Privacy Policy

Last Updated: September 21, 2026

Frisco Educational Ventures LLC ("Company," "we," "us," or "our"), a Texas limited liability company, operates the ScholarTree application, website, and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.

PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY ACCESSING OR USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS PRIVACY POLICY. IF YOU DO NOT AGREE, PLEASE DO NOT ACCESS OR USE THE SERVICE.

1. Information We Collect

We collect the following categories of information:

A. Information You Provide Directly

• Account Information: Name, email address, password, date of birth, education level, and account role (student, parent, teacher, school administrator)
• Profile Information: School affiliation, grade level, subjects of interest, and other educational preferences. Optional learning-needs notes may describe learning accommodations or disabilities that you, a parent, guardian, or teacher choose to share. Relevant notes personalize tutoring and may be included in context sent to the AI provider serving that feature. You do not need to provide medical records
• User Content: Study materials, notes, flashcards, assignments, quiz responses, essay submissions, and other content you create or upload
• Communication Data: Chat messages with the AI tutor, feedback submissions (including tutoring-session ratings and any reason or comment you provide with them), and support inquiries
• Payment Information: Subscription status, purchase and entitlement records, credit balances and usage, and billing details processed through third-party payment processors (we do not store complete payment card information). Native checkout is disabled in the current iOS and Android release; those apps can still use existing account credits and entitlements
• Parental Consent Information: Parent or guardian contact information and consent records for child accounts

B. Information Collected Automatically

• Usage Data: Features accessed, session duration, interaction patterns, learning progress, and performance metrics
• Device Information: Device type, operating system, browser type, screen resolution, and unique device identifiers
• Log Data: IP address, access times, pages viewed, referring URLs, and error logs
• Cookies and Similar Technologies: Session cookies, preference cookies, and analytics trackers (see Section 10)

C. Audio Data

If you use voice features (e.g., the voice tutor), audio — including the learner's voice — is transmitted in real time to our AI service providers for processing. These currently include OpenAI and Google Gemini; we select the provider for each session. When session recording is enabled, recordings are stored securely for parent or guardian review. Stored voice-session and reading-practice recordings are retained for up to 30 days and then automatically deleted. Voice-session recordings can be deleted sooner from session history; recordings are also removed during account deletion. Transcriptions may be retained as part of chat history for session continuity.

D. Information from Third Parties

• Schools and Teachers: Class rosters, student assignments, and educational materials shared through the Service
• Authentication Providers: If you sign in using a third-party service (e.g., Google), we receive your name, email address, and profile picture as authorized by your privacy settings with that provider

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, operate, and personalize the AI tutoring experience and educational tools
• Learning Analytics: To track learning progress, generate study analytics, and provide performance reports to students, parents, teachers, and schools
• Account Management: To create and manage user accounts, including managed child and student accounts
• Parental and School Monitoring: To enable parent, teacher, and school administrator oversight and monitoring features
• Communications: To send important account notifications, security alerts, and service updates
• Payment Processing: To process credit purchases, subscriptions, and billing
• Service Improvement: To analyze usage patterns, diagnose technical issues, and improve the Service. When you rate a tutoring session and provide a reason or comment, we retain that feedback and may review it — including through automated analysis — with the associated session content to identify problems and improve tutoring quality
• Safety and Security: To detect, prevent, and address fraud, abuse, security incidents, and technical issues
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests

We will not use your information for purposes materially different from those described in this Privacy Policy without providing you with notice and, where required by law, obtaining your consent.

3. How We Share Your Information

WE DO NOT SELL YOUR PERSONAL INFORMATION.

We may share your information in the following circumstances:

A. Within the Educational Ecosystem

• Parents and Guardians: Parents and guardians can view their children's learning activity, AI tutor chat history, progress reports, and usage data
• Teachers and Schools: Teachers and school administrators can view student progress, assignment data, quiz results, and usage analytics for students enrolled in their classes or institution
• Students: Students may see limited information about their teachers and classmates as necessary for the educational experience (e.g., class membership, assignment details)

B. Service Providers

We share information with third-party service providers who perform services on our behalf, subject to contractual obligations to protect your data:

