Privacy Policy

Last updated: May 3, 2026 — Closed Beta

Looking for the plain-language version? See our Privacy & Trust Principles.

1. What We Collect

During beta, we collect minimal data:

Beta signup: When you sign up with a .edu email, we use your email address to send your access code, sign-in links (magic links), referral notifications, and important account notices. We retain a SHA-256 hash of your email for duplicate detection and account lookup. We do not sell, share, or use your email for marketing outside of service-related communication.

Beta access code: Your first name (used as your login code) and login activity (timestamps, login count) are stored to manage beta spots and track engagement.

Referral codes: If you refer others, your referral code and referral count are tracked to calculate reward months.

Study sessions: Your tutoring conversations — including your messages, tutor responses, session metadata (subject, mode, duration), and AI-generated flashcards — are stored on our servers to provide cross-session continuity, track your progress, and generate personalized review materials. When you paste raw study notes for a tutoring session, the raw text is processed during the active session and is not retained as a separate stored artifact; only a change-detection hash is retained so we can recognize when you've updated your notes. Derived study materials produced by the tutor — flashcards, summaries, generated notes — are retained as part of your account so you can review them later.

Student profile: We maintain a lightweight profile linked to your beta code that tracks session counts, subjects studied, and last activity. This enables the tutor to reference your previous sessions and avoid re-covering material.

AI provider metadata: For each tutor response, we store which AI provider and model was used, token counts, and response latency. This data is used for system reliability and cost monitoring. It does not contain personally identifiable information.

Feedback: If you submit feedback via the in-app form, your feedback text, optional name, and optional screenshot are stored in our database.

2. What We Don't Collect

We do not collect: passwords (beta uses code-based access), payment information (beta is free), browsing history, device fingerprints, or third-party tracking cookies. We do not sell or share any data with advertisers.

3. AI Processing

When you chat with the tutor, your messages are sent to third-party AI providers for processing. These providers process your message and return a response — we do not control their data retention policies. No personally identifiable information is included in AI requests beyond the study content you provide. We do not send your name, email, or access code to AI providers. We are not responsible for third-party AI provider data handling beyond what is described here.

4. Where Data Is Stored

All data is processed and stored on US-based infrastructure. Server infrastructure is hosted on Render (US). The database is hosted on Neon PostgreSQL (AWS US East, Virginia). Email is sent via Resend (US). DNS is managed by Cloudflare.

5. Data Retention & Deletion

Retention: Tutoring session data (conversations, flashcards, session metadata) is retained for up to 12 months to support your learning continuity. After 12 months of inactivity, session data may be automatically deleted.

Deletion requests: You can request deletion of all your data — including session transcripts, flashcards, and your beta tester record — by emailing privacy@masterygate.com. Deletion requests are processed within 30 days. When we process a deletion, we remove your account record and associated session data from our active database. Some information may remain for a limited time in backups or security logs, or longer where we are legally required or permitted to keep it. If MasteryGate later partners with educational institutions under FERPA-covered arrangements, deletion procedures will be adjusted to meet those requirements and disclosed at that time.

Local data: Some session state is also stored in your browser's sessionStorage for continuity during a visit. Closing your browser tab clears this automatically.

6. Children's Privacy

MasteryGate is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child under 13 is using MasteryGate, contact us at hello@masterygate.com.

7. Educational Records (FERPA)

MasteryGate is a consumer educational tool. We do not require or request access to official academic records, transcripts, or institutionally maintained student data. Users are responsible for ensuring they do not upload sensitive educational records without appropriate authorization. If MasteryGate is adopted by an educational institution in the future, a separate data processing agreement will govern FERPA compliance.

8. Changes

This policy may be updated as we move from beta to public launch. Material changes will be communicated to active beta testers.

9. Contact

Privacy questions and deletion requests: privacy@masterygate.com

General inquiries: hello@masterygate.com

Février Enterprises · 84 Pleasant St, Unit 28, Weymouth, MA 02190

← Back to MasteryGate