Privacy policy

• We do not sell your personal information, and we do not share it for targeted advertising.
• We do not show ads, and we do not use student data to build advertising profiles.
• Voice lessons are processed live by our voice and speech providers. We never record the audio of a voice lesson. A text transcript of each session is kept for a limited time so the Ace team can fix problems, and it is never added to your account.
• Pax's teaching is computer-generated by third-party language and speech systems, so what you type or say to Pax is sent to those providers to produce a reply.
• You can download your data from your profile, delete your account at any time, and turn analytics off under Privacy choices in the footer.

We collect the following categories of information:

• Account information. When you sign in with Google, we receive your name, email address, profile photo, and an account identifier from Google. When you sign in with an emailed link, we receive your email address. While a sign-in link is on its way, your browser keeps the address so the link can finish signing you in. We also record which version of these terms you accepted and when.
• Profile information you give us. Your grade, test date, target score, the areas you want to work on, whether you are taking the Science section, and the name you would like Pax to call you.
• Study records. Your answers, scores, practice tests, time spent, topic mastery, study plan and lesson progress, streaks, and the notes a lesson leaves on your board.
• Text conversations with Pax. The messages you type to Pax and Pax's replies are saved to your chat history. To keep Pax consistent from one session to the next, we also keep a short summary about you that Pax writes from those conversations (for example your goals, how you like to learn, and mistakes you tend to repeat). If you rate a reply, we keep the rating with that question and reply. If you attach a photo of a question, it is sent to the language model with that one message and is not stored; your chat history records only that a photo was sent.
• Voice and microphone input. See Section 2.
• A parent or guardian email address, if you give us one. You can invite a parent or guardian to receive a weekly progress email. Nothing is sent until they confirm from the invitation email. The report includes the test date and days left, the current streak, questions answered that week, overall accuracy, the most recent lesson topic, and the areas Pax is focusing on next. You can turn reports off in your profile, and the recipient can unsubscribe from any report. Only invite someone you know who is happy to hear from us.
• Purchase information. Payments are handled by Stripe. We never receive your full card number. We receive and keep a record of the purchase: what was bought, the amount, the date, Stripe reference numbers, and when your access ends.
• Messages you send us. When you use the Feedback button or email us, your message and your account email address are delivered to the Ace team by email so we can reply.
• Device and log information. Like most websites, our hosting and infrastructure providers receive your IP address, browser type, operating system, and request times, and keep server logs for security, debugging, and abuse prevention. We use IP addresses to limit abuse (for example, how many requests can come from one address) and store them for that purpose only in scrambled (hashed) form that expires.
• Product analytics. See Section 4.
• Information about organizations. See Section 6.

Voice is optional. Your browser asks for permission before Ace can use your microphone, and you can type instead in most places.

• Live lessons with Pax. When you talk to Pax in a live lesson, your voice is streamed in real time through our voice infrastructure provider (LiveKit) to a speech recognition provider that turns it into text. That text, along with lesson context, goes to a language model provider that writes Pax's reply, and a speech provider turns the reply into Pax's voice. Depending on how a lesson is configured, these providers are Deepgram, Cartesia, OpenAI, Anthropic, and Google (see Section 5). Some configurations send your audio directly to a speech-to-speech model from OpenAI.
• What we keep. We never record the audio of a voice lesson. Our voice hosting provider keeps a text transcript of each session (what Pax and the student said, as text) and a technical log of the session for a limited time, then deletes them. The Ace team uses them only to find and fix problems and to improve lessons; they are not added to your account or shown to anyone else. We keep what the lesson produces: your graded answers (the choice you gave, not the recording), your progress, the notes on your board, and a name you ask Pax to use. Our hosting and infrastructure providers keep operational logs that can include short excerpts of what was said, for a limited time, to diagnose problems and prevent abuse. Our providers may also keep limited data under their own retention terms.
• Speech provider model improvement. The standard terms of our speech recognition and voice provider, Deepgram, allow it to use audio and text it processes to improve its own models unless a customer opts out. We have opted out for some of our voice configurations but not yet for all of them. Our language model providers (Anthropic and OpenAI) do not train their models on data sent through their business services under their terms.
• Outside live lessons. In some parts of Ace, speaking to Pax uses your browser's built-in speech recognition, which your browser's maker (for example Google or Apple) may process under its own privacy policy. On devices without it, such as iPhones, the short recording is sent to OpenAI to be turned into text and is not stored by us. When a text-based lesson reads aloud, the words Pax is about to say are sent to OpenAI to produce the audio.
• Your consent, and other people. By turning on your microphone you agree that your voice will be processed this way. Please use voice in a place where you are the only person speaking, or where everyone nearby knows they may be heard.

