Privacy Policy

Welcome to Science Olympiad Tests, operated by Pathvana LLC ("SciOly Prep", "we", "our", or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By using our service, you agree to the collection and use of information in accordance with this policy.

2.1 Personal Information

When you create an account or use our services, we may collect:

• Name and email address (from Google OAuth authentication)
• Profile picture (if provided through Google account)
• Account preferences and settings
• Age verification or parental consent status (for users under 13)

2.2 Usage Information

We automatically collect certain information when you use our service:

• Test results and scores
• Time spent on tests
• Practice history and progress
• Browser type and device information
• IP address and general location data

2.3 Uploaded Content

If you upload PDF tests or import tests from URLs, we process this content to extract questions and answers. Uploaded content is stored securely and associated with your account.

Important: We do NOT use user-uploaded content to generate public tests, train AI models, or create any monetized content. Your uploaded materials remain private to your account and are used solely to provide you with personalized practice tests.

2.4 Data Minimization

We only collect and store information that is necessary to provide our services. We regularly review our data collection practices to ensure we are not retaining unnecessary information. Internal logs and metadata are kept to the minimum required for service operation and security.

We use the information we collect to:

• Provide, maintain, and improve our services
• Track your test results and progress over time
• Generate AI-powered practice tests based on Science Olympiad topics (using only our own content, not user uploads)
• Personalize your experience and content recommendations
• Communicate with you about service updates or changes
• Ensure the security and integrity of our platform
• Comply with legal obligations
• Respond to copyright or legal complaints

We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances:

• Service Providers: We use third-party services (such as OpenAI for AI test generation, Google for authentication, and database hosting providers) that may process your data to provide our services.
• Legal Requirements: We may disclose information if required by law, court order, or governmental authority.
• Protection of Rights: We may disclose information to protect our rights, privacy, safety, or property.
• Copyright Claims: We may share limited information with copyright holders in response to valid DMCA or similar takedown requests.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Our security measures include:

• HTTPS encryption for all data transmission
• Secure authentication through Google OAuth
• Regular security audits and updates
• Limited access to personal data by authorized personnel only
• Minimal data retention practices to reduce breach risk

6.1 Active Accounts

We retain your personal information for as long as your account is active or as needed to provide you services.

6.2 Account Deletion

You may request deletion of your account at any time by contacting us. Upon deletion request:

• Immediate: Your account access is terminated and profile data is removed from active systems
• Within 30 days: All personal data, test results, and uploaded content are permanently deleted from our primary databases
• Within 90 days: Data is removed from backup systems
• Exceptions: We may retain anonymized, aggregated data for analytics, and certain records as required by law

6.3 Inactive Accounts

Accounts that have been inactive for more than 24 months may be flagged for deletion. We will attempt to notify you via email before any deletion occurs.

6.4 Logs and Metadata

Server logs containing IP addresses and access records are automatically deleted after 90 days. We only retain the minimum metadata necessary for security and service operation.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Request a copy of your data in a machine-readable format
• Objection: Object to certain types of data processing

To exercise these rights, please contact us at the email address below. We will respond to requests within 30 days.

Our service is designed for educational purposes and may be used by students of various ages. We are committed to complying with the Children's Online Privacy Protection Act (COPPA).

8.1 Users Under 13

We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you are under 13, you must have your parent or guardian create an account on your behalf or provide consent before using our service.

8.2 Parental Consent Process

For users under 13, we require:

• A parent or guardian must register the account
• Verification of parental consent via email confirmation
• Parents may review, modify, or delete their child's information at any time
• Parents may revoke consent and request deletion of their child's data

8.3 Information Collected from Children

For accounts with verified parental consent, we collect only the minimum information necessary to provide educational services: name (or username), test results, and progress data. We do not collect phone numbers, addresses, or other sensitive information from children.

8.4 Parental Rights

Parents may contact us at any time to review their child's personal information, request deletion, or withdraw consent. Contact us at support@aitrove.ai.

9.1 Google AdSense

We use Google AdSense to display advertisements on our website. Google AdSense uses cookies to serve ads based on your prior visits to our website and other websites. You can opt out of personalized advertising by visiting Google Ads Settings.

Note: For users under 13 with verified parental consent, we disable personalized advertising and show only contextual, non-targeted ads.

9.2 Cookies We Use

Our website uses the following types of cookies:

• Essential Cookies: Required for authentication and basic site functionality
• Analytics Cookies: Help us understand how visitors use our site
• Advertising Cookies: Used by Google AdSense to display relevant ads

9.3 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website. For more information about how Google uses data from partner sites, visit Google's Privacy & Terms.

Our service integrates with or uses the following third-party services:

• Google OAuth: For user authentication
• Google AdSense: For displaying advertisements
• OpenAI: For AI-generated test content
• Netlify: For hosting and infrastructure
• Turso: For database services

These services have their own privacy policies, and we encourage you to review them.

12.1 Regular Review

We review and update this Privacy Policy at least annually, or more frequently when required by changes in law, our practices, or service features.

12.2 Notification of Changes

We will notify you of any material changes by posting the new Privacy Policy on this page, updating the "Last updated" date, and sending an email notification to registered users.

12.3 Re-Consent for Material Changes

For material changes that significantly affect how we collect, use, or share your personal information, we will require you to review and re-accept the updated policy before continuing to use the service. You will be prompted to agree to the new terms upon your next login.

12.4 Right to Decline

If you do not agree with updated terms, you may request deletion of your account and data. Continued use of the service after being notified of changes constitutes acceptance.

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact us:

Pathvana LLC
Privacy Inquiries
Response time: Within 30 days