Privacy Policy

Effective Date: May 21, 2026

This Privacy Policy explains how Grasped collects, uses, stores, and protects information when you use the Grasped website or application.

Grasped is an educational study platform designed to help students prepare for New York State Regents exams. Grasped is not affiliated with, endorsed by, sponsored by, or operated by the New York State Education Department, the Board of Regents, or any school district.

By using Grasped, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

Grasped may collect information that you provide directly, information created through your use of the service, and limited technical information collected automatically.

Account Information

If you create an account or sign in to Grasped using Google single sign-on, we may collect account-related information, including:

• Name
• Email address
• User ID
• Profile image, if provided by Google
• Authentication information needed to keep your account secure and functional

Google may share basic account information with Grasped so that your account can be created, authenticated, and maintained. Grasped does not receive your Google password.

Study Progress Information

Grasped may collect information about your activity in the app, including:

• Courses you select
• Topics you practice
• Questions you answer
• Whether answers are correct or incorrect
• Practice history
• Topic performance
• Streaks, statistics, and progress summaries
• Dates and times associated with study activity

This information is used to provide progress tracking, performance summaries, and study-related features.

Analytics and Usage Information

Grasped uses Vercel Analytics to understand general usage of the service and improve the user experience.

Vercel Analytics may collect limited usage information, such as page views, referrers, device and browser information, operating system, approximate geographic region, and performance-related information. This information is used to understand how users interact with Grasped and to improve the service.

Grasped does not use Vercel Analytics to sell personal information or to serve targeted advertising.

Technical and Security Information

Grasped may collect limited technical and security-related information, including:

• Browser type
• Device type
• Operating system
• Pages or features used
• General timestamps
• Error logs
• Performance data
• Security-related logs

This information is used to operate, secure, debug, and improve Grasped.

Feedback and Support Information

If you contact Grasped, submit feedback, report an issue, or request support, we may collect the information you choose to provide, including your message and contact information.

2. Information We Do Not Intentionally Collect

Grasped is not designed to collect sensitive personal information. Users should not submit sensitive information through Grasped.

Grasped does not intentionally collect:

• Social Security numbers
• Payment card information
• Government identification numbers
• Medical information
• Precise location information
• Home addresses
• Phone numbers
• Private school records outside of activity generated within Grasped
• Google passwords
• Gmail messages
• Google Drive files
• Google Calendar events

If you believe sensitive information has been submitted to Grasped, you may contact us using the contact information listed below.

3. How We Use Information

Grasped may use collected information to:

• Provide and operate the service
• Create and maintain user accounts
• Authenticate users through Google sign-in
• Save study progress
• Display statistics and performance summaries
• Personalize study features based on user activity
• Improve educational content and app functionality
• Understand general service usage through analytics
• Identify and fix technical issues
• Protect the security and integrity of the service
• Prevent misuse, unauthorized access, or abuse
• Respond to support requests or feedback
• Comply with legal obligations

Grasped does not use study progress to make official academic decisions.

4. How We Share Information

Grasped does not sell personal information.

Grasped may share information with third-party service providers that help operate, host, secure, maintain, or improve the service. These providers may include:

• Google, for single sign-on and authentication
• Supabase, if used for authentication, database, or storage services
• Vercel, for hosting, deployment, and analytics
• Error logging or security providers, if enabled

These providers may process information only as necessary to provide services to Grasped or as otherwise permitted by their own terms and privacy policies.

Grasped may also disclose information if required to do so by law, legal process, or a valid government request, or if disclosure is necessary to protect the rights, safety, or security of Grasped, its users, or others.

5. Third-Party Services

Grasped relies on third-party services to provide core functionality. These services may include:

• Google sign-in for account authentication
• Supabase for authentication, database, or storage functionality, if used by Grasped
• Vercel for hosting, deployment, and analytics

Third-party services have their own privacy policies and terms. Grasped is not responsible for the privacy practices of third-party services.

6. Cookies and Local Storage

Grasped may use cookies, local storage, session storage, or similar technologies to:

• Keep users signed in
• Maintain secure sessions
• Store user preferences
• Support authentication
• Improve performance
• Protect against abuse

You may be able to disable cookies or storage through your browser settings. Some features of Grasped may not function properly if these technologies are disabled.

7. Student and Minor Privacy

Grasped may be used by students under the age of 18.

Grasped aims to collect only the information reasonably necessary to provide educational study features. Grasped does not knowingly sell student data or use student data for targeted advertising.

If you are under 13, you should use Grasped only with permission from a parent, guardian, teacher, or school.

If a parent, guardian, teacher, or school believes that a child has provided personal information without appropriate permission, they may contact Grasped to request review or deletion of that information.

8. Data Retention

Grasped retains information for as long as reasonably necessary to:

• Provide the service
• Maintain user accounts
• Preserve study progress
• Improve and secure the service
• Resolve disputes
• Prevent abuse
• Comply with legal obligations

Users may request deletion of their account or personal information by contacting Grasped. Some information may remain in backups, logs, or records for a limited period after deletion where necessary for security, legal, or operational reasons.

9. Your Choices and Rights

Depending on your location and applicable law, you may have the right to:

• Request access to personal information associated with your account
• Request correction of inaccurate information
• Request deletion of personal information
• Object to certain processing
• Withdraw consent where processing is based on consent

To make a request, contact Grasped using the contact information listed below.

Grasped may need to verify your identity before completing certain requests.

10. Security

Grasped uses reasonable technical and organizational measures to protect information from unauthorized access, loss, misuse, alteration, or disclosure.

However, no online service can guarantee complete security. Users are responsible for protecting access to their own accounts and devices.

11. Data Transfers

Grasped and its service providers may process and store information in the United States or other locations where service providers operate.

By using Grasped, you understand that information may be processed outside your state, province, or country of residence.

12. Changes to This Privacy Policy

Grasped may update this Privacy Policy from time to time. If changes are made, the updated Privacy Policy will be posted with a new effective date.

Continued use of Grasped after an updated Privacy Policy is posted means you acknowledge the updated Privacy Policy.

13. Contact

If you have questions, requests, or concerns about this Privacy Policy, contact Grasped at: