Privacy Policy

At a glance

• We only collect what we need to run Edlune and improve your learning experience.
• We never sell your personal information.
• You can request a copy of your data or delete your account at any time.
• We comply with the California Consumer Privacy Act (CCPA) and the Children's Online Privacy Protection Act (COPPA).

Information we collect

• Account: name (if provided), email address, password hash, role (student/admin).
• Study content: notes, flashcards, practice attempts, scores, progress, and preferences.
• Usage data: device and browser information, approximate location derived from IP address, app events and diagnostics.
• Payments (if/when enabled): handled entirely by our payment processor. We do not store card numbers or full payment details.

How we use your information

• Provide and personalise Edlune (e.g., saving progress, recommended practice).
• Improve reliability, performance, and security, and prevent abuse.
• Communicate important changes, service updates, and support responses.
• Comply with applicable US and international laws.

Data sharing

We may share data with trusted service providers (e.g., hosting, analytics, support, payments) strictly to operate Edlune. They process data under our instructions and appropriate contractual safeguards. We do not sell personal information to third parties.

Edlune may display or link to third-party educational resources (e.g., official practice materials). We do not collect personal data from those external sources.

California residents — CCPA rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know: you can request details about what personal information we collect, use, disclose, and sell (we do not sell).
• Right to delete: you can request deletion of personal information we have collected about you, subject to certain exceptions.
• Right to correct: you can request correction of inaccurate personal information.
• Right to opt out of sale/sharing: we do not sell or share personal information for cross-context behavioural advertising.
• Right to non-discrimination: we will not discriminate against you for exercising your CCPA rights.

To exercise these rights, email legal@edlune.com with the subject line "CCPA Request". We will respond within 45 days.

Children's privacy — COPPA

Edlune is a study platform intended for high school and college students. We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent as required by the Children's Online Privacy Protection Act (COPPA).

If you are a parent or guardian and believe your child under 13 has provided us with personal information without your consent, please contact us immediately at legal@edlune.com and we will promptly delete it.

For users aged 13–17, we recommend parental awareness of account creation. Schools or institutions using Edlune on behalf of students under 13 must obtain appropriate consent before providing student data to us.

Cookies & similar technologies

We use essential cookies to keep you signed in and make the site work correctly. We may use analytics cookies to understand aggregate usage patterns. You can control cookie preferences through your browser settings. Where required, we display a consent notice with options before setting non-essential cookies.

Data retention

We retain personal data only as long as necessary to provide Edlune and meet legal obligations. You can delete your account at any time in settings; associated study content is removed within a reasonable processing window unless retention is legally required.

Your rights

• Access or receive a copy of your personal data.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Lodge a complaint with your state Attorney General or relevant consumer protection authority.

To exercise any of these rights, email legal@edlune.com.

International transfers

Edlune is operated from the United Kingdom. If you access Edlune from the United States, your data may be transferred to and processed in the UK or other countries. We implement appropriate safeguards for any such transfers in accordance with applicable law.

Changes to this policy

If we make material changes, we'll notify you (e.g., by email or in-app notice). Continued use of Edlune after changes take effect constitutes acceptance of the updated policy.