Privacy Policy

1. Introduction

QtpiAI is operated by KaizenX Technology Inc. ("we," "us," or "our"). We operate an online math contest preparation platform designed to help students prepare for Waterloo CEMC math competitions including Gauss, Pascal, Cayley, and Fermat contests.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, mobile applications, and related services (collectively, the "Service").

QtpiAI accounts are held by parents and legal guardians. A student practises through a child profile that a parent creates and controls. Section 6 describes parent-owned child profiles, and Section 7 is our children's privacy notice.

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Password (handled by our authentication provider)
• Display name
• Grade level
• Target contest(s) you are preparing for

2.2 Usage and Performance Data

As you use our Service, we collect:

• Practice question attempts and answers selected
• Time spent on questions and study sessions
• Accuracy rates and performance metrics
• Topic-level accuracy and progress over time
• Contest practice history and scores

2.3 AI Conversation Data

When you interact with our AI tutor, we collect and store:

• Chat messages you send to the AI tutor
• AI tutor responses
• The specific question context associated with each conversation

2.4 Payment Information

Payments are processed by Stripe, which handles your card details. We receive from Stripe:

• Subscription status and plan type
• Billing cycle dates
• Transaction history (amounts and dates)
• Last four digits of payment card (for display purposes only)

2.5 Family Plan Information

A Family plan lets one account holder pay for up to three learners, each on a linked account or, where child profiles are available, on a child profile under the holder's own account. A linked account is held by its own account holder, and the plan holder manages links and child profiles in Settings. If you pay for a Family plan, or join one, we store the link between the accounts. For each plan we record:

• Which account pays for the plan, and which accounts are members of it
• The date each account joined the plan
• The email address the payer entered to send an invitation, and the account it matched
• Which account sent each invitation, when it was sent, and when it expires
• The status of each invitation (pending, accepted, declined, cancelled, or expired) and the date that status last changed

We keep an invitation record after it is declined, cancelled, or expired, so that we can answer a later question about who invited whom. Joining a Family plan does not copy, move, or merge the practice history, progress, or AI tutor conversations of any account. Section 5.5 states what each person on a plan can see.

2.6 Automatically Collected Information

When you access our Service, we automatically collect:

• Device information (browser type, operating system, device type)
• IP address and approximate geographic location
• Pages visited and features used
• Referring website or source
• Date and time of access
• Cookies and similar tracking technologies

We also collect product analytics: which page or feature was opened, recorded as a page PATTERN such as /practice/[id]. Every visitor sends these events, including a visitor who is not signed in. Our analytics provider stores a first-party cookie that holds a random device identifier, so repeat visits from the same browser can be counted. Events are anonymous until the account holder signs in, after which we may attach them to the account identifier.

We use Sentry for error monitoring and session replay to diagnose problems and understand how the app is used.

2.7 Child Profile Information

A parent can create a child profile so that a student can practise. For each child profile we collect the display name and the username the parent chooses, the password the parent sets, the grade or level the parent declares, the student's practice history, and the student's messages to the AI tutor. A child profile has no email address. Section 6 describes parent-owned child profiles, and Section 7 is our children's privacy notice.

3. How We Use Your Information

We use the information we collect to:

3.1 Provide and Improve Our Service

• Create and manage your account
• Deliver practice questions and contest preparation materials
• Power our AI tutor to provide personalized explanations
• Track your progress and generate performance analytics
• Improve our question database and learning algorithms
• Measure which features are used and where accounts encounter difficulty, so we can fix and improve the Service

3.2 Personalize Your Experience

• Recommend practice questions based on your performance
• Identify topics that need more practice
• Adapt difficulty levels to your skill level
• Provide targeted feedback and study suggestions

3.3 Process Payments

• Process subscription payments through Stripe
• Manage subscription status and billing cycles
• Send payment receipts and invoices
• Manage Family plan invitations and links, and apply the paid features of a Family plan to each account on it

3.4 Communicate With You

• Send essential account notifications (password resets, security alerts)
• Provide subscription and billing information
• Respond to your support requests
• Send important service updates
• Send progress reports and practice reminders to a parent or guardian

3.5 What We Do Not Do

• We do not sell personal information
• We do not show advertising to children

A child profile is not a separate account holder. It belongs to the parent account that created it, and the parent who holds that account can see the student's information (Section 6).

4. AI Tutor

Our AI tutor is powered by Anthropic's Claude API. Here is important information about how it works:

4.1 Conversation Storage

Your conversations with the AI tutor are stored in our database and are tied to specific practice questions. This allows you to revisit explanations and continue conversations where you left off.

4.2 Quality Improvement

We may review AI tutor conversations to improve the quality of explanations and identify areas where the AI can be enhanced.

4.3 AI-Generated Content

Responses from the AI tutor are generated by artificial intelligence and are not reviewed by humans in real-time. While we strive for accuracy, AI responses may occasionally contain errors. The AI tutor is designed to assist with learning, not to replace professional tutoring or guarantee specific contest results.

4.4 Data Sent to Anthropic

When you use the AI tutor, your messages and the relevant question context are sent to Anthropic's servers in the United States for processing. Anthropic's privacy practices are governed by their own privacy policy. We have agreements in place to protect your data.

