification, anti-abuse checks, and troubleshooting. Passwords, when used, are stored as password hashes rather than plain text. Session cookies are used to keep users signed in and to protect account access.

6. Student Learning Data

Student learning data may include exam categories, selected test products, passages, question prompts shown to the user, submitted answer choices, correct answers after submission, explanations, score reports, completion time, remaining time, bookmarks, notes, mistake review status, and learning history. KYOEDU uses this data to help students continue practice, understand weak areas, review mistakes, compare attempts over time, and plan what to study next.

7. Schools, Parents, Tutors, and Organizations

If a school, parent, tutor, learning center, or other organization provides, purchases, or manages access to KYOEDU, authorized staff or guardians may receive relevant learning information, such as account status, assigned exams, attempt history, score reports, notes, mistakes, and progress summaries, according to the agreement with that organization and applicable law. Schools and organizations are responsible for obtaining any required consent from students, parents, or guardians before using managed accounts.

8. How We Share Information

We share information only when needed to provide, secure, support, or legally operate KYOEDU. Recipients may include:

• Hosting, database, storage, security, logging, and infrastructure providers that run the application.
• Email delivery providers that send verification codes and account messages.
• Authentication providers, including Google, when a user chooses Google Sign-In.
• Payment, credit, or order service providers when paid features are enabled.
• Support and operations tools used to respond to user or school requests.
• Schools, tutors, parents, guardians, or organizations that manage or support a user's learning account, where applicable.
• Authorities, courts, or other parties when required by law or necessary to protect rights, safety, security, or prevent abuse.

Service providers may process information only for the purpose of providing services to KYOEDU and must protect that information under appropriate confidentiality and security obligations.

9. Cookies and Similar Technologies

KYOEDU uses cookies and similar technologies for authentication, session management, account security, preference storage, fraud prevention, reliability, and basic usage measurement. Essential cookies are required for login and account features. Users may configure browser settings to block or delete cookies, but some features may not work correctly without them.

10. Data Storage, Security, and Retention

We use reasonable administrative, technical, and organizational safeguards designed to protect account and learning data. These safeguards include verified login flows, hashed passwords where passwords are used, session controls, limited access, Cloudflare-hosted infrastructure, database access controls, and operational monitoring. No online service can guarantee perfect security, but we design our authentication, storage, and access controls to reduce risk.

We retain account and learning information for as long as needed to provide the service, maintain learning history, support schools or tutors where applicable, comply with legal obligations, resolve disputes, prevent abuse, and maintain security. Verification codes, temporary authentication data, and short-term security logs are retained for shorter periods. If an account is deleted, we will delete or de-identify associated personal information unless we must retain it for legal, security, fraud prevention, backup, dispute resolution, or legitimate operational reasons.

11. User Choices and Privacy Requests

Users may request access, correction, export, restriction, or deletion of personal information where applicable. Users may also disconnect Google Sign-In from their Google Account settings, although doing so may affect future Google login access to KYOEDU. To make a request, contact login@kyoedu.com. We may need to verify identity before completing a request.

12. Children and Student Privacy

KYOEDU is designed for education and exam preparation. If the service is used by children or students who are below the age required for independent consent in their country or region, access should be provided with consent and supervision from a parent, guardian, school, or authorized organization. We do not knowingly collect more student information than is needed to provide the education service. Parents, guardians, and schools may contact us to request access, correction, or deletion of student information where applicable.

13. International Use

KYOEDU may be accessed by users in different countries and regions. Information may be processed in locations where KYOEDU and its service providers operate. By using the service, users understand that information may be processed outside their country or region, subject to applicable law and safeguards.

14. Changes to This Privacy Policy

We may update this Privacy Policy when the product, authentication methods, service providers, legal requirements, or data practices change. When we make material changes, we will update the effective date at the top of this page and, when appropriate, provide additional notice. If KYOEDU changes how it uses Google user data, we will update this policy before using that data for a new purpose.