• Firebase / Google Cloud Platform (Google LLC): Authentication, database hosting, cloud functions, storage, and analytics
• OpenAI (OpenAI, L.L.C.): AI-powered tutoring, content generation, and natural language processing (chat messages, selected homework images, relevant learning-profile context, voice audio and audio transcriptions are sent to OpenAI for processing for features using it)
• Google Gemini (Google LLC): AI-powered voice tutoring and natural language processing. For sessions served by this provider, the learner's voice audio, related session text and relevant learning-profile context are sent to Google for real-time processing. This is separate from Firebase infrastructure. Google's privacy policy: https://policies.google.com/privacy
• Payment Processors: Payment processing and subscription management
• Cloud Infrastructure: Hosting, content delivery, and server infrastructure

C. Legal and Safety Disclosures

We may disclose your information if we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or governmental request
• Enforce our Terms of Service or other agreements
• Protect the rights, property, or safety of the Company, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues

D. Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, asset sale, or similar transaction, your information may be transferred as part of such transaction. We will notify you via email and/or a prominent notice within the Service of any change in ownership or uses of your personal information.

4. Children's Privacy (COPPA Compliance)

ScholarTree is designed for students ages 6 and up, including children ages 6 through 12. We are committed to complying with the Children's Online Privacy Protection Act ("COPPA") and other applicable children's privacy laws.

A. Parental and School Consent

• Children under 13 may only use the Service through managed accounts created by a parent, legal guardian, or authorized school official
• Before creating a child's account, the parent, guardian, or school must provide verifiable consent to the collection and use of the child's personal information
• Schools may consent to the collection of student information on behalf of parents solely for educational purposes, as permitted by COPPA

B. Limited Data Collection

• We collect only the information necessary to provide the educational service to children
• We do not require children to disclose more personal information than is reasonably necessary
• We do not use children's personal information for advertising, marketing, behavioral targeting, or any non-educational commercial purpose

C. Parental Rights

Parents and guardians have the right to:

• Review the personal information collected from their child
• Request correction or deletion of their child's personal information
• Refuse to permit further collection or use of their child's information
• Revoke consent at any time by contacting us or deleting the managed account

To exercise these rights, please contact us at privacy@scholartree.app or use the account management features within the Service.

5. Student Education Records (FERPA)

To the extent the Service is used by schools, school districts, or educational institutions and we receive "education records" as defined under the Family Educational Rights and Privacy Act ("FERPA"), we acknowledge and agree to the following:

• We act as a "school official" with a "legitimate educational interest" as those terms are used in FERPA and its implementing regulations
• We are under the direct control of the school with regard to the use and maintenance of education records
• We will use education records solely for the purpose of providing the Service to the school and its authorized users
• We will not disclose education records to any third party except as directed by the school, as required by law, or as otherwise permitted under FERPA
• We will not use education records for any purpose other than providing the Service, including marketing or advertising
• We will maintain the security and confidentiality of education records in accordance with industry-standard practices
• We will cooperate with schools to respond to requests from parents and eligible students to inspect, review, amend, or delete education records
• Upon termination of the school's use of the Service, we will delete or return education records as directed by the school, subject to applicable data retention requirements

6. Data Security

We implement administrative, technical, and physical security measures designed to protect your information, including:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of data at rest in our cloud databases
• Secure cloud infrastructure through Firebase (Google Cloud Platform), and services operated by ScholarTree on our own infrastructure — including the curriculum knowledge graph that stores learning progress and mastery information
• Role-based access controls limiting data access to authorized personnel
• Regular security assessments and monitoring
• Multi-factor authentication options for user accounts
• Secure password hashing

HOWEVER, NO METHOD OF ELECTRONIC TRANSMISSION OR STORAGE IS 100% SECURE. WHILE WE STRIVE TO USE COMMERCIALLY ACCEPTABLE MEANS TO PROTECT YOUR INFORMATION, WE CANNOT GUARANTEE ITS ABSOLUTE SECURITY. You are responsible for maintaining the security of your account credentials and for any activities that occur under your account.