We use personal information to:

• Provide and personalize the Service, including your study plan, lessons, practice, Pax's replies, and the weekly parent report you set up.
• Process payments and manage your Season Pass.
• Keep the Service secure, prevent fraud and abuse, enforce usage limits, and enforce our Terms.
• Send you sign-in links and messages about your account, purchases, security, and changes to our terms. We do not send marketing email to students.
• Understand how Ace is used and improve it, using analytics and aggregated or de-identified information.
• Comply with the law and respond to lawful requests.

Our commitments to students. We do not sell personal information. We do not use student information for targeted advertising or to build advertising profiles, and the Service shows no ads. We use student information only to provide, secure, and improve Ace and as described in this policy.

We use cookies and browser storage that are needed to keep you signed in, remember your preferences, and save your work.

We also use PostHog for product analytics, so we can see which pages and features are used and find problems. It is on by default. It collects page views (the page address without any query string), clicks, errors, named product events (for example that a test was submitted or a purchase was completed), and session recordings of page layout and clicks in which all text and everything typed is masked and the lesson board is not recorded. A signed-in student is identified to analytics only by an internal account ID, together with whether they have a Season Pass and their target score. Names and email addresses are removed before anything is sent. PostHog also receives your IP address, which it uses to estimate a coarse location. When Stripe confirms a purchase, our server sends one purchase event to PostHog for that account ID, unless you turned analytics off before you started checkout. On organization pages, analytics records which organization's page was opened and which buttons were used.

You can turn analytics off at any time under Privacy choices in the footer. That choice is saved in your browser, so you will need to set it on each browser and device you use. Browser analytics also stays off when your browser sends a Do Not Track signal. We do not use advertising cookies, ad networks, or cross-site tracking.

We use the following service providers to run Ace. Each receives only what it needs for its job and is bound by its agreement with us to use it for that job.

• Google (Firebase sign-in and database, which hold your account, profile, and study records; the Google Workspace mailbox the Ace team uses to reply to organizations; and, in some voice lesson configurations, Google's speech models).
• Vercel (hosts and delivers the website and its servers).
• Anthropic (the language model behind Pax: receives lesson context, your messages, and the text of what you say in voice lessons; also summarizes an organization's public website when it asks for a demo).
• OpenAI (depending on configuration: speech to text, Pax's voice, speech-to-speech voice lessons, and the language model behind Pax).
• LiveKit (carries live voice sessions between your browser and Pax, in some configurations connects them to speech providers, and keeps each session's text transcript and technical log for a limited time; never audio).
• Deepgram (speech recognition and Pax's voice in live lessons).
• Cartesia (Pax's voice in some voice lesson configurations).
• Stripe (payments; receives your billing details directly).
• Resend (sends sign-in links, weekly parent reports, and other service email).
• PostHog (product analytics and masked session recordings, hosted in the United States).
• Typesafe (in some voice lesson configurations, helps work out which answer choice you said aloud; receives the text of that reply).

If we add or replace a provider, we will update this list. We do not allow these providers to sell your information or to use it for advertising.

• Partner requests. When someone asks for a demo at aceactprep.com/partners, we store their name, organization, website, role, work email, and any note, and email the request to the Ace team. To personalize our reply, we read the visible text of the organization's public website and send it to Anthropic to summarize. We then make a personal page for the organization and send a reply from an Ace team mailbox.
• Partner pages. A partner page (aceactprep.com/for/…) describes the organization using its name and public information. It is not listed publicly, but anyone with the link can open it.
• The staff demo. The five-minute voice demo on a partner page needs no account. It is processed the same way as a live lesson (Section 2): its audio is never recorded, and its text transcript is kept for a limited time only to fix problems. We count how many demos each page has started, to enforce limits.
• Students in a school or organization program.Unless a written agreement signed with a school says otherwise, Ace is not acting as a school official and students use Ace under this policy as individual users. Where a written agreement makes Ace a school service provider, that agreement controls how we handle student education records, including under the Family Educational Rights and Privacy Act (FERPA).

