Privacy Policy

Who’s This Policy For And What Does It Cover?

StedPrep, LLC. (“StedPrep” or “we” or “us”) takes your privacy seriously. This Privacy Policy (“Policy”) applies to users of our online “Services,” including students and their parents. It describes how we may collect, use, and share your Personal Information. It also explains related rights and choices you may have. This Policy also explains your rights and our responsibilities regarding the collection of personal information from our students (“Student Personal Information”) as outlined by the Children’s Oline Privacy Protection Act (“COPPA”).

Our Services include: our public website (https://www.stedprep.com/), and any other site, app or online service we offer that links or refers to this Privacy Policy.

You may see other privacy notices when we collect your Personal Information for certain purposes. Those notices supplement this Policy.

What is “Personal Information”?

When we say “Personal Information,” we mean information that can reasonably be linked to a particular individual or their household. This includes Student Personal Information. Generally speaking, your Personal Information includes your unique identifiers (full name, phone number, email address, user name, etc.), and information about your characteristics, conditions or behavior that is associated with one of your identifiers or could otherwise reasonably be linked to you.

“Non-Personal Information,” on the other hand, has been anonymized, aggregated or de-identified such that it cannot reasonably be linked to a particular individual or their household.

Personal Information We Collect And How We Collect It

Categories

The Personal Information we collect depends on the nature of your interaction with us or our Services, and may include:

Identifiers. Your contact information (such as first and last name, business name, address, email address, phone number) and other identifiers that are specific to you or the computer or mobile device with which you access our Service (such as username, IP address, cookie ID and similar information).

Financial information. Data related to payment transactions, including payment card information processed securely on our behalf by Stripe, Inc. We do not store full card numbers.

Commercial information. Data about what products or services you purchase, obtain or consider, or offer for sale.

Internet or other network activity. Data you share with us via email, information about how you use the Service, social media content you share, interactions with our Service such as the pages that you visit and your preferences, and interactions with communications sent on our behalf.

Geolocation data. Data that reflects your approximate location when you access or use our Services.

Audio, electronic, visual or similar information that you submit to our Services.

Account information: We collect data when students or their parents register or update a StedPrep account. For parent/guardian accounts, this includes name, email address, phone number, username, and password. Payment information is collected and processed securely on our behalf by Stripe, Inc.; we do not store full payment card details. For student sub-accounts, this includes the student’s first name, username, grade level, and hashed password.

Academic and Performance Data. Information generated through a student’s use of the Services, including responses to diagnostic and practice assessments, test scores, skill mastery estimates by subject area and difficulty level, study plan completion data, and session-level performance metrics. This data is created as a direct result of the student’s interaction with our adaptive testing and study plan systems.

Other categories disclosed to you at the point of collection.

Collection Sources

From You When You Provide It. We may collect Identifiers, Professional or Employment Information or other Personal Information from you directly when you fill out a form on our site; register an account; join our mailing list; place an order or make a purchase; visit our office; interact with us at an event; or otherwise communicate with us.

Automatically From Your Device. Like most online services, our Services automatically collect some information from users’ devices in order to make features function correctly, customize or improve the user experience, understand how the Service is being used, or measure the effectiveness of marketing efforts. Some of this data may be collected through the use of browser cookies, pixel tags or similar online tracking technologies, which are explained below. In some cases, we limit this type of collection to Non-Personal Information. However, this data may include Personal Information such as online Identifiers, Internet Activity and Commercial Information.

From Third Party Sources. We may obtain information about you from other sources. For example, we may collect Identifiers, Professional or Employment Information, or Internet Activity that you have chosen to share on social media platforms. (To the extent you disclose such information through widely distributed media or on a public platform, we may not be required to treat it as Personal Information under applicable law.)

We may combine information collected from other sources with information collected from you or your device. To the extent the information, alone or in combination, constitutes Personal Information, we will treat it as Personal Information as described in this Policy.

How We Use Personal Information

We use Personal Information for the following purposes:

To provide the Services to you;

To maintain your account;

To improve our Services and analyze how they are used;

To secure our Services against fraud, malicious activity, or conduct that may violate our terms and conditions;

To personalize and improve your experience with the Services;

To provide you with information, products, or services that you request from us;

To notify you about changes to our Service and any products or services we offer or provide through them;

To contact you and provide you with help if you have a customer service issue;

To contact you to fill out surveys and participate in other types of market research;

To notify you of new products or services we think you might be interested in;

To comply with our legal obligations;

To secure our offices and other physical locations;

In any other way we may describe when we collect the information; and

For any other purpose with your or parental consent.

We may use Non-Personal Information for any purpose.

Automated Decision-Making and Personalized Study Plans

We use automated systems to analyze a student’s performance data and generate a personalized study plan. Specifically, following completion of the diagnostic assessment, our algorithms evaluate the student’s responses to estimate mastery levels across micro-skills and macro-skills within each section of the target exam. These estimates are used to automatically sequence and prioritize practice activities by subject area, skill type, and difficulty level. The study plan is updated dynamically as the student completes exercises, adapting to changing mastery estimates over time.

