Privacy Policy

Last updated: March 2026

1. Who We Are

Gradus provides an AI-powered exam preparation platform for ACCA, CFA, and CMA students. Gradus is not affiliated with, endorsed by, or connected to the Association of Chartered Certified Accountants (ACCA), the CFA Institute, or the Institute of Management Accountants (IMA/CMA).

2. What Data We Collect

Account data: Email address, name (optional), exam date, selected papers.

Usage data: Quiz answers, flashcard reviews, study session durations, mastery scores, AI tutor conversations.

Technical data: Browser type, device info, IP address, pages visited (via analytics).

Payment data: Processed by Stripe. We never see or store your full card number.

3. How We Use Your Data

  • Provide and improve the exam prep service
  • Compute ReadyScore, study plans, and mastery analytics
  • Power AI Tutor responses (your questions + chapter context are sent to Google Gemini)
  • Send account-related emails (password reset, exam reminders)
  • Understand usage patterns to improve the product (via PostHog analytics)

4. AI Processing

When you use the AI Tutor, your questions and relevant chapter content are sent to Google Gemini for processing. We do not use your conversations to train AI models. Google's API data usage policy applies to data sent to Gemini.

5. Data Storage & Security

Your data is stored in Supabase (PostgreSQL) with row-level security policies. All connections use TLS encryption. Authentication is handled by Supabase Auth with bcrypt password hashing.

6. Third-Party Services

  • Supabase: Database, authentication, file storage
  • Google Gemini: AI Tutor responses
  • Stripe: Payment processing
  • PostHog: Product analytics (anonymized)
  • Sentry: Error monitoring
  • Vercel: Hosting and deployment

7. Your Rights

Under GDPR and applicable data protection laws, you have the right to access, correct, delete, or export your personal data. To exercise these rights, contact us at support@getgradus.com.

8. Cookies

We use essential cookies for authentication and session management. Analytics cookies (PostHog) are used to understand usage patterns. You can opt out of non-essential cookies.

9. Contact

For privacy-related questions: support@getgradus.com