Effective date: 2026-05-13
Privacy Policy
1. Data Controller
The data controller for personal data processed via the Praxis IB platform is Praxis IB. You can reach us for any privacy-related request at contact@praxisib.com.
2. Personal Data We Process
We process the following categories of personal data:
- •Identity & contact: full name, email address, optional avatar.
- •Account data: role (student / teacher), school or class identifier, subscription status, trial dates.
- •Educational content: practice answers, coding exercise submissions, IA drafts and comments you create or generate.
- •Interactive lessons: the lesson sections you finish, your written answers to exam-style questions with the marks you give yourself, and your unit test attempts and scores. If you belong to a class, your class teacher can see these, including your written answers.
- •Videos: how much of each video lesson you have played in the Praxis IB player (the parts you played, where you stopped, and whether you watched at least 80%). If you belong to a class, your class teacher can see this.
- •Usage data: pages visited, features used, timestamps, score history, streaks.
- •Technical data: IP address, browser and device type, language preference, session cookies.
- •Communications: emails you send to contact@praxisib.com.
3