Privacy Policy
Cognifiy ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your information when you use our service.
1. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Password (stored as a secure hash, never in plain text)
- Optional profile information you choose to provide
Usage Data
When you use Cognifiy, we collect:
- Uploaded images of your work (processed for diagnosis, stored securely)
- Your answers and practice attempts
- Mastery scores and progress data
- Error patterns and weak areas identified
- Session data (timestamps, device type, browser)
Automatic Collection
We automatically collect:
- IP address (for security and rate limiting)
- Browser type and version
- Pages visited and features used
2. How We Use Your Information
We use collected information to:
- Provide and improve our diagnostic learning service
- Generate personalized practice based on your weak areas
- Track your progress and mastery over time
- Send service-related notifications (password resets, important updates)
- Protect against abuse and maintain security
- Improve our algorithms and user experience
3. Image Processing
When you upload images of your work:
- EXIF metadata is stripped immediately upon upload
- Images are stored in private, non-public directories
- File names are randomized to prevent enumeration
- Images are processed to extract mathematical work only
- Old uploads may be automatically deleted after a retention period
4. Data Sharing
We do not sell your personal information. We may share data only in these cases:
- Service providers: Third-party services that help us operate (hosting, email delivery) under strict data processing agreements
- Legal requirements: When required by law or to protect our rights
- With your consent: For any purpose you explicitly approve
5. Data Security
We implement security measures including:
- Encrypted connections (HTTPS) for all data transmission
- Bcrypt password hashing
- CSRF protection on all forms
- Rate limiting to prevent abuse
- Regular security reviews
6. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Export your data
- Withdraw consent where applicable
To exercise these rights, contact us at privacy@cognifiy.com.
7. Data Retention
We retain your data as long as your account is active. If you delete your account:
- Personal information is deleted within 30 days
- Anonymized usage data may be retained for analytics
- Backups are purged according to our backup retention schedule
8. Children's Privacy
Cognifiy is intended for students. If you are under 13 (or under 16 in the EU), you must have parental consent to use our service. We do not knowingly collect information from children without appropriate consent.
9. Changes to This Policy
We may update this policy. Significant changes will be communicated via email or prominent notice on our site. Continued use after changes constitutes acceptance.
10. Contact
For privacy questions or concerns:
- Email: privacy@cognifiy.com
- Contact form: cognifiy.com/contact