Privacy Policy

We collect information you provide directly and information generated through your use of the platform:

• Account data: Your name, email address, state, and city when you register.
• Academic data: Target university, course, exam date, subject selections, and study preferences set during onboarding.
• Usage data: Questions answered, scores, streaks, time spent learning, and challenge results — used to power your personalised study plan.
• Device data: Browser type, IP address, and device identifiers for security (known-device tracking) and service improvement.
• Communications: Messages you send to our support team.

• Provide and personalise the Eridock learning experience, including adaptive question selection and score prediction.
• Send OTP codes and important account notifications (e.g. password reset, new login alerts).
• Analyse platform performance and improve our question bank and AI tutor.
• Detect fraud, abuse, and security threats.
• Comply with applicable law, including data protection regulations.

We do not sell your personal data to third parties.

We share data only in limited circumstances:

• School administrators: If you register under a school code, your name, progress, and performance data are visible to your school admin.
• Service providers: Trusted vendors (e.g. cloud hosting, email delivery) who process data on our behalf under strict confidentiality obligations.
• Legal obligations: When required by a valid court order or regulatory authority.

We use session cookies for authentication and local/session storage for UI state. We may use privacy-respecting analytics tools to understand aggregate usage patterns. We do not use third-party advertising cookies.

We retain your account data for as long as your account is active. If you delete your account, we will erase your personal data within 30 days, except where retention is required by law or legitimate business need (e.g. fraud prevention records).

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — request erasure of your data (“right to be forgotten”).
• Portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, email us at privacy@eridock.com.

Eridock is intended for students aged 14 and above. Users under 18 should have parental or guardian consent before registering. We do not knowingly collect data from children under 13. If you believe a child has registered without consent, contact us immediately.

We protect your data using industry-standard measures: password hashing, HTTPS encryption in transit, JWT authentication with refresh token rotation, and rate limiting on all auth endpoints. No system is 100% secure; please use a strong, unique password and enable OTP login.

We may update this policy to reflect changes in our practices or the law. We will notify you of material changes by email or an in-app notice at least 14 days before they take effect. Continued use of the platform after changes constitutes acceptance.