Legal

Privacy Policy

Last updated: July 23, 2026

Plain-language summary: Because Mentuora's students are minors, we collect only what's needed to personalize learning (diagnostic results, practice history, conversations with the AI mentor), a parent/guardian must consent before that data is collected, and a parent/guardian can review, export, or request deletion of their student's data at any time.

1. Who this policy covers

This Privacy Policy describes how Mentuora ("we," "us") collects, uses, and shares information when a student or parent/guardian ("you") uses our website and platform. It should be read together with the Terms and Conditions.

2. Information We Collect

Category	Examples
Account information	Student name, date of birth/grade level, guardian name and contact information, login credentials (managed by our authentication provider)
Education records	Diagnostic results, practice question attempts, per-skill mastery estimates, study plans, target exam/university goals
AI mentor conversations	Messages exchanged with Mentuora's AI mentor, including questions asked and guidance given
Externally imported results	Official or third-party exam scores you choose to import (e.g., an SAT or ACT score report)
Usage data	Login timestamps, session activity, device/browser information
Payment information	Processed by our third-party payment processor; we do not store full card numbers

3. How We Use Information

To provide and personalize the study plan, diagnostic, and AI mentor features.
To generate progress summaries for the student and, where consented, the parent/guardian.
To maintain platform security and prevent abuse.
To send account-related and (with consent) progress-notification communications.

We do not sell personal information, and we do not use student data to serve third-party advertising.

4. Children's Privacy and Parental Consent (COPPA)

If a student is under 13, we require verifiable parental consent before collecting any personal information, consistent with the Children's Online Privacy Protection Act (COPPA). A parent/guardian may, at any time: review the personal information collected about their child, request its deletion, and refuse further collection or use of that information — doing so may limit or end the student's access to personalized features. Requests can be sent to privacy@mentuora.com.

5. FERPA and Education Records

If Mentuora is made available through a school or district partnership, additional obligations under the Family Educational Rights and Privacy Act (FERPA) may apply, and a separate data-processing agreement with the school will govern that relationship. For directly-enrolled families (not through a school), Mentuora acts as the data controller as described in this policy.

6. How We Share Information

We share information only as needed to operate the service, with the following categories of subprocessors:

Provider	Purpose
Clerk	Authentication and account/session management
Anthropic (Claude API)	Powers the AI academic mentor's conversations and guidance
Vercel	Hosting for the learning platform (app.mentuora.com)
Netlify	Hosting for the public marketing website (mentuora.com)

We do not sell personal information to third parties. We may disclose information if required by law, to protect the safety of a student or others, or in connection with a merger or acquisition (with notice as required by law).

7. AI Processing Disclosure

When a student interacts with the AI mentor, their messages are sent to our AI provider (Anthropic) to generate a response. We configure this integration under Anthropic's business/API terms, which govern data retention and whether this traffic is used to train underlying models; we review these terms specifically because Mentuora's users are minors, and prefer configurations that do not retain or train on student conversation data.

8. Data Retention and Deletion

We retain education records and conversation history for as long as the account is active, to support continuity of the study plan and mentor relationship. A parent/guardian may request export or deletion of their student's data at any time; deletion requests are processed across our systems, including any AI-memory/embedding stores, not just primary records.

9. Your Rights and Choices

Access and correction: request a copy of, or correction to, the information we hold.
Deletion: request deletion of an account and associated data.
Communication preferences: opt in/out of email and (where applicable) SMS notifications, separate from essential account communications.
State-specific rights: Florida residents, see Section 10 below. Residents of other states (e.g., California) may have additional rights under their own state privacy law.

10. Florida-Specific Disclosures

Mentuora is organized in and headquartered in Miami, Florida, so the following Florida statutes apply directly to how we handle information, not only as a matter of general best practice:

Florida Student Online Personal Information Protection Act (Fla. Stat. § 1002.222 / § 1006.1494): because Mentuora is designed and marketed for K-12 student use, we do not use covered student information for targeted advertising, do not sell student information, and do not build student profiles for any purpose other than the educational personalization described in this policy. This is a direct legal obligation for Mentuora, not something that only attaches if we later contract with a school or district.
Florida Information Protection Act, FIPA (Fla. Stat. § 501.171): in the event of a data breach involving Florida residents' personal information, we will notify affected individuals within 30 days of determining a breach occurred (extendable by 15 days for good cause), notify the Florida Attorney General within 30 days if 500 or more Florida residents are affected, and notify consumer reporting agencies if 1,000 or more are affected.
Florida Digital Bill of Rights (FDBR): the FDBR's consumer-rights obligations currently apply only to companies with more than $1 billion in global annual revenue (among other criteria) — Mentuora does not currently meet this threshold. We note it here for completeness and will revisit this section if that changes.

11. Security

We use encryption in transit and at rest, least-privilege access controls, and do not store student personal information in general application logs. No system is 100% secure, and we cannot guarantee absolute security.

12. International Users

Mentuora is currently designed for students in the United States. If we expand internationally, this policy will be updated to reflect applicable cross-border data transfer safeguards.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected in the "Last updated" date above and, where required, communicated directly to account holders/guardians.

14. Contact

Questions or requests regarding this policy, including COPPA/SOPIPA-related parental requests or Florida Attorney General inquiries, can be sent to privacy@mentuora.com.

Note: This document is a solid, research-grounded draft — grounded in Mentuora's actual data practices, documented architecture (see docs/09-security-privacy.md), and current Florida law (SOPIPA, FIPA, FDBR, FDUTPA, and Florida's minor-contract doctrine) — but it has not been reviewed by a licensed attorney and is not a substitute for that review. Because Mentuora serves minors, processes education records, and is Florida-domiciled, we recommend review by Florida counsel experienced in COPPA/FERPA/SOPIPA and EdTech before this is relied upon as final and binding, and specifically before real (non-test) student accounts or payments go live.