The automated study plan generation is designed solely to help students prepare for standardized tests and does not produce any legal or similarly significant effects on the student or parent. If you have questions about how your child’s study plan was generated, or wish to provide feedback, please contact us at privacy@stedprep.com.

How We Share Personal Information

Vendors

We may share Personal Information with contractors, service providers, and other vendors who assist or support us in providing the Services. Examples of these third party services may include hosting our website or platform, storing data, performing analytics, processing payments, or sending marketing communications. Our agreements with vendors prohibit them from retaining, using or disclosing the Personal Information we share with them for any purpose other than providing services to us.

Analytics or Marketing Partners

We use the following analytics tools to understand how our Services are used:

Google Analytics (marketing website only). Google Analytics is deployed solely on our public marketing website (https://www.stedprep.com). It collects information about how visitors interact with our marketing pages (e.g., pages viewed, referral sources, session duration). Google Analytics does not have access to authenticated application areas or Student Personal Information. For information on how Google uses this data, visit https://policies.google.com/technologies/partner-sites.

PostHog (authenticated application). PostHog is embedded within the authenticated student and parent portal. PostHog may collect usage analytics including page views, feature interactions, event-level behavioral data, and session recordings to help us understand how users navigate the application and to improve the user experience. PostHog may process Personal Information including account identifiers and interaction data. For student users under 13, PostHog is configured to limit data collection in compliance with COPPA, and session recording is disabled for those accounts. For information about PostHog’s data practices, visit https://posthog.com/privacy.

Tutor Portal Data Sharing (Future Feature)

We plan to introduce a Tutor Portal that, with the explicit prior written consent of a student’s parent or guardian, will allow an authorized tutor to view that student’s academic performance data. This sharing will occur only upon an affirmative, specific opt-in by the parent or guardian through account settings, and only after the tutor has registered a verified tutor account. Tutors will be able to view academic performance metrics (e.g., skill mastery estimates, practice session scores, and study plan progress) but will have no access to payment information, contact details, or any other personal data.

Parents may revoke a tutor’s access at any time through account settings. Revocation takes effect immediately and permanently removes the tutor’s ability to view the student’s data. We will update this Policy as the Tutor Portal feature is launched.

Mandatory Disclosures And Legal Proceedings

We may have a legal obligation to disclose Personal Information to government authorities or other third parties pursuant to a valid regulatory request, subpoena or court order. We may also need to disclose and otherwise process your Personal Information in accordance with applicable law to prevent physical harm or financial loss, protect the vital interests of a person, enforce our various policies or terms of use, protect our property, services and legal rights, prevent fraud, support auditing, compliance and corporate governance functions, or comply with applicable law.

Change In Control Or Merger

We may transfer your information in the event of the sale of substantially all of the assets of our business to a third-party or in the event of a corporate merger, consolidation, acquisition or reorganization. However, in such event, any acquirer will be subject to the provisions of our commitments to you or we will not disclose your information.

With Your Direction Or Consent

We will share your Personal Information with other third parties as you may direct or otherwise consent.

Children’s Privacy

Our Services are offered to students to assist in their development regarding test taking. As such, we are required to use and collect Student Personal Information, which may include the Personal Information of children under the age of 13. We may use and disclose Student Personal Information: (1) to provide our services to a child (such as the games and activities your child would like to play); (2) to comply with the law or legal process (such as when we use Student Personal Information for record-keeping to satisfy legal and compliance obligations); (3) in accordance with valid consent (where a parent has provided consent for their child); and (4) as necessary for business interests (such as when we collect and use a child's data in support of internal operations, taking into account the impact on the child's privacy, or for security purposes).

Parental Consent When we knowingly collect Student Personal Information from a child under 13, we obtain verifiable parental consent before collecting it (except where a COPPA exception applies, such as using a child’s email address solely to respond to a one-time request or for password retrieval). Parental consent is obtained during the account registration process: when a parent or guardian registers a StedPrep account and creates a student sub-account for a child under 13, the parent’s acceptance of our Terms of Service and this Privacy Policy at the time of registration constitutes verifiable parental consent for our collection and use of the child’s Student Personal Information as described in this Policy. We maintain records of this consent. For any disclosure of Student Personal Information to third parties other than our service providers (such as to an authorized tutor under the Tutor Portal feature), we will seek additional, specific consent from the parent or guardian as required by COPPA.Parental Choices and Controls If you are a parent of one of our child users, you can ask us to:

Allow you to review your child’s Student Personal Information

Deactivate your child's account

Revoke any consent you have given for your child

Delete Student Personal Information your child has given us

Stop collecting Student Personal Information from your child

To make these requests, or if you have any other questions about our Services or our policies or practices regarding the collection, use, or disclosure of Student Personal Information, you may contact us at: privacy@stedprep.com. We may require additional information to identify your child’s account or to verify your identity and relationship with the child.

