Privacy Policy

1. What we keep

• Student accounts need no email address. A student signs in with a student ID number (course paths) or a username (SAT Math 800) and a password.
• About a student: the student ID number or username, the name (in SAT Math 800, or in the class list the teacher enters), the class, and the password in a scrambled (hashed) form that nobody can read.
• What a student does: answers and progress in each tool, test and diagnostic results, the mistake notebook, handwritten notes on SAT questions, work handed in through PDF Studio, learning-path progress, Challenge games and points, and the time spent on the course pages.
• Teacher accounts: title, full name, school, username and password (hashed), the classes and class lists (student ID numbers and names), and the assignments and marking the teacher makes.
• Security records: the sign-in service keeps a record of sign-ins, and the services that run the site keep short technical logs (for example the time and the internet address of a request).
• On your own device: your browser keeps a copy of some progress and settings, so the tools keep working when the internet is slow, and it keeps a student signed in on that device. Teacher sign-ins are never kept in the browser.
• We use no advertising or tracking cookies and no analytics.

2. Why we keep it

Only to run the tools: to save progress, show each student what to practise next, and let teachers see how their classes are doing. We show no adverts, we never sell information, and we share it with no one except the services in section 4, which run the site for us.

3. Who can see it

• A student sees their own work and progress.
• A teacher sees the students in their own classes only (a class can have more than one teacher). The database itself enforces this, not only the page.
• In a Challenge game, the other student sees only your first name and the first letter of your last name (for example “Ahmed K.”). If two students in a class would look the same, the first letter of the middle name or a small number is added (for example “Ahmed M. K.” or “Ahmed K. (2)”). Never your student ID number. A student can challenge only classmates from their own class.
• The site administrator, Mr. Khaled, can see and manage every account, for example to reset a forgotten password or to delete an account.
• Nobody else, unless the law requires it.

4. Where it is stored, and the services we use

• Supabase stores the database and the files, and runs the sign-in. Its servers for RiseToExcel are in Stockholm, Sweden (EU), region eu-north-1.
• Netlify sends the website pages and files to your device from its servers around the world.
• YouTube: the pictures of the videos come from YouTube, without the address of the page you are on. A video plays only after you press it, in YouTube's privacy-enhanced mode.
• Google Fonts, jsDelivr and cdnjs supply the font and some program libraries, so they see your device's internet address.
• AI question maker (for teachers only): switched off at present. When the site administrator switches it on, the topic and notes a teacher types are sent to Anthropic, the company that makes the Claude AI, to suggest questions. No student names, answers or progress are sent, and students see an AI question only after a teacher has checked it.

5. How long we keep it

We keep an account and its work until we are asked to delete it (section 6). The copy in your browser stays until you clear the site's data in your browser settings.

6. Asking us to delete data

• Who can ask: the student, a parent or guardian, or the student's teacher.
• How: write to contact@risetoexcel.com with the student ID number or SAT username. Never send a password.
• Who does it and what happens: Mr. Khaled, the site administrator, checks that the request is genuine (for example with the student's teacher). He then deletes the account and everything linked to it: progress, answers, tests, handwritten notes, PDF Studio work, learning paths, Challenge games and points, the student's line in teachers' class lists, and the sign-in records.
• When: within 30 days of the request. We reply when it is done.
• Challenge games played with the deleted student are removed for the other player too.
• Our encrypted backups are kept only to repair the site after a failure. If we ever restore one, we delete the account again.
• To remove the copy on a device, clear the site's data in that browser's settings.

7. Children and families

Many of our students are under 18. Student accounts need no email address, and we keep only what the tools need. A parent or guardian can ask what we keep about their child, or ask us to delete it, at contact@risetoexcel.com.

8. Changes and contact

If this policy changes, the date at the top changes too. Questions about privacy: contact@risetoexcel.com · Contact page