Privacy Policy

1. Overview

Cognora Inc. ("Cognora," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational technology services, including StudyBuddy and related platforms ("Services").

We serve users globally and comply with international data protection standards, including GDPR, CCPA, PIPEDA, and other applicable regulations.

2. Information Collection

2.1 Information You Provide

• Account information (name, email, academic details)
• Profile information and preferences
• Payment information (processed via Stripe)
• Communications with our AI systems
• Uploaded documents and study materials
• Feedback and support communications

2.2 Automatically Collected Information

• Device information (browser type, IP address)
• Usage patterns and interaction data
• Performance and error data
• Location information (country/region)

2.3 Third-Party Sources

We may receive information about you from:

• Educational institutions (with proper authorization)
• Integration partners
• Authentication services
• Public sources for research and verification

3. Information Usage

3.1 Core Service Provision

• Delivering personalized AI tutoring
• Processing and analyzing educational content
• Managing your account and preferences
• Processing payments and subscriptions

3.2 Service Improvement

• Enhancing AI model performance
• Developing new educational features
• Analyzing usage patterns and trends
• Conducting research and development

3.3 Communication

• Service updates and announcements
• Technical support and assistance
• Educational content and resources
• Marketing communications (with consent)

4. Information Sharing

4.1 Service Providers

We share information with trusted service providers:

• Cloud infrastructure providers
• Payment processors (Stripe)
• Analytics services
• Customer support tools

4.2 Legal Requirements

We may disclose information:

• To comply with legal obligations
• To protect rights and safety
• To prevent fraud or abuse
• In response to valid legal requests

5. Data Security

We implement comprehensive security measures:

• Encryption in transit and at rest
• Access controls and authentication
• Regular security assessments
• Employee training and compliance
• Incident response procedures

6. AI Processing & Third-Party Services

Our AI-powered features are provided with the help of:

• Anthropic's Claude AI
• OpenAI's GPT models
• Google's Gemini
• Groq
• XAI's Grok

These services in a varied manner will process your queries and content in real-time. We do not maintain or train our own AI models. All AI processing is handled by our trusted third-party providers in accordance with their respective privacy policies and security standards.

7. Your Rights & Choices

7.1 Access Rights

You have the right to:

• Access your personal information
• Request data portability
• Correct inaccurate data
• Request data deletion

7.2 Control Options

• Manage notification preferences
• Control data sharing settings
• Opt-out of marketing communications
• Delete account and associated data

7.3 Exercise Your Rights

To exercise these rights, you can:

• Use account settings and privacy controls
• Contact our privacy team at privacy@cognora.ca
• Submit a formal rights request through our portal

8. International Data Transfers

8.1 Data Storage Locations

We primarily store data using a cloud-based database, which may involve data centers in:

• United States
• European Union
• Other regions as required for redundancy and performance

8.2 Transfer Safeguards

We protect international transfers through:

• Standard Contractual Clauses (SCCs)
• Data Processing Agreements (DPAs)
• Compliance with applicable data protection regulations
• Regional data localization (when required)

9. Legal Compliance

9.1 Regulatory Framework

We comply with applicable data protection laws including:

• GDPR (European Union)
• CCPA (California)
• PIPEDA (Canada)
• Other regional privacy regulations

10. Children's Privacy

10.1 Age Restrictions

Our services have specific age requirements:

• 13+ for basic account creation
• Parental consent required for users under 16
• Special protections for educational institution users

10.2 Special Protections

For users under 18, we:

• Collect minimal personal information
• Require parental/guardian consent
• Provide enhanced privacy controls
• Restrict marketing communications

11. Policy Changes

11.1 Update Process

When we update this policy, we will:

• Post the new version on our website
• Update the "Last Modified" date

11.2 Previous Versions

Previous versions of this policy are available upon request. Contact our privacy team for access to historical versions.