Privacy
Policy.

Last updated: August 3, 2026  ·  Effective: June 10, 2026

1. Who We Are

PeakScore is an academic organizer for students. It keeps your classes, homework, tests and grades in one merged day, with Google Classroom, Google Drive and SAT prep as optional add-ons you can connect or turn on if you want them. This Privacy Policy describes how PeakScore ("we," "us," or "our") collects, uses, and protects your personal information when you use our website at www.peakscore.com.br.

For privacy inquiries, contact us at: peakscore2026@gmail.com

2. Information We Collect

2.1 Information you provide directly

• Account information: name, email address, profile picture (if signing in with Google)
• Email preferences and send history: whether you chose to receive study emails, when you made that choice, and when you turned them off if you later do. We also keep a record of which study emails we have already sent you and when, so that we never send you the same one twice.
• Notification subscription: if you turn on the daily reminder, we store the subscription your browser creates for it. That subscription is a web address issued by your browser's own push service, plus two keys used to encrypt each notification so that only your device can read it. It identifies that one browser on that one device, not you by name, and we also record when you turned the reminder on or off and a note of the days we sent one, so that you never get two in a day.
• Files you upload: if you use Files, we store what you put there. This is usually photographs of your own marked work, mark schemes, drafts and feedback, so it can contain your name, your handwriting, your grades and a teacher's comments, and sometimes another student's name where it happens to appear on the page. You choose every one of these files. Getting to them goes through your account: nobody else can browse or list them. Each file also has its own private web address, long and unguessable, which we store only inside your own account. As with a link from any cloud drive, anyone you deliberately send that address to could open that one file. Deleting your account deletes all of them.
• Google Drive (optional): if you choose to connect Google Drive, PeakScore creates a folder called PeakScore in your Drive and can read, add to, rename and trash only the files it created there. It cannot see, list or open anything else in your Drive. The files stay in your own Google account, not on our servers, and disconnecting or deleting your PeakScore account leaves them exactly where they are. You can revoke our access at any time at myaccount.google.com/permissions.
• Academic profile: current SAT score, target SAT score, target universities, school name, grade, country, and city
• School organizer data (optional): school days and hours, outside activities, subjects and their languages, planned tests and study blocks, checkpoint notes, and target/actual grades, used only to build your plan and show your progress
• Academic terms: the term structure you choose (semesters, trimesters, bimesters, or your own), and the start and end date of each term, used to organize your classes and to know when to ask you to review them
• Breaks and vacations: the date ranges you mark as time off and whether you chose to keep studying during them, used to pause your plan and to avoid counting those days as missed study
• Grade history: a snapshot of your grade average taken when each term closes, kept so you can see your own progress across terms
• Study preferences: weekly study hours, preferred study days, weak subject areas, study style, and learning resources
• Progress data: completed study sessions, practice test scores, error log entries, and notes
• Chosen SAT date: the official CollegeBoard test date you select during onboarding
• Study profile: your selected intensity level (Intensive, Moderate, or Steady) and the history of any profile changes you make over time
• Mood check-in: optional daily mood selections (e.g., motivated, tired, anxious) recorded after study sessions to help us tailor encouragement and pacing
• Topic mastery scores: per-topic performance data generated from Daily Checkpoints, tracking your estimated mastery percentage for each SAT skill area
• Daily Checkpoint results: question-by-question answers and scores from in-app practice questions used to assess readiness and adapt your schedule
• Adaptive engagement data: internally computed signals (e.g., consistency score, dedication level) derived from your session completion patterns, used to personalize motivational content and schedule adjustments
• Badge and streak progress: records of earned achievement badges and study streak milestones within the app

2.2 Information collected automatically

• Usage analytics: pages visited, time on site, clicks, and navigation paths (via Google Analytics, only with your consent)
• Device information: browser type, operating system, screen size, and language preference
• IP address: used for geographic analytics only; not stored individually

2.3 Information from third parties

• Google Sign-In: if you use Google OAuth, we receive your name, email, and profile picture from Google
• Google Classroom (optional): only if you choose to connect it. With your permission we read, on a read-only basis, the names of your active courses and the title and due date of published assignments in them. We use this for one purpose: to place that work into your PeakScore plan. We do not read your submissions, grades, files, messages, or anything belonging to your classmates, and we never write anything back to Classroom. You can disconnect at any time from the School page, which also removes the imported assignments from your plan.
• College Scorecard API: we query the US Department of Education API using your university search terms to provide institution data

2.4 How we treat Google user data

PeakScore's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Concretely, this means we use Google Classroom and Google Drive data only to provide and improve the features you asked for, we do not sell it, we do not transfer it to third parties except as needed to provide the service or where required by law, we do not use it for advertising, and no human reads it except where you have given explicit permission, where it is necessary for security purposes, or where the law requires it.

3. How We Use Your Information

We use your information exclusively to:

• Build and display your merged day of classes, homework, tests, and study sessions
• Place homework and due dates into your schedule and build an automatic prep plan for each test
• Track your grades across terms and, if you use the SAT, your practice scores and target universities over time
• Sync assignments from Google Classroom into your plan when you connect it
• Personalize session content, topic ordering, and resource recommendations
• Send you important service-related communications (no marketing without consent)
• Improve the platform based on aggregated, anonymized usage patterns

We do not use your information to: sell it to third parties, display targeted advertisements, build profiles for marketing purposes, or share it with any party other than as described in Section 4.

