Privacy Policy

Introduction

StudyForge ("we", "us", or "our") is an educational platform operated by Transparency SF. This Privacy Policy describes how we collect, use, and protect information when you use our platform at learn.askbobo.com ("the Service").

We are committed to protecting the privacy of all users, especially students under the age of 18. We comply with the Children's Online Privacy Protection Act (COPPA) and the Family Educational Rights and Privacy Act (FERPA).

Information We Collect

Account Information

• Email address (for account creation and login)
• Display name (chosen by the user)
• Date of birth (for age verification under COPPA)

Learning & Usage Data

• Practice question responses and scores
• Study session progress and completion data
• AI tutor conversation history (used to improve tutoring quality)
• Flashcard review schedules and performance

Technical Information

• Browser type and operating system
• IP address (for rate limiting and security only)
• Device type (for responsive layout)

How We Use Your Information

• Providing personalized learning experiences and adaptive practice
• Tracking academic progress and generating performance reports
• Powering the AI tutor (LISA) to give contextual help
• Maintaining platform security and preventing abuse
• Improving our educational content and algorithms

Children's Privacy (COPPA)

We do not knowingly collect personal information from children under 13 without verifiable parental consent. Users who indicate they are under 13 during registration are blocked from creating an account. If we learn that we have collected information from a child under 13 without parental consent, we will delete that information promptly.

Parents or guardians may contact us at the email below to review, delete, or refuse further collection of their child's information.

Information Sharing

We do not sell, rent, or trade personal information. We share data only in the following limited circumstances:

• Service providers: Cloud infrastructure (AWS) for hosting and data storage
• AI processing: Anonymized learning interactions may be processed by third-party LLM providers to generate tutoring responses (no personal identifiers are sent)
• Legal compliance: When required by law or to protect the safety of our users

Data Security

We implement industry-standard security measures including encrypted connections (TLS), hashed passwords (bcrypt), JWT-based authentication with short-lived tokens, rate limiting, and regular security audits. Code execution for programming exercises runs in isolated sandbox environments (AWS Lambda with Firecracker microVMs).

Data Retention

We retain account data for as long as the account is active. Users may request deletion of their account and associated data at any time by contacting us. Upon deletion, personal data is removed within 30 days, except where retention is required by law.

Contact Us

For questions about this Privacy Policy, data deletion requests, or COPPA-related inquiries:

Email: rchow@mitns.com

Organization: Transparency SF