Retention and Deletion

If we do collect Student Personal Information, we keep that information for the time we determine is necessary to perform the task for which we collected it, unless otherwise requested by a child’s parent. We reserve the right to keep certain information necessary for record-keeping to the extent permitted and/or required by law, including any statutory retention requirements. When deleted, Student Personal Information is deleted securely. In some cases we may de-identify Student Personal Information instead of deleting it.

Cookies And Online Tracking

What Are Cookies?

A browser cookie is a small piece of data that a website stores in your device’s browser. It holds information that the site uses to function properly, remember your preferences, or personalize your experience. A typical cookie contains a cookie ID, which is a unique string of characters used to identify your browser during the browsing session, or in some cases, during subsequent browsing sessions. Cookies, cookie ID’s and similar pieces of data may be considered Personal Information (identifiers or internet activity) under applicable law.

Other online technologies, similar to cookies, may allow users to be identified and tracked across multiple browsing sessions, and in some cases tracked across different websites and apps for marketing or advertising purposes. These technologies include, but are not necessarily limited to, pixels, web beacons and scripts (collectively with browser cookies, “Cookies”).

How Cookies May Be Used On Our Services

Our Service uses “first party” Cookies, which are set by our web domain (https://www.stedprep.com/). Our Service also uses some “third party” Cookies, which are set by other web domains associated with our vendors or partners. This means that, when you visit our site, your browser may automatically connect to our vendor’s web server, as well as ours, and provide them with access to your online identifiers and information about how you use our site.

Both First Party and Third Party Cookies may be used on our Services for the following purposes:

• Essential: Essential Cookies are necessary for site security and to enable you to move around our site and use its features.
• Preferences. Preference Cookies allow us to remember your preferences on the Service during a session or across sessions.
• Analytics: Analytics Cookies allow us to analyze use of our Service to evaluate and improve performance or marketing efforts.
• Marketing: Marketing Cookies may be used by our partners to deliver personalized adverting on our Services or other sites you visit.

Some of the Cookies used on our Services are related to Google tools we use, including Google Analytics. For more information, click here: https://policies.google.com/technologies/partner-sites?hl=en-US

PostHog cookies and tracking technologies are deployed within the authenticated application. These may include first-party and third-party cookies or local storage that capture user interactions, session recordings, and event data within the student and parent portals. PostHog cookies enable session replay functionality (disabled for student accounts associated with users under 13) and product analytics. You can learn more at https://posthog.com/privacy.

How You Can Block Cookies

You can block, disable or delete cookies at any time by changing the settings in your browser. However, blocking, disabling, or deleting cookies may limit your ability to view all the pages of our site or other sites. You can find more information about cookies and other options you may have for restricting them at www.cookiesandyou.com/, and www.aboutads.info/choices.

“Do Not Track” Signals

Your browser may offer a Do Not Track (DNT) setting.  If you turn that setting on, your browser sends a signal to websites indicating that you don’t want to be tracked over time or across third party sites.  We don’t currently respond to these signals because there is not yet a common understanding of how to process them or a consensus on what “tracking” means.

Your Rights And Choices

You may opt-out of our marketing emails by using the unsubscribe link provided in the email.

If you register a parent or student account, you can make changes to your information in account settings.

See Section 7 for options to restrict Cookies.

Links To Third Party Sites

Our Services may contain links to third-party websites, products or services. If you use these links, you will leave our site. Such links do not constitute or imply an endorsement, sponsorship or recommendation by us of the third party, the third-party website or the information contained therein, and we shall not be responsible or liable for your use thereof. Such use shall be subject to the terms of use and privacy policies applicable to those sites.

Third Party Direct Marketing

We don’t share Personal Information with third parties for their direct marketing purposes.

Security

The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While we strive to use commercially reasonable means to protect your Personal Information, we cannot guarantee its absolute security.

Residents of California, Colorado, and Virginia

As of January 1, 2025, we do not meet the definition of a covered “business” under the California Consumer Privacy Act of 2018, as amended. We also do not meet this definition under the Colorado Privacy Act or the Virginia Consumer Data Protection Act. If and when we become a covered business under any of these Acts, we will update this Policy accordingly as part of ongoing compliance efforts.

Data Subjects In The EEA, United Kingdom and Switzerland

StedPrep is a Delaware limited liability company headquartered in West Hills, California that does not have an office, employees or other establishment in the European Economic Area (EEA) or any other country outside the United States (collectively, with EEA countries, the “Other Countries”). Our Services are not targeted to natural persons in Other Countries. If you visit our website or contact us, your Personal Information will be processed in the United States—which has not received a finding of “adequacy” from the European Commission as referenced in Article 25 of the European Union’s General Data Protection Regulation (GDPR)—and will be handled in accordance with this Policy and applicable U.S. law, unless we have agreed otherwise in writing with you or a third party you are affiliated with.

Changes To This Policy

We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy. If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website.

Contact Us

If you have any questions or concerns about this Policy, please contact us via privacy@stedprep.com.