4. Data Sharing

We share personal data only with:

• Google Firebase / Firestore: used to store your account data securely in the cloud, enabling multi-device access and account recovery. Data is stored in Google's servers under Google's security standards.
• Google Analytics: anonymized usage data only, and only with your explicit consent via our cookie banner. You can opt out at any time.
• Vercel: our hosting provider processes requests to serve the website. Vercel may collect standard server logs (IP, timestamp, requested URL).
• Resend: our email delivery provider. It receives your email address and the content of the emails we send you, so that account emails such as address verification, and the study emails you opted into, reach your inbox. Resend acts only on our instructions and is not permitted to use your address for its own purposes.
• Your browser's push service (Google for Chrome and Android, Apple for Safari and iPhone, Mozilla for Firefox): if you turn on the daily reminder, this service relays each notification to your device. It receives the subscription address, but the contents of every notification are encrypted with keys only your device holds, so the service cannot read what a reminder says. We do not choose this company; it is whichever one your browser uses, and turning the reminder off ends the relationship.
• Google Firebase Storage: where the files you upload are actually kept. The same company already listed above for your account data, under the same security standards. Access is restricted to your own verified account by server-side rules, so no other student can reach your files even if they know their address.

We do not sell, rent, or trade your personal information to any third party under any circumstances.

5. Data Storage and Security

Your data is stored in two places:

• Your browser (localStorage): study progress and preferences are cached locally for fast, offline access
• Google Firestore: your profile and progress are synced to the cloud for account recovery and multi-device access

We implement industry-standard security measures including HTTPS-only access, secure headers (HSTS, X-Frame-Options, X-Content-Type-Options), and access controls on our database. However, no method of transmission over the internet is 100% secure.

6. Your Rights (LGPD / GDPR)

Depending on your location, you have the following rights regarding your personal data:

• Right of access: request a copy of all data we hold about you
• Right of rectification: correct inaccurate or incomplete data
• Right of erasure ("right to be forgotten"): request deletion of your account and all associated data
• Right of portability: download your data in a machine-readable format (available in your dashboard under Settings → Export Data)
• Right to withdraw consent: withdraw analytics consent at any time via the cookie preference link in our footer, and withdraw your consent to study emails at any time via the unsubscribe link at the bottom of every one of those emails, and withdraw your consent to the daily reminder at any time from Settings in the app
• Right to object: object to any processing of your data

To exercise any of these rights, email peakscore2026@gmail.com. We will respond within 15 business days.

7. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, we will permanently delete all associated data within 30 days, except where retention is required by applicable law.

Analytics data (Google Analytics) is retained for 14 months per Google's standard settings, after which it is automatically deleted.

Grade history snapshots are kept for as long as your account is active, because their whole purpose is to show you your progress over time. You can delete them at any point from the School page without deleting the rest of your account. Assignments imported from Google Classroom are removed as soon as you disconnect Classroom.

8. Cookies

We use one category of cookies:

• Analytics cookies (Google Analytics): used to understand how users navigate the site. These are only placed with your explicit consent. You can withdraw consent at any time by clicking "Cookie preferences" in the footer.

We do not use advertising, tracking, or social media cookies.

9. Children's Privacy

PeakScore is designed for students aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately and we will delete that information.

For users between 13 and 18 years of age, we recommend that a parent or guardian review this policy. Parental consent may be required in certain jurisdictions.

10. International Data Transfers

PeakScore is operated from Brazil and primarily serves students worldwide. Your data may be transferred to and processed in Google's servers, which may be located in the United States or other countries. Google maintains appropriate data protection safeguards as described in its Privacy Policy.

11. Legal Basis for Processing (LGPD / GDPR)

We process your personal data under the following legal bases:

• Contract performance: processing necessary to provide the academic organizer, and the optional SAT planning, that you signed up for
• Consent: analytics cookies (you can withdraw at any time)
• Consent: study emails, if you chose to receive them. These are a weekly recap of your own week and occasional encouragement. You can withdraw this consent at any time using the unsubscribe link at the bottom of every one of those emails, or by emailing us. Withdrawing stops the study emails and changes nothing else about your account; we may still send you essential service messages, such as email verification.
• Consent: the daily reminder, if you turned it on. This is one notification each morning telling you what is already on your plan for the day, and nothing else. It is a separate choice from study emails, and your browser also asks you for permission before the first one. You can withdraw at any time from Settings inside the app, or in your browser's own notification settings, and withdrawing changes nothing else about your account.
• Legitimate interests: security, fraud prevention, and improving our service through aggregated analytics

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify users by email. Your continued use of PeakScore after any changes constitutes your acceptance of the updated policy.

13. Contact and DPO

For any privacy-related questions, data requests, or complaints, please contact us:

• Email: peakscore2026@gmail.com
• Response time: within 15 business days

If you are located in the European Economic Area and have concerns about our data processing that we have not adequately addressed, you have the right to lodge a complaint with your local data protection authority.