Skip to main content
ekkul
Back to Home

Privacy Policy

Last Updated: February 2026

Ekkul ("we," "our," or "us") operates the Ekkul exam preparation platform, including our website, applications, and related services (collectively, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

By accessing or using the Platform, you agree to the terms of this Privacy Policy. If you do not agree with the practices described here, please do not use the Platform.

1. Information We Collect

1.1 Personal Information

When you create an account or use our Platform, we may collect the following personal information:

  • Account Information: Name, email address, username, password (hashed), profile picture, and date of birth.
  • Profile Data: Educational background, exam preferences, selected topics, language preferences, and onboarding responses.
  • Communication Data: Messages sent through our GuruG AI chat feature, feedback, and support requests.

1.2 Usage Data

We automatically collect certain information about how you interact with the Platform:

  • Learning Activity: Test results, scores, practice session history, question responses, time spent on topics, and performance analytics.
  • AI Interaction Data: Queries made to AI features (GuruG AI, Concept Explainer, Exam Simulator), AI-generated content viewed, and credit usage.
  • Device Information: Browser type, operating system, device type, screen resolution, IP address, and general location data (city/region level).
  • Cookies and Tracking: We use cookies and similar technologies to maintain sessions, remember preferences, and analyze Platform usage. See our Cookie Consent settings for more details.

1.3 Payment Information

When you purchase a subscription or model test set, payment processing is handled by our third-party payment processor, Stripe. We do not store your full credit card number, CVV, or bank account details on our servers. We may receive and store:

  • Last four digits of your payment card
  • Card brand (e.g., Visa, Mastercard)
  • Billing address and email
  • Transaction history and subscription status

2. How We Use Your Information

We use the information we collect to:

  • Provide and Improve the Platform: Deliver exam preparation content, model tests, practice questions, and personalized learning experiences.
  • Power AI Features: Generate personalized performance analyses, study plans, AI mentor messages, concept explanations, chat responses, and exam simulations based on your learning data.
  • Personalize Your Experience: Adapt content difficulty, recommend topics, and tailor the Platform to your learning goals and preferences.
  • Process Transactions: Handle subscription payments, one-time purchases, and billing management.
  • Communicate with You: Send account notifications, service updates, and respond to support inquiries.
  • Analytics and Research: Analyze aggregated usage patterns to improve our content quality, AI models, and Platform features.
  • Ensure Security: Detect and prevent fraud, unauthorized access, and other security threats.
  • Comply with Legal Obligations: Meet applicable legal requirements, resolve disputes, and enforce our terms.

3. Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

  • Service Providers: We share data with trusted third-party service providers who assist in operating the Platform, including Supabase (authentication and database), Stripe (payment processing), OpenAI and Anthropic (AI features), and cloud hosting providers. These providers are contractually obligated to protect your data.
  • Leaderboard and Social Features: If you participate in leaderboards or challenges, your username, scores, and rankings may be visible to other users. You can control your visibility in your account settings.
  • Organizations and Instructors: If you are part of an organization (school, institution), your learning progress and performance data may be shared with authorized administrators and instructors within that organization.
  • Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, safety, or property of Ekkul, our users, or the public.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction. We will notify affected users of any change in ownership or data practices.

4. Data Security

We implement industry-standard security measures to protect your personal information, including:

  • Encryption of data in transit (TLS/SSL) and at rest for sensitive data.
  • Secure authentication via Supabase with support for multi-factor authentication.
  • Hashed passwords using modern cryptographic algorithms (passwords are never stored in plain text).
  • Regular security reviews and vulnerability assessments of our infrastructure.
  • Access controls limiting employee and contractor access to personal data on a need-to-know basis.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any breach in accordance with applicable laws.

5. Children's Privacy (COPPA Compliance)

Ekkul is committed to protecting the privacy of children. Our Platform may be used by students of all ages for exam preparation. We comply with the Children's Online Privacy Protection Act (COPPA) and take the following measures:

5.1 Age Verification

During account registration, we require users to provide their date of birth. If a user is identified as being under the age of 13, we implement additional safeguards before collecting any personal information.

5.2 Parental Consent

For users under the age of 13, we require verifiable parental or guardian consent before collecting, using, or disclosing any personal information. The parent or guardian must:

  • Provide consent through a verified method (e.g., signed consent form, credit card verification, or direct communication with our support team).
  • Acknowledge and agree to this Privacy Policy on behalf of their child.

5.3 Data Collected from Children

When parental consent is obtained, we may collect the following limited information from children under 13:

  • First name or username (we encourage use of a pseudonym rather than a real name).
  • Parent or guardian's email address (for consent verification and account management).
  • Learning activity data (test scores, practice results, and topic progress) necessary to provide the educational service.

We do not collect more information from children than is reasonably necessary to provide our educational services. Children's accounts have restricted features, including disabled social features (leaderboard participation and public profiles) unless explicitly enabled by a parent or guardian.

5.4 Parent and Guardian Rights

Parents and guardians of children under 13 have the right to:

  • Review the personal information we have collected from their child by submitting a request to privacy@ekkul.com.
  • Request Deletion of their child's personal information. Upon receiving a verified request, we will delete the child's data within 30 days, except where retention is required by law.
  • Withdraw Consent at any time. Withdrawing consent will result in the deactivation of the child's account and deletion of associated personal data.
  • Refuse Further Collection of their child's data without requiring deletion of previously collected data.

5.5 Contact for Parents

If you are a parent or guardian and have questions about your child's privacy, wish to review or delete their data, or need to manage consent, please contact us at:

We will respond to all parental requests within 30 days of receiving a verified request.

6. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You have the right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purpose for collecting the information, and the categories of third parties with whom we share it.
  • Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions (e.g., completing a transaction, detecting security incidents, complying with legal obligations).
  • Right to Opt-Out of Sale: We do not sell personal information. If this practice changes, we will provide a "Do Not Sell My Personal Information" link and update this policy accordingly.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights. You will not receive different pricing or quality of service for making a privacy request.

To exercise your CCPA rights, contact us at privacy@ekkul.com. We will verify your identity before processing any request and respond within 45 days.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. Specific retention periods include:

  • Account Data: Retained until you delete your account. After account deletion, data is permanently removed within 30 days, except where required by law.
  • Learning Activity Data: Retained for the duration of your account to provide personalized learning experiences and analytics.
  • AI Interaction Data: Chat conversations and AI responses are retained for up to 12 months. Cached AI responses (e.g., concept explanations) are retained for up to 30 days for performance optimization.
  • Payment Records: Transaction records are retained for 7 years to comply with financial and tax regulations.
  • Usage Logs: Server and analytics logs are retained for up to 90 days for security and debugging purposes.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete personal information.
  • Deletion: Request deletion of your personal information, subject to applicable exceptions.
  • Portability: Request a machine-readable copy of your data to transfer to another service.
  • Restriction: Request that we limit the processing of your personal information in certain circumstances.
  • Objection: Object to the processing of your personal information for certain purposes, such as direct marketing.

To exercise any of these rights, please contact us at privacy@ekkul.com. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page.
  • Notify registered users via email or an in-app notification at least 14 days before the changes take effect.
  • For changes affecting children's data, we will obtain new parental consent where required.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We are committed to resolving any concerns about your privacy and our collection or use of your personal information. We will respond to all inquiries within 30 days.

Back to Home