Privacy Policy

1. Information We Collect

Personal Information

When you create an account, we collect:

• Name and email address
• Profile information (avatar, bio, learning preferences)
• Payment information (processed securely through PayPal)
• Communication preferences

Learning Data

• Courses you create, access, and complete
• Learning progress and performance metrics
• Quiz scores and flashcard interactions
• Time spent learning and study patterns
• Content you upload (files, notes, course materials)

Technical Information

• Device information (browser, operating system)
• IP address and location data
• Usage analytics and interaction patterns
• Cookies and similar tracking technologies

2. How We Use Your Information

Service Provision

• Create and maintain your account
• Generate personalized courses using AI
• Track your learning progress and achievements
• Provide customer support and respond to inquiries
• Process payments and manage subscriptions

Platform Improvement

• Analyze usage patterns to improve our AI algorithms
• Enhance user experience and platform features
• Develop new educational tools and content
• Conduct research and analytics

Communication

• Send important account and service updates
• Provide learning reminders and progress notifications
• Share relevant educational content and tips
• Respond to support requests and feedback

3. Information Sharing and Disclosure

We Do Not Sell Your Data

LowkeyGenius does not sell, rent, or trade your personal information to third parties for marketing purposes.

Limited Sharing

We may share your information only in these specific circumstances:

• Service Providers: Trusted partners who help us operate the platform (hosting, analytics, payment processing)
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In the event of a merger, acquisition, or sale of assets
• Public Content: Course content you choose to publish in our marketplace
• Aggregated Data: Anonymous, aggregated statistics that cannot identify individuals

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit and at rest
• Secure authentication using Firebase Auth
• Regular security audits and monitoring
• Access controls and employee training
• Secure payment processing through PayPal
• Regular backups and disaster recovery procedures

5. Your Privacy Rights

Access and Control

You have the right to:

• Access and review your personal information
• Update or correct your account details
• Delete your account and associated data
• Export your learning data
• Control communication preferences

GDPR Rights (EU Users)

• Right to be forgotten (data deletion)
• Data portability
• Right to rectification
• Right to restrict processing
• Right to object to processing

CCPA Rights (California Users)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we don't sell data)
• Right to non-discrimination

PIPA Rights (Korean Users)

Under South Korea's Personal Information Protection Act (PIPA), Korean users have enhanced rights:

• Granular Consent: You can provide separate consent for different types of data processing
• Automated Decision Rights: You can refuse or request explanations for automated decisions affecting you
• Cross-Border Transfer Notice: We notify you when your data is transferred outside Korea
• Chief Privacy Officer Access: You can contact our designated CPO for privacy matters
• Enhanced Deletion Rights: Right to deletion with immediate effect where legally permissible
• Data Processing Transparency: Detailed information about processing purposes and legal basis

6. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your login status and preferences
• Analyze platform usage and performance
• Provide personalized content recommendations
• Ensure platform security

You can control cookie settings through your browser preferences. Note that disabling cookies may affect platform functionality.

7. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Improve our platform and services

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

8. Children's Privacy

LowkeyGenius is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable laws.

For Korean Users (PIPA Compliance)

Under PIPA, when transferring personal information of Korean users outside Korea, we provide:

• Transfer Notice: Advance notification of cross-border data transfers
• Recipient Information: Details about overseas recipients and their data protection measures
• Transfer Safeguards: Implementation of appropriate technical and administrative safeguards
• Data Subject Rights: Continued exercise of your rights even after overseas transfer
• Transfer Limitations: Transfers limited to purposes specified in this privacy policy

10. Consent Management and Automated Decisions

Consent Management (PIPA Compliance)

For Korean users, we implement granular consent management:

• Separate Consent: Individual consent for each data processing purpose
• Optional vs. Required: Clear distinction between mandatory and optional data collection
• Consent Withdrawal: Easy withdrawal of consent at any time through account settings
• Consent Records: Maintenance of detailed consent records including time, method, and scope

Automated Decision-Making Rights

Our AI-powered course generation and recommendation systems may make automated decisions. Korean users have the right to:

• Refuse Automated Decisions: Opt-out of automated processing that significantly affects you
• Request Explanations: Obtain information about the logic and significance of automated decisions
• Human Review: Request human intervention in automated decision-making processes
• Appeal Process: Contest automated decisions through our support channels

11. Third-Party Services

Our platform integrates with third-party services:

• Firebase: Authentication and database services (Google Privacy Policy applies)
• PayPal: Payment processing (PayPal Privacy Policy applies)
• Analytics: Usage analytics to improve our service

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a prominent notice on our platform. Your continued use of the service after such modifications constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: