Privacy Policy

Last updated: September 2026

SharpMind (“we,” “our,” or “us”) is committed to protecting the privacy of our users, particularly students. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the SharpMind platform.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and optionally your role (student, parent, teacher). We use Supabase Authentication for secure credential management.

Academic Data

As you use SharpMind, we collect academic interaction data including: assessment responses, practice session results, study time logs, mistake records, and revision activity. This data powers your Student Model and is essential for adaptive learning to work.

Usage Data

We collect anonymised analytics data such as page views, feature usage patterns, and device information to improve the platform. We use privacy-respecting analytics tools.

2. How We Use Your Information

  • Adaptive Learning: Your academic data powers your personalised Student Model, which drives adaptive learning paths, smart assessments, and revision scheduling.
  • Platform Improvement: Anonymised, aggregated data helps us improve features, content quality, and learning outcomes.
  • Communication: We use your email to send essential account notifications. Marketing emails are only sent with explicit opt-in consent.

3. Student Data Protection

We treat student academic data as highly sensitive personal information. Our commitments:

  • Student data is private and isolated — each student's data is logically separated and inaccessible to other users.
  • We never sell student data to third parties.
  • Parent and teacher access to student data requires explicit student authorization.
  • AI models do not train on individual student data without anonymisation.
  • Academic data is not used for advertising purposes.

4. Data Sharing

We do not share your personal data with third parties except:

  • Service Providers: Infrastructure providers (Supabase, Vercel) who process data on our behalf under strict data processing agreements.
  • Legal Requirements: When required by law or to protect our rights.
  • With Your Consent: Parent/teacher access is granted only through explicit student authorization flows.

5. Data Retention

We retain your academic data for as long as your account is active. You can request data export or deletion at any time. Upon account deletion, all personal and academic data is permanently removed within 30 days.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, regular security audits, and secure credential management through Supabase Auth.

7. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Withdraw consent for optional processing
  • Object to data processing

8. Cookies

We use essential cookies for authentication and preferences. See our Cookie Policy for details.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use after changes constitutes acceptance.

10. Contact Us

For privacy inquiries, data requests, or concerns, contact us at privacy@sharpmind.app or visit our Contact page.