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

We share your information with the following third-party service providers who help us operate our Service:

• Supabase: database hosting and sign-in (servers in the United States and Canada). Receives account information, practice history, and AI tutor conversations, including those of a child profile.
• Anthropic: the AI tutor, through the Claude API (United States). Receives the message a student types, the question or lesson card it is about, and the recent turns of that conversation.
• Vercel: website hosting and delivery (global edge network). Receives the requests our site serves.
• Sentry: error monitoring and session replay (United States). Receives error reports and recorded sessions from the Service.
• PostHog: product analytics, meaning which page pattern or feature was opened and how often (United States).
• Stripe: payment processing (PCI-DSS compliant). Receives the billing email, the payment details the parent enters, and the plan.
• Resend: sending email (United States). Receives the parent's email address and the message we send to it.

These providers are contractually obligated to protect your data and may only use it to provide services to us.

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, such as:

• Court orders or subpoenas
• Government or law enforcement requests
• To protect our rights, privacy, safety, or property
• To investigate potential violations of our Terms of Service

5.3 Business Transfers

If QtpiAI is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service before your information becomes subject to a different privacy policy.

5.4 No Sale of Personal Data

We do not sell personal information.

5.5 Information Shared Between Linked Accounts on a Family Plan

A Family plan covers up to three learners, each on a linked account or, where child profiles are available, on a child profile under the plan holder's own account. This section is about the linked accounts, which are held by their own account holders; child profiles are covered by Section 6. Between the accounts on a plan:

• The payer sees, for each member: the member's display name, the email address the payer used to invite them, whether the invitation is pending or accepted, and the date the member joined.
• A member sees, of the payer: the payer's display name only.
• A member sees, of another member: nothing. Members are not shown to each other.

Paying for a linked account does not give the payer access to that account or to the data in it. A parent or guardian who wants to see a student's work day to day creates a child profile on their own account (Section 6), and may use the rights in Section 9 for information held elsewhere.

When an account leaves a Family plan, or is removed from it, the payer stops seeing that account's display name and email address, and that account stops seeing the payer's display name. The record that the link existed remains, as described in Section 2.5.

6. Parent-Owned Child Profiles and Parent Reports

A QtpiAI account is held by a parent or legal guardian, who creates a child profile for each student in the family. The student signs in to that profile with a username and a password the parent sets.

The parent or guardian who holds the account can view all information in the child profiles under that account, including practice activity and progress.

A parent or guardian may receive progress reports and practice reminders by email, and can turn them off in Settings.

6.1 Team Streaks With Friends

A student may keep a shared streak with up to three teammates. Teammates are added by friend code: one student enters the other student's code, and the teammate takes effect only when that other student accepts. A teammate is another child profile.

While a parent leaves Team streaks with friends on, the teammates a student has accepted can see the display name the parent chose, whether the student practised today, and the shared streak count. A student can send a teammate one encouragement a day, chosen from a fixed list of phrases we wrote.

A parent can remove any teammate, or switch Team streaks with friends off altogether, at any time in Settings.

7. Children's Privacy

We handle a child's personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act.

A parent or legal guardian creates and controls the account. A child profile holds a display name, a username, a grade or level and practice activity, and no email address. Section 2.7 describes what we collect through a child profile.

A parent or guardian can review, correct, or delete a child profile and the information in it in Settings, or by emailing support@qtpi.ai.

8. Data Retention

We keep personal information for as long as your account is active and afterwards for as long as needed for the purposes described in this policy, to meet our legal, accounting and tax obligations (for example, records that Canadian tax law requires us to keep for six years after the end of the tax year they relate to), to resolve disputes and to enforce our agreements. You can ask us to delete your account and personal information by emailing support@qtpi.ai; we may keep what the law requires us to keep.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information. A parent exercises these rights on behalf of each student on the account, and Section 7 states how.

9.1 Right to Access

You can request a copy of the personal information we hold about you.

9.2 Right to Correction

You can request that we correct inaccurate or incomplete personal information. You can also update most of your information directly in your account settings.

9.3 Right to Deletion

You can request deletion of your account and personal information. You can also delete your account directly from your account settings.

9.4 Right to Data Portability

You can request an export of your data in a commonly used, machine-readable format.

9.5 Right to Withdraw Consent

Where we rely on consent to process your data, you can withdraw that consent at any time.

9.6 How to Exercise Your Rights

To exercise any of these rights, please contact us at the email address below. We will respond to your request within 30 days. We may need to verify your identity before processing certain requests.

9.7 Complaints

If you have concerns about how we handle your data, you may file a complaint with us. Canadian users may also file a complaint with the Office of the Privacy Commissioner of Canada. Users in other jurisdictions may contact their local data protection authority.

10. Security

We use reasonable safeguards appropriate to the sensitivity of the information we hold.

No method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. International Users

QtpiAI is operated from Canada. If you access our Service from outside Canada, please be aware that your information may be transferred to, stored, and processed in Canada and the United States, where our servers and third-party service providers are located.

By using our Service, you consent to the transfer of your information to these countries, which may have different data protection laws than your country of residence.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.

When we make changes:

• We will update the "Last updated" date at the top of this page
• For significant changes, we will notify you via email or a prominent notice on our Service
• We encourage you to review this policy periodically

Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For Canadian users with unresolved privacy concerns, you may also contact the Office of the Privacy Commissioner of Canada: