Privacy Policy — ALC Test Prep

1. Who We Are

ALC Test Prep is operated by AIM Learning Center (“we,” “us,” “our”). We provide AI-powered SAT and ACT practice testing and coaching reports at testprep.aimlearningcenter.com.

2. Information We Collect

Parent Account Information

Email address (for authentication and communication)
First and last name (for display purposes)
Phone number (optional, for support contact)
Payment information (processed by Stripe — we never store card numbers)

Student Information (Minors)

We collect minimal information about students:

First and last name
Grade level (9-12)
Target test (SAT or ACT)
Target score

We do NOT collect from students: email addresses, phone numbers, dates of birth, school names, physical addresses, photos, or social media accounts.

Test-Taking Data

During practice tests, we collect behavioral data to power our AI coaching reports. This includes:

Answers selected and answer changes
Time spent per question
Navigation patterns (question order, skipping, returning)
Focus events (tab switches detected during test)

This data is used exclusively to generate personalized coaching reports. There are NO third-party analytics scripts, tracking pixels, or advertising technology on test-taking pages.

3. How We Use Information

To provide practice tests and generate AI coaching reports
To process payments (via Stripe)
To communicate about your account and reports
To improve our test content and AI analysis
To prevent fraud and maintain security

We never sell, rent, or share student data with advertisers or data brokers. Period.

4. Children's Privacy (COPPA Compliance)

Our platform serves students aged 14-18. We comply with the Children's Online Privacy Protection Act (COPPA):

Only parents can create accounts — students do not have their own login credentials
Parental consent is inherent in our architecture (parents create the account, add the student, and purchase the test)
Student data collection is minimal (name, grade, target test only)
No third-party tracking on test-taking pages
Parents can request complete deletion of all student data at any time

5. Data Sharing

We share data only with these service providers, solely for operating the platform:

Stripe: Payment processing. Receives parent email and payment details.
Anthropic (Claude AI): Report generation. Receives anonymized behavioral profiles (no student names).
Microsoft Azure: Cloud hosting and database. All data encrypted at rest and in transit.

6. Data Retention

Account data: retained until you request deletion
Test and telemetry data: retained for 2 years, then archived
Security audit logs: retained for 5 years (legal compliance)
Payment records: retained per Stripe's policies

7. Your Rights

You have the right to:

Access: View all data we hold about you and your students
Delete: Request permanent deletion of your account and all associated data (including all student data)
Correct: Update inaccurate information in your account settings
Restrict: Contact us to limit how we process your data

To exercise these rights, use the account deletion feature in Settings or contact us at support@aimlearningcenter.com.

8. Security

We implement industry-standard security measures including:

Encryption at rest (Azure SQL TDE) and in transit (TLS 1.2+)
bcrypt password hashing
Session tokens with HTTP-only, Secure, SameSite cookies
Rate limiting and account lockout protection
Comprehensive audit logging

9. Contact Us

If you have questions about this privacy policy or our data practices:

AIM Learning Center
Email: support@aimlearningcenter.com