Privacy Policy

Last updated: January 17, 2026

1. Introduction

AccessEd ("we", "our", or "us") is operated by Nahom Worku, based in Toronto, Ontario, Canada. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our mobile application and related services (collectively, the "Service").

By using AccessEd, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

When you create an account or use our Service, we collect:

• Account Information: Email address, username, and optionally your name
• Authentication Data: Encrypted password (if using email sign-up), or authentication tokens from Google or Apple Sign-In
• Documents: PDF files and other documents you upload for learning
• Learning Data: Quiz responses, flashcard progress, and interaction history with the AI tutor

2.2 Information Collected Automatically

When you use our Service, we automatically collect:

• Device Identifier: A unique anonymous ID generated when you first install the app, used to identify your device
• Usage Data: Features used, session duration, questions asked, quizzes completed, and learning progress
• Device Information: Device type, operating system version, and app version
• IP Address: Logged when you sign in for security purposes
• Technical Data: Error logs and performance data to improve the Service

2.3 Information from Third-Party Sign-In

If you sign in using Google or Apple:

• Google Sign-In: We receive your email address and name from your Google account
• Apple Sign-In: We receive your email address (or Apple's private relay email) and optionally your name. Apple only shares your name on the first sign-in

3. How We Use Your Information

We use your information to:

• Provide the Service: Process your documents, generate quizzes, create flashcards, and power the AI tutor
• Personalize Learning: Track your progress and adapt content to your knowledge level
• Communicate: Send verification emails, password resets, and important service updates
• Improve the Service: Analyze usage patterns to fix bugs and develop new features
• Process Payments: Manage subscriptions through Apple's App Store

4. Third-Party Services

We use the following third-party services to provide our Service:

We do not sell your personal information to third parties. We do not use third-party advertising or tracking services.

4.1 On-Device AI Processing

On supported devices (iOS 26 and later), AccessEd uses Apple Foundation Models to provide offline AI features. This processing happens entirely on your device:

• Offline chat responses to your questions
• Quiz generation from your study materials
• Flashcard generation from your documents

When using on-device AI, your data is not sent to any external servers. All processing occurs locally on your iPhone or iPad.

5. Local Data Storage

The AccessEd app stores data locally on your device:

• Keychain (Secure Storage): Authentication tokens and credentials are stored in the iOS Keychain, Apple's secure storage system
• Local Database: Chat history, quiz results, and saved questions are stored locally using Apple's SwiftData framework
• Preferences: Your notification settings, course colors, and app preferences are stored in UserDefaults
• Offline Documents: Downloaded study materials for offline access

Local data remains on your device and is deleted when you uninstall the app or delete your account.

6. Notifications

With your permission, AccessEd sends local push notifications to help you stay on track:

• Daily study reminders
• Learning streak alerts
• Weekly progress summaries
• Topic review reminders when knowledge may be fading

You can customize or disable notifications at any time in the app settings or your device's Settings app.

7. Data Retention

How long we keep your data depends on your account type:

When you delete your account, we permanently delete all your personal data, documents, learning progress, and associated content within 30 days.

8. Data Security

We implement industry-standard security measures to protect your data:

• Passwords are hashed using bcrypt (never stored in plain text)
• All data transmitted using TLS/HTTPS encryption
• Access controls and authentication for all systems
• Regular security reviews and updates

While we strive to protect your personal information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Your Rights and Choices

9.1 All Users

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Delete your account and all associated data through the app settings
• Portability: Request your data in a portable format

9.2 European Users (GDPR)

If you are in the European Economic Area, you have additional rights under GDPR:

• Right to restrict processing of your data
• Right to object to processing based on legitimate interests
• Right to lodge a complaint with your local data protection authority

Our legal basis for processing your data is: (a) your consent, (b) performance of our contract with you, and (c) our legitimate interests in operating and improving the Service.

9.3 California Residents (CCPA)

California residents have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

9.4 Canadian Users (PIPEDA)

Under Canada's Personal Information Protection and Electronic Documents Act, you have the right to access, correct, and challenge the accuracy of your personal information. Contact us to exercise these rights.

10. Children's Privacy

AccessEd is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover we have collected information from a child under 13, we will delete it promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than Canada, including the United States, where our service providers are located. These countries may have different data protection laws. By using our Service, you consent to such transfers. We ensure appropriate safeguards are in place to protect your data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new policy on this page with an updated "Last updated" date
• Sending you an email notification for significant changes

Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us