Privacy Policy
Draft for legal review (US COPPA/FERPA, Korea PIPA, EU GDPR). Controller: HIA&Company Co., Ltd. (주식회사 히야앤컴퍼니).
What we collect
- Account: the name and email address your Google or school account provides, and a user ID.
- Learning data: which lectures you watched, practice and mock-exam scores, the scores (not the text) of free-response answers you submit, and the notes you save in the Business Canvas workspace.
- Payment: handled entirely by our payment partner. We receive the plan purchased and its status, never card numbers.
- Technical: standard server logs (IP address, browser type, pages requested) kept for security for up to 30 days.
We do not collect precise location, contacts, photos or advertising identifiers, and we do not run third-party advertising or tracking.
Why we use it
To provide the service you signed up for: saving your progress, scoring your writing, and showing you what to study next. To operate billing and support. To improve the course using aggregated, de-identified statistics (for example, which questions most students miss).
Automated scoring
When you submit a free-response answer, its text and the task are sent to our AI model provider (Anthropic) to be scored against our rubrics. We do not send your name or email address with it, but anything you write in the answer itself is sent as written, so please do not include personal details in your answers. We keep only the resulting scores, not the text. Under the provider’s commercial terms, data sent through its API is not used to train its models; the provider keeps it only as long as its data-retention policy allows. We will update this section if we arrange a shorter retention period.
Transfers of personal information abroad
To run the service we use the providers below. These transfers are necessary to perform our contract with you. Information is sent over the network at the time you use the feature concerned. You can avoid a transfer by not using that feature (for example, not submitting free-response answers for scoring, or not buying Pro); signing in and saving progress require the hosting and database providers.
| Recipient (contact) | Where the data is stored or processed | What | Why | How long |
|---|---|---|---|---|
| Vercel Inc. vercel.com/legal/privacy-policy | United States (and its global edge network) | Pages you request, IP address, browser type | Hosting the website | Per Vercel’s log-retention policy |
| Supabase Inc. supabase.com/privacy | Republic of Korea (Seoul region) | Name, email, user ID, learning progress and scores, Business Canvas notes | Sign-in and saving your progress | Until you delete your account, then within 30 days |
| Google LLC policies.google.com/privacy | United States | Your Google sign-in (handled between you and Google) | Signing in with Google | Per your Google account settings |
| Anthropic PBC www.anthropic.com/legal/privacy | United States | Free-response answer text and the task (no name or email) | Automated scoring and feedback | Per Anthropic’s API data-retention policy |
| Paddle.com Market Ltd www.paddle.com/legal/privacy | United Kingdom | Payer’s name, email, country and payment details | Processing payments and taxes as merchant of record | As required by tax and payment law |
Children
The service is for students aged 14 and over. We do not knowingly create accounts for children under 14; if we learn we have, we delete the account. Where local law requires parental consent at a higher age, we obtain it before the account is used. Payments for users under 18 are made by a parent or guardian.
Sharing
We share data only with the processors needed to run the service (hosting, authentication, database, payment, AI scoring), each under a contract that limits use to our instructions. We do not sell personal data. We disclose data if the law requires it.
Retention
Learning data is kept while your account is active and deleted within 30 days of account deletion. Billing records are kept as long as tax law requires.
Your rights
You can download your learning data and delete your progress from the Account page at any time. You can request access, correction, deletion or portability of any personal data, or object to processing, by emailing support@teensmba.com. EU/UK users may lodge a complaint with their supervisory authority; Korean users may contact the Personal Information Protection Commission.
Cookies
We use only the cookies needed to keep you signed in. No analytics or advertising cookies are set.
Changes and contact
We will announce material changes in the service before they apply. Contact: support@teensmba.com.