SHSATus

Privacy Policy

Last updated: August 9, 2026

SHSATus is a test-preparation service used by families, operated by AI Soft Engine LLC, which is the data controller for everything described below. This policy explains what we collect, why, and the choices you have. The short version: accounts belong to parents, we collect the minimum needed to run the Service, we show no ads, and we never sell personal information.

1. What we collect

From the parent (account holder): an email address, used to sign in (magic link), for receipts and renewal notices, and — depending on your email preferences — a weekly progress report and the reminder email described below. Payment card details go directly to our processor, Stripe; we never see or store card numbers.

About the student: a first name or nickname chosen by the parent, a grade level, a target school, and practice activity — which questions were answered, the answers given, whether they were correct, and how long each took. We deliberately do not collect a student email address, phone number, photo, precise location, or any government identifier.

Reminder email based on practice activity. If a student stops practising, we may email the parent to encourage them back. Whether such an email is sent, and what it contains, is decided from the student’s own practice activity — when they last answered a question, how many they have answered, and which topic is weakest — together with how long the account has been inactive. We send at most two of these, and the sequence stops for good as soon as the student practises again.

Turning it off. These reminders are marketing email. There is a switch for them on your parent page, and every one of the emails also carries an Unsubscribe link at the bottom; one click stops them, and you do not need to sign in first. You can also ask us at info@aisoftengine.com. All three do the same thing, and opting out stops all marketing email from us. It does not affect the messages you need in order to run the account — sign-in links, receipts and renewal notices reach you either way — and it does not cancel the weekly progress report, which has its own separate switch on your parent page.

2. Children's privacy (COPPA)

The Service is designed for students who may be under 13, and we follow the Children’s Online Privacy Protection Act (COPPA). Students cannot create accounts: every student profile is created by, and belongs to, a parent or legal guardian, and creating a profile is how the parent consents to the practice-activity collection described above.

Student practice data is used only to power the student’s own preparation — picking the next questions, spaced-repetition review, and the summaries we send the parent: the progress report and the practice reminders described in section 1. Those summaries go to the parent, never to the student. Practice data is never sold, never shared for anyone else’s marketing, never used for third-party advertising, and never used to build an advertising profile.

A parent can review a student’s data from the dashboard at any time, remove a student profile from the account page, or email info@aisoftengine.com to have a student’s data deleted entirely. We honour deletion requests within 30 days.

3. What we use data for

To operate the Service (sign-in, question selection, scoring, reports); to bill subscriptions; to answer support requests; to send the parent the reminder email described in section 1, which you can switch off at any time; and to fix problems, using aggregated question statistics (for example, the percentage of students answering a question correctly) that are not tied to an identifiable student.

4. What we never do

We do not sell personal information. We show no third-party advertising and use no advertising trackers. We do not use student data to train machine-learning models. We do not send marketing email to students.

5. Service providers

We share data only with the processors required to run the Service: Supabase (database hosting), Stripe (payments, parent email only), and our email delivery provider, which handles every message we send: magic links, receipts and renewal notices, the weekly progress report, and the practice reminders described in section 1. It receives the parent email address, and — because the report and the reminders say how practice is going — the student’s first name or nickname together with a summary such as the number of questions answered, the percentage correct, an estimated score, and the weakest topic. It does not receive individual answers or the full practice history. Each processes data solely on our instructions, for the purpose of delivering the Service to you. We do not share personal information with anyone for their own marketing, and we do not sell it.

6. Data retention

Practice history is kept while the student profile exists so that review scheduling and progress reports work. Removing a profile archives it; requesting deletion at info@aisoftengine.com permanently removes the student’s data. Closed accounts are deleted after a grace period of 90 days, except records we must keep for tax or fraud purposes.

7. Security

Data is encrypted in transit, access is restricted by row-level security in our database, and sign-in uses one-time magic links rather than stored passwords. No system is perfectly secure; if a breach affects your data we will notify you promptly.

8. Your rights

You may request a copy of, correction of, or deletion of your personal data at any time by emailing info@aisoftengine.com. New York and California residents may have additional rights under state law; we honour these requests regardless of residency.

9. Changes and contact

If this policy changes materially we will email account holders before the change takes effect. Questions: info@aisoftengine.com. See also our Terms of Service.