Apart from the service providers above, we share personal information only:

• With people you choose, such as the parent or guardian you invite to weekly reports.
• For legal and safety reasons, if we reasonably believe it is necessary to comply with the law or a lawful request, to protect anyone's safety, or to prevent fraud or abuse, or to enforce our Terms.
• In a business transfer, if Ace is involved in a merger, acquisition, financing, reorganization, or sale of assets. Any buyer must honor this policy for information it receives, or give you notice and a choice before using it in a materially different way.
• With your consent, for any other purpose we describe to you at the time.

• Your account, profile, study records, chat history, and the summary Pax keeps are kept until you delete your account (or we close it).
• Parent report invitations and delivery records are kept while reports are on; delivery records expire automatically.
• Purchase and billing records are kept as long as we need them for accounting, tax, fraud prevention, and legal reasons, even after you delete your account.
• Partner requests and partner pages are kept while we are in touch with the organization. Email support@aceactprep.com to have them removed.
• Analytics data is kept by PostHog under our account settings. Server logs and backups kept by our providers are deleted in the ordinary course.

You can delete your account at any time from Profile, then Delete account. This disables your account right away and queues your profile, study records, chat history, Pax's summary, practice and lesson records, and parent report settings for permanent deletion. A scheduled job finishes the deletion, usually within a few days. Deleting your account ends any Season Pass on it, and the pass is not refunded. Billing records, the analytics data described in Section 4, and copies in provider logs and backups may remain for a limited period as described above. You can also download a copy of your data from your profile at any time.

Ace is for high school students and is not directed to children under 13. You must be at least 13 to create an account. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe a child under 13 has given us personal information, email support@aceactprep.com and we will delete it.

If you are 13 to 17, a parent or guardian should review this policy and our Terms with you and agree to them before you use Ace. A parent or guardian can contact us to ask what information we hold about their teen or to have it deleted; we will take reasonable steps to confirm the request comes from the account holder or their parent or guardian.

Wherever you live, you can see and download your data from your profile, correct your profile, turn off parent reports and analytics, and delete your account. You can also email support@aceactprep.com to ask us to tell you what personal information we hold about you, give you a copy, correct it, or delete it. We will need to confirm your identity, usually by a message to the email address on your account, and we will respond within the time the law requires (for example, 45 days under California law). We will not treat you differently for using these rights.

California and other US states. Residents of California and of states with similar laws (such as Colorado, Connecticut, Oregon, Texas, Virginia, and Washington) may have the right to know what personal information we collect, use, and disclose; to access, correct, and delete it; to get a portable copy; and to opt out of its sale, its sharing for cross-context behavioral advertising, targeted advertising, and certain profiling. We do not sell or share personal information, or use it for targeted advertising or for profiling that produces legal or similarly significant effects, as those terms are defined in those laws, and we have not done so in the past 12 months. We do not knowingly sell or share the personal information of anyone under 16. Because there is no sale or sharing to opt out of, a Global Privacy Control signal does not change how we process your information; to turn analytics off, use Privacy choices. We use sensitive personal information only as needed to provide the Service. In the past 12 months we have collected the categories of information described in Section 1 (identifiers, account and commercial information, education-related study records, audio input as described in Section 2, internet activity, and coarse location inferred from IP address), from you, your device, and our service providers, for the purposes in Section 3, and disclosed them only to the recipients in Sections 5 to 7.

You may use an authorized agent to make a request; we may ask the agent for proof of your permission and ask you to confirm your identity with us. If we decline your request, you may appeal by replying to our decision or emailing support@aceactprep.com with “Appeal” in the subject line, and we will respond within the time the law requires.

We use reasonable administrative, technical, and physical safeguards, including encryption in transit, per-user database access rules, and limited-access service credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the authorities as the law requires.

Ace is operated from the United States, and our providers process information in the United States and other countries where they operate. If you use Ace from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live.

We may update this policy. If we make material changes, we will tell you by email or in the Service before they take effect and, where required, ask for your agreement again. The date at the top shows when it last changed.

For privacy questions or requests, email support@aceactprep.com or use the Feedback button inside the app.