Privacy Policy

Who is responsible for your data

BILKEYS, at bilkeys.com, is run by i-educate LLC, a Delaware limited liability company, which is the controller of your personal information. This policy covers the EU/UK GDPR, the California Consumer Privacy Act as amended by the CPRA, other U.S. state privacy laws, and COPPA. We collect the minimum needed to run a study app, we never sell your personal information, and we never use your study materials for advertising. Contact: privacy@i-educate.com, 48 Brentsmill Drive, Stafford, Virginia 22554, United States.

What we store

• Account details: your name, email address, date of birth and country (collected at sign-up to confirm you meet the minimum age), and the plan and credit balance on your account.
• Optional profile details you choose to add in Settings, such as gender, what you study and your display name.
• The books and files you upload, and the study sets, cards, briefs, scenarios and diagrams generated from them.
• Your study activity: reviews, mastery, minutes studied, streaks, XP, achievements, exam plans, group membership, leaderboard scores, and messages you send in study group chats.
• Support messages and feedback you send us, and technical information including your IP address, browser and device type, and the page and campaign link you arrived from, so we can keep the service secure and know which channels bring learners to the app.
• Payment outcomes from Stripe: your plan, renewal date and credit grants. We never see or store your full card details.
• Usage records tying each book and study set to the plan period and credit type that paid for it, kept so plan allowances, credit balances and billing can be reconciled.

How we use it

• To run the app: generating your study material, scheduling Daily Review, running games, streaks, achievements, leaderboards, Study Groups and Exam Countdown.
• To manage your account, take payments, and apply per-period plan allowances and credit balances.
• To build your performance stats and suggest what to study next.
• To send service messages (verification, receipts, renewal and trial reminders, security notices) and, if you switch them on, study reminders.
• To keep the app secure: spotting fraud, abuse, and manipulation of credits, streaks or leaderboards.
• To improve the app using aggregate, de-identified usage data and our own in-house analytics, including which campaign links bring learners to BILKEYS. We do not read your study materials for this.
• To comply with the law and enforce our terms. Marketing email is sent only if you consent, and always has an unsubscribe link.

Legal bases (EEA/UK)

Contract: running the service you signed up for. Legitimate interests: security, fraud prevention and product analytics. Consent: marketing and non-essential cookies, which you can withdraw at any time. Legal obligation: tax and accounting records.

AI processing

To create your study material, the relevant text from your uploads, and the work you submit to Check My Work, is sent to our AI provider, OpenAI, which processes it only to produce your requested output and is not permitted to use it to train its models. We do not use your content to train our own models, and we never use it for advertising. We do log how much AI usage an action costs, for billing, plan limits and abuse prevention.

Check My Work images

• A photo or typed working you submit is sent to our AI provider only to mark that piece of work and show you feedback.
• We do not keep the image. Only the outcome is stored temporarily on your account: the restated problem, whether it was correct, the first line with an error, how many lines were checked, and whether it came from typing or a photo.
• Photograph only your own work. Avoid capturing other people, other students’ work, identity documents, or information you are not entitled to share.

Cookies

We use strictly necessary cookies for sign-in and session security, functional storage for your preferences such as theme and language, and analytics to measure usage. We also set a long-lived device identifier to help detect multiple accounts and abuse. Where the law requires it, non-essential cookies load only with your consent. Blocking strictly necessary cookies will stop you signing in. Because there is no agreed standard, we do not respond to Do Not Track signals.

Payments

Card payments are processed by Stripe, which handles your payment details directly under its own privacy policy. We keep only the outcome: which plan you are on, your renewal date and your credit grants.

Sharing

• Your uploaded books, study sets and Check My Work submissions are private to you until you choose to share a set with a group.
• Study groups are invite-only. In a group, your display name, shared sets, progress and chat messages are visible to the other members; we do not monitor or read group chats, and only access them where the law requires; on the leaderboard, your display name and score are visible to other learners.
• We use a small number of service providers to run the app: cloud hosting and storage, our AI providers, Stripe for payments, and email delivery for reminders and support replies. They are contractually bound to use your data only to provide those services to us.
• We disclose information where the law requires it or where it is needed to protect users or the public, and we may transfer it to a successor if the business is sold. This policy would continue to apply.
• We never sell your personal information, share it for cross-context behavioral advertising, or show you ads.

