Privacy Policy

The data controller for personal data processed via the Praxis IB platform is Praxis IB. You can reach us for any privacy-related request at contact@praxisib.com.

We process the following categories of personal data:

• •Identity & contact: full name, email address, optional avatar.
• •Account data: role (student / teacher), school or class identifier, subscription status, trial dates.
• •Educational content: practice answers, IA drafts, study notes, flash cards, checklists you create or generate.
• •Usage data: pages visited, features used, timestamps, score history, streaks.
• •Technical data: IP address, browser and device type, language preference, session cookies.
• •Communications: emails you send to contact@praxisib.com.

We process your personal data for the following purposes:

• •creating and securing your account, verifying your identity at sign-in;
• •providing the Platform's features (practice questions, AI feedback, IA planner, study tools, dashboards);
• •measuring your progress and showing your performance back to you;
• •preventing fraud, abuse and security incidents (e.g. enforcing rate limits, detecting anomalies);
• •communicating service-related notices, product updates and (with consent) marketing emails;
• •complying with legal obligations and responding to lawful requests.

We rely on a small set of trusted infrastructure providers to deliver the Platform. These providers process personal data on our instructions only and are bound by their own data protection commitments:

• •Supabase (database, authentication and storage) — primary data store.
• •Anthropic (Claude AI models) — generates practice questions, evaluates answers, produces feedback. Inputs may include the question text and your written answer; we do not send your account email or avatar to the model.
• •Vercel (hosting and serverless functions) — runs the Platform.
• •Google (OAuth sign-in) — only if you choose to sign in with Google.

These providers may store data in jurisdictions outside Türkiye (including the European Union and the United States). Standard contractual clauses or equivalent safeguards apply.

• •Account data: kept for the lifetime of your account, then deleted within 30 days of account deletion.
• •Educational content (practice sessions, IA drafts, study materials): kept while your account is active; deleted within 30 days of account deletion.
• •Server logs and security telemetry: kept up to 90 days, then aggregated or deleted.
• •Email correspondence: kept for up to 24 months from the last reply for support and legal traceability.
• •Backups: rotated and overwritten on a rolling 30-day basis.

Subject to applicable law, you have the right to:

• •learn whether we process your personal data, and request a copy;
• •request correction of inaccurate or incomplete data;
• •request deletion of your data (right to be forgotten);
• •object to or restrict certain processing activities;
• •withdraw consent for processing based on consent (e.g. marketing emails);
• •lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or your local data protection authority.

To exercise any of these rights, email contact@praxisib.com. We respond within 30 days.

We use only cookies that are strictly necessary for the Platform to function — primarily an authentication session cookie set after sign-in and a small language-preference cookie.

We do not use third-party advertising cookies, and we do not currently use analytics cookies that profile individual users.

Personal data is encrypted in transit (HTTPS) and at rest by our infrastructure providers. Access to production data is restricted to a minimal set of personnel and protected by multi-factor authentication.

No system is 100% secure. If we become aware of a personal data breach affecting you, we will notify you and the competent authority within the timeframes required by applicable law.

The Platform is not intended for children under 13. Users between 13 and 18 must have parental or guardian consent. If we learn that we have collected personal data from a child under 13 without verifiable consent, we will delete that data promptly.

For privacy-related questions or requests, please email contact@praxisib.com.