Privacy
Policy.

Last updated: June 10, 2026  ·  Effective: June 10, 2026

1. Who We Are

PeakScore is an educational technology platform that provides personalized SAT preparation tools. This Privacy Policy describes how PeakScore ("we," "us," or "our") collects, uses, and protects your personal information when you use our website at www.peakscore.com.br.

For privacy inquiries, contact us at: peakscore2026@gmail.com

2. Information We Collect

2.1 Information you provide directly

• Account information: name, email address, profile picture (if signing in with Google)
• Academic profile: current SAT score, target SAT score, target universities, school name, grade, country, and city
• Study preferences: weekly study hours, preferred study days, weak subject areas, study style, and learning resources
• Progress data: completed study sessions, practice test scores, error log entries, and notes
• Chosen SAT date: the official CollegeBoard test date you select during onboarding

2.2 Information collected automatically

• Usage analytics: pages visited, time on site, clicks, and navigation paths (via Google Analytics, only with your consent)
• Device information: browser type, operating system, screen size, and language preference
• IP address: used for geographic analytics only; not stored individually

2.3 Information from third parties

• Google Sign-In: if you use Google OAuth, we receive your name, email, and profile picture from Google
• College Scorecard API: we query the US Department of Education API using your university search terms to provide institution data

3. How We Use Your Information

We use your information exclusively to:

• Generate and display your personalized SAT study schedule
• Track your study progress and score improvement over time
• Personalize session content, topic ordering, and resource recommendations
• Display your target universities on the interactive map
• Send you important service-related communications (no marketing without consent)
• Improve the platform based on aggregated, anonymized usage patterns

We do not use your information to: sell it to third parties, display targeted advertisements, build profiles for marketing purposes, or share it with any party other than as described in Section 4.

4. Data Sharing

We share personal data only with:

• Google Firebase / Firestore: used to store your account data securely in the cloud, enabling multi-device access and account recovery. Data is stored in Google's servers under Google's security standards.
• Google Analytics: anonymized usage data only, and only with your explicit consent via our cookie banner. You can opt out at any time.
• Vercel: our hosting provider processes requests to serve the website. Vercel may collect standard server logs (IP, timestamp, requested URL).

We do not sell, rent, or trade your personal information to any third party under any circumstances.

5. Data Storage and Security

Your data is stored in two places:

• Your browser (localStorage): study progress and preferences are cached locally for fast, offline access
• Google Firestore: your profile and progress are synced to the cloud for account recovery and multi-device access

We implement industry-standard security measures including HTTPS-only access, secure headers (HSTS, X-Frame-Options, X-Content-Type-Options), and access controls on our database. However, no method of transmission over the internet is 100% secure.

6. Your Rights (LGPD / GDPR)

Depending on your location, you have the following rights regarding your personal data:

• Right of access: request a copy of all data we hold about you
• Right of rectification: correct inaccurate or incomplete data
• Right of erasure ("right to be forgotten"): request deletion of your account and all associated data
• Right of portability: download your data in a machine-readable format (available in your dashboard under Settings → Export Data)
• Right to withdraw consent: withdraw analytics consent at any time via the cookie preference link in our footer
• Right to object: object to any processing of your data

To exercise any of these rights, email peakscore2026@gmail.com. We will respond within 15 business days.

7. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, we will permanently delete all associated data within 30 days, except where retention is required by applicable law.

Analytics data (Google Analytics) is retained for 14 months per Google's standard settings, after which it is automatically deleted.

8. Cookies

We use one category of cookies:

• Analytics cookies (Google Analytics): used to understand how users navigate the site. These are only placed with your explicit consent. You can withdraw consent at any time by clicking "Cookie preferences" in the footer.

We do not use advertising, tracking, or social media cookies.

9. Children's Privacy

PeakScore is designed for students aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately and we will delete that information.

For users between 13 and 18 years of age, we recommend that a parent or guardian review this policy. Parental consent may be required in certain jurisdictions.

10. International Data Transfers

PeakScore is operated from Brazil and primarily serves students worldwide. Your data may be transferred to and processed in Google's servers, which may be located in the United States or other countries. Google maintains appropriate data protection safeguards as described in its Privacy Policy.

11. Legal Basis for Processing (LGPD / GDPR)

We process your personal data under the following legal bases:

• Contract performance: processing necessary to provide the personalized study schedule service you signed up for
• Consent: analytics cookies (you can withdraw at any time)
• Legitimate interests: security, fraud prevention, and improving our service through aggregated analytics

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify users by email. Your continued use of PeakScore after any changes constitutes your acceptance of the updated policy.

13. Contact and DPO

For any privacy-related questions, data requests, or complaints, please contact us:

• Email: peakscore2026@gmail.com
• Response time: within 15 business days

If you are located in the European Economic Area and have concerns about our data processing that we have not adequately addressed, you have the right to lodge a complaint with your local data protection authority.