Enrolled AngelEnrolled Angel

Privacy Policy

Last updated: February 16, 2025

1. Introduction

Enrolled Angel ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our web application and related services (collectively, "the Service").

2. Information We Collect

2.1 Information You Provide

  • Account information: Email address, name, and profile details provided during registration through our authentication provider (Clerk).
  • Payment information: Billing details processed securely through Stripe. We do not store credit card numbers on our servers.
  • Study data: Practice session responses, notebook entries, and exam attempt records you create while using the Service.

2.2 Information Collected Automatically

  • Usage data: Pages visited, features used, session duration, and interaction patterns.
  • Device information: Browser type, operating system, screen resolution, and device identifiers.
  • Cookies: We use essential cookies for authentication and session management, and optional analytics cookies to improve the Service. See Section 7 for details.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service.
  • Process subscriptions and payments through Stripe.
  • Track your study progress and generate personalized analytics.
  • Send account-related notifications (e.g., subscription confirmations, password resets).
  • Respond to support requests and communicate with you about the Service.
  • Analyze usage patterns to improve features and user experience.
  • Prevent fraud and enforce our Terms of Service.

4. How We Share Your Information

We do not sell your personal information. We may share data with:

  • Service providers: Clerk (authentication), Stripe (payments), and hosting providers who process data on our behalf under strict confidentiality agreements.
  • Legal requirements: When required by law, subpoena, or legal process, or to protect our rights, property, or safety.
  • Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

5. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements).

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS), secure authentication via Clerk, and PCI-compliant payment processing via Stripe. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Cookies

We use the following types of cookies:

  • Essential cookies: Required for authentication, session management, and core functionality. These cannot be disabled.
  • Analytics cookies: Help us understand how visitors interact with the Service. These are optional and can be declined through our cookie consent banner.

You can manage cookie preferences through your browser settings or our cookie consent banner. Disabling essential cookies may prevent you from using certain features.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data, subject to legal retention requirements.
  • Portability: Request your data in a structured, machine-readable format.
  • Opt-out: Opt out of analytics cookies and non-essential data processing.

To exercise these rights, contact us at privacy@enrld.com.

9. Third-Party Services

The Service integrates with third-party services, each with their own privacy policies:

10. Children's Privacy

The Service is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the data promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on the Service. The "Last updated" date at the top reflects the most recent revision.

12. Contact

If you have questions about this Privacy Policy, contact us at privacy@enrld.com.