Children

• Accounts need a stated date of birth and country showing an age of at least the applicable minimum: 13 generally, or 16 in European Union and EEA countries under GDPR’s digital-consent rules. We do not knowingly collect information from children under the applicable minimum and delete it promptly if we find it.
• Because uploads are processed by third-party AI providers, we do not support accounts for children under the applicable minimum age.
• Learners between the applicable minimum age and 18 need a parent or guardian to agree to our terms and this policy. A parent or guardian can review or ask us to delete a minor’s data at privacy@i-educate.com.
• We show no advertising to anyone, study groups are invite-only so learners cannot be contacted in chat by strangers, display names can be a pseudonym, and we encourage minors not to use their full real name on the leaderboard. We do not knowingly sell or share the personal information of under-16s.

How long we keep it

• Your content stays until you delete it or close your account.
• Uploaded book files on free accounts inactive for 60 days or more may be removed to save storage. Your sets, cards and progress are kept.
• If a free account is completely inactive for 24 months, the study content on it (books, sets, cards, progress and exam plans) is deleted, so we do not keep data we no longer need. We email you 30 days and 7 days beforehand, and any study activity resets the clock. Accounts with an active paid plan are never cleared for inactivity.
• Payment records are kept as long as accounting and tax law requires.

Your control

• Delete individual books, study sets or exam plans at any time.
• Turn study reminders on or off, and change your theme and profile details in Settings.
• Leave a group, block other members, or delete your own chat messages whenever you like.
• Ask us through Help & Support, or at privacy@i-educate.com, for a copy of your data or to delete your account and everything on it.

Your rights

• EU/UK: access, correction, erasure, restriction, objection, portability, withdrawal of consent, and the right to complain to your supervisory authority.
• California: to know, access, correct, delete and receive a portable copy of your information, and to limit use of sensitive information. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of, and we never discriminate against you for exercising a right.
• Other U.S. states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas and Oregon): similar access, correction, deletion, portability and opt-out rights. We do no targeted advertising, no sale of personal data, and no profiling with legal or similarly significant effects.
• To use any of these rights, email privacy@i-educate.com or message us through Help & Support. We verify you through your registered email and reply within the time the law allows.

Automated decisions

Daily Review scheduling, study statistics, revision plans and Check My Work feedback are produced automatically. They have no legal or similarly significant effect: they decide what you study next and point out likely mistakes in your own work, and they are not assessments, grades or authoritative corrections.

Our service providers

• OpenAI: the AI that generates your study sets, briefs, scenarios and Check My Work feedback. Contractually it may not use your content to train its models.
• Railway: application and frontend hosting and database, United States.
• Amazon Web Services (AWS S3): storage for uploaded book files and generated diagrams, United States.
• Stripe: payment processing and subscription billing.
• Resend: verification, receipts, reminders and support replies.
• We keep this list current, and material changes are reflected in the date shown at the top of this policy.

Where your data is processed

We and our providers operate mainly in the United States. If you use BILKEYS from elsewhere, your data is transferred to and processed in the United States and possibly other countries, using safeguards such as the EU Standard Contractual Clauses where they are required.

Security

We protect your data with encryption in transit (TLS), passwordless sign-in with no password ever stored, short-lived access tokens that can be revoked, per-record access rules so learners can only reach their own data, role-based internal access, time-limited links for stored files, and routine monitoring. No system is perfectly secure; if a breach affects your personal information we will notify you and the authorities as the law requires.

Communication choices

Unsubscribe from marketing email using the link in it. Control study reminders and review notifications in Settings or your device settings. Service messages (receipts, security and renewal notices) continue while your account exists.

Changes to this policy

We may update this policy. For material changes we will tell you by email and/or a notice in the app before they take effect, and we will update the date shown above. Links to third-party services are governed by their own policies.

Contact

For any privacy question or request, message us through Help & Support inside the app or email privacy@i-educate.com. i-educate LLC, 48 Brentsmill Drive, Stafford, Virginia 22554, United States (formed in Delaware).