7. Data Retention and Deletion

We retain your information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Active Accounts: We retain your information for as long as your account is active
• Deleted Accounts: Upon account deletion, we will delete or anonymize your personal information within a reasonable timeframe, subject to: (a) applicable legal, regulatory, or compliance obligations; (b) fraud prevention and security purposes; (c) backup and disaster recovery retention cycles
• Managed Child Accounts: When a parent or school deletes a child's managed account, we will delete the child's personal information as described above
• Education Records: For school-related data subject to FERPA, we will follow the school's instructions regarding retention and deletion

You may request deletion of your account and associated data at any time through the account settings in the Service or by contacting us at privacy@scholartree.app.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right of Access: Request a copy of the personal information we hold about you
• Right to Correction: Request correction of inaccurate or incomplete personal information
• Right to Deletion: Request deletion of your personal information, subject to certain exceptions
• Right to Restriction: Request that we restrict the processing of your personal information
• Right to Data Portability: Request a copy of your data in a structured, commonly used, machine-readable format
• Right to Object: Object to the processing of your personal information for certain purposes
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

A. Texas Privacy Rights

If you are a Texas resident, you may have additional rights under the Texas Data Privacy and Security Act (TDPSA), including the right to confirm whether we process your data, access your data, correct inaccuracies, delete your data, and obtain a portable copy of your data. You also have the right to opt out of the processing of your data for targeted advertising, the sale of your data, or profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise these rights, contact us at privacy@scholartree.app.

B. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), including the right to know what personal information we collect, the right to delete your information, the right to opt out of the sale or sharing of your information, and the right to non-discrimination. We do not sell personal information. To exercise your rights, contact us at privacy@scholartree.app.

To exercise any of the above rights, please contact us at privacy@scholartree.app or use the account management features within the Service. We will respond to your request within the timeframe required by applicable law.

9. Third-Party Services

The Service uses the following third-party services, each with their own privacy policies:

• Firebase / Google Cloud Platform (Google LLC): Authentication, database, cloud functions, storage, and analytics. Google's privacy policy: https://policies.google.com/privacy
• OpenAI (OpenAI, L.L.C.): AI-powered tutoring, content generation, and natural language processing. When you interact with features using this provider, your messages, selected homework images, relevant learning-profile context and voice audio are sent to OpenAI for processing. OpenAI's privacy policy: https://openai.com/privacy
• Google Gemini (Google LLC): AI-powered voice tutoring and natural language processing. For sessions served by this provider, the learner's voice audio, related session text and relevant learning-profile context are sent to Google for real-time processing. This is separate from Firebase infrastructure. Google's privacy policy: https://policies.google.com/privacy
• Apple (Apple Inc.): iOS app distribution and platform services. Native checkout is disabled in the current release. Apple's privacy policy: https://www.apple.com/legal/privacy
• Google Play (Google LLC): Android app distribution and platform services. Native checkout is disabled in the current release
• RevenueCat (RevenueCat, Inc.): Subscription and purchase-entitlement integration, involving purchase records and an app-generated user identifier where used. The native purchase SDK is not initialized in the current iOS and Android release. Privacy policy: https://www.revenuecat.com/privacy
• Stripe (Stripe, Inc.): Processes web payments, including credit purchases. Card details are entered with Stripe and are never received or stored by us. Privacy policy: https://stripe.com/privacy
• Supabase (Supabase, Inc.): Hosts referral and affiliate records, not learner work, audio, transcripts or learning progress. Privacy policy: https://supabase.com/privacy

We share only the minimum data necessary for these services to function. We encourage you to review their respective privacy policies. We are not responsible for the privacy practices of any third-party services.

10. Cookies and Tracking Technologies

The Service may use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for the Service to function properly (e.g., authentication, session management)
• Preference Cookies: Store your preferences (e.g., language, theme)
• Analytics Cookies: Help us understand how users interact with the Service to improve functionality and performance

We do not use cookies for advertising or behavioral targeting purposes. You can manage cookie preferences through your browser settings, but disabling essential cookies may affect the functionality of the Service.

Do Not Track: Some browsers offer a "Do Not Track" signal. We currently do not respond to Do Not Track signals, as there is no industry-standard technology for recognizing these signals.

11. International Data Transfers

The Service is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your information to the United States and other jurisdictions that may have different data protection laws than your jurisdiction.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy within the Service and updating the "Last Updated" date, and/or by sending you an email or in-app notification. Your continued use of the Service after the effective date of any modifications constitutes your acceptance of the modified Privacy Policy. If you do not agree, you must discontinue use of the Service.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Frisco Educational Ventures LLC
Texas, USA

Privacy inquiries: privacy@scholartree.app
General inquiries: support@scholartree.app
Legal inquiries: legal@scholartree.app

You may also use the in-app feedback feature to contact us.