Introduction
Welcome to EduTrace ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience on our educational platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at edutrace.app (the "Service").
By using EduTrace, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.
Information We Collect
2.1 Information You Provide
We collect information you directly provide when you:
- Create an account: Name, email address, username, password, and grade level
- Update your profile: Profile picture, bio, and preferences
- Use our features: Notes, todos, calendar events, and quiz responses
- Contact us: Messages, feedback, and support requests
- Use TraceAI: Chat messages and queries
2.2 Information Collected Automatically
When you use our Service, we automatically collect:
- Device information: Browser type, operating system, device type, screen resolution
- Usage data: Pages visited, features used, time spent on the platform, click patterns
- Log data: IP address, access times, referring URLs, error logs
- Location data: Approximate location based on IP address (country, city, region)
- Session data: Login/logout times, active sessions, session duration
- Performance data: Page load times, feature usage statistics
Keyboard Events: We capture keyboard shortcuts (e.g., Ctrl+K for search) for navigation purposes only. We do NOT monitor, record, or transmit your actual keystrokes or typed content beyond these specific shortcuts. Your notes, messages, and other content are only stored when you explicitly save or send them.
How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve our educational services
- Create and manage your account
- Personalize your learning experience
- Track your progress and provide relevant recommendations
- Send important notifications (verification emails, updates, security alerts)
- Respond to your inquiries and support requests
- Analyze usage patterns to improve our platform
- Prevent fraud and enhance security
- Comply with legal obligations
Data Storage and Security
Your data is stored securely on MongoDB Atlas servers with industry-standard encryption. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
Security measures include:
- Encrypted data transmission (HTTPS/TLS 1.3)
- Secure password hashing (bcrypt with salt)
- JWT-based authentication with secure tokens and expiration
- Regular security audits and vulnerability assessments
- Access controls and multi-factor authentication for admins
- Rate limiting to prevent brute force attacks
- Account lockout after multiple failed login attempts
- Automated backup systems with encryption at rest
Important: While we implement strong security measures, no system is 100% secure. You are responsible for maintaining the security of your account credentials and should never share your password. Report any suspected security breaches immediately to security@edutrace.app.
Sharing of Information
We do NOT sell, rent, or trade your personal information. We may share your information only in these limited cases:
- Service providers: With trusted third-party services that help us operate (e.g., cloud hosting, email delivery). These providers are contractually obligated to protect your data.
- Legal requirements: When required by law, court order, or governmental request, or to protect our rights, property, or safety
- With your consent: When you explicitly agree to share information with specific third parties
- Aggregated data: Non-identifiable, anonymized, aggregated statistics for research and analytics
- Business transfers: In case of merger, acquisition, or sale of assets, with advance notice to you
Third-Party Services We Use:
- MongoDB Atlas: Database hosting (data encrypted at rest and in transit)
- Cloudflare R2: File storage for avatars and uploads
- Vercel: Website hosting and CDN
- Resend: Transactional email delivery
- Google Gemini AI: AI chat assistant (conversations may be processed by Google)
AI Data Processing: When you use TraceAI, your messages are sent to Google Gemini API for processing. Google may use this data to improve their AI models. Do not share sensitive personal information in AI conversations.
Cookies and Tracking Technologies
We use cookies and similar technologies for:
- Essential cookies: Required for authentication, security, and basic functionality (cannot be disabled)
- Preference cookies: Remember your settings (theme, language, layout preferences)
- Analytics cookies: Understand how users interact with our platform to improve user experience
- Session cookies: Maintain your login state and active session
We do NOT use:
- Third-party advertising cookies
- Cross-site tracking
- Social media tracking pixels
- Behavioral profiling for marketing
You can control cookies through your browser settings. However, disabling essential cookies will prevent you from logging in and using core features of our Service.
Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data
- Data portability: Receive your data in a portable format
- Withdraw consent: Opt out of optional data processing
- Objection: Object to certain data processing activities
To exercise these rights, please contact us at privacy@edutrace.app or use the account settings in your profile.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where we need to retain it for legal purposes.
Certain data may be retained longer:
- Transaction records (for legal compliance)
- Anonymized analytics data
- Backup copies (deleted within 90 days)
Children's Privacy
EduTrace is designed for high school students (grades 10-12) and graduated alumni. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
International Data Transfers
Your information may be transferred to and processed in countries other than Egypt. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
- Email: privacy@edutrace.app
- Contact Form: edutrace.app/contact