Privacy Policy

1. Scope

This Privacy Policy applies to Acely’s website and study application. It explains the information we collect, why we use it, who processes it for us, and the controls available to users.

2. Information we collect

Account information

We may collect your email address, display name, authentication identifiers, sign-in provider information, account plan, and account settings.

Study content

We process topics, prompts, pasted notes, uploaded documents or images, generated study packs, flashcards, practice questions, and other material you choose to provide.

Study activity

We store practice attempts, scores, study sessions, XP, streak-related activity, readiness data, and similar learning progress needed to operate Acely.

Billing information

Stripe processes card and payment details. Acely receives limited billing information such as Stripe customer, checkout, invoice, and subscription identifiers; payment status; plan; purchased credits; and billing interval. Acely does not need to store your full card number.

Technical and security data

Our infrastructure providers may process IP addresses, browser/device information, request metadata, authentication logs, error logs, and security events needed to deliver and protect the service.

3. How we use information

• Provide authentication, saved study packs, practice, progress, billing, and account features.
• Generate and personalize study content through the AI processor described below.
• Calculate credits, usage limits, readiness, progress, and other product state.
• Prevent fraud, abuse, unauthorized access, excessive API usage, and security incidents.
• Debug, maintain, and improve Acely.
• Meet legal, tax, accounting, and payment obligations.

4. AI processing

Acely currently uses Xiaomi MiMo through the Xiaomi MiMo API Open Platform to generate study packs. When you request AI generation, Acely sends the study prompt and the uploaded, pasted, or extracted study material needed to perform that request. For supported images, the image may be sent to MiMo so educational text and content can be extracted before the study pack is generated.

Acely does not send your account password or full payment-card number to the AI model. AI request and response data may be processed by Xiaomi under the terms and privacy practices applicable to the MiMo Open Platform. Provider practices can change, so Acely does not promise a provider-side retention period unless we can verify and enforce that promise.

5. Service providers

Acely currently relies on service providers including Supabase for authentication and database services, Vercel for application hosting and delivery, Stripe for payment processing, Google for Google OAuth authentication, Cloudflare for Turnstile security checks, Resend for authentication-email delivery, and Xiaomi MiMo for AI study-content generation. These providers process information on Acely’s behalf or as independent providers according to their applicable terms and privacy practices.

6. What we do not do

Acely does not currently sell personal information, rent student information to data brokers, or use student study content for third-party targeted advertising. If these practices ever materially change, we will update this policy and provide any notices or choices required by law.

7. Children and teens

Acely is intended for users age 13 and older. We do not knowingly collect personal information from children under 13. If we learn that we collected personal information from a child under 13 without legally sufficient authorization, we will take appropriate steps to delete it. Users under 18 should use Acely only with permission from a parent or legal guardian.

8. Data retention

We generally keep account and study data while your account is active or as needed to provide Acely. If you delete your account, we remove account-linked application data from active systems, subject to limited retention in backups, security records, fraud-prevention records, payment/accounting records, or where law requires retention. Retention periods may vary by data type and provider.

9. Security

Acely uses technical and organizational safeguards intended to protect information, including authentication, row-level database access controls, restricted server secrets, encrypted HTTPS transport, signed payment webhooks, request limits, and security monitoring. No online service can promise perfect security, so users should also protect their passwords and devices.

10. Your choices and controls

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information, and to appeal or complain about certain privacy decisions. Acely provides in-product tools to update basic profile information, export account data, reset credentials, and delete the account. We will honor additional legally required requests after verifying the requester.

11. International processing

Acely and its service providers may process information in the United States and other countries where they operate. Those countries may have data-protection laws different from the laws where you live.

12. Changes to this policy

We may update this policy as Acely adds providers or features. Material changes will be communicated through the service or another appropriate method when required.

13. Privacy requests

You can export or delete your account from Acely Settings. A dedicated public support contact should be used for requests that cannot be completed in-app; Acely will display that contact method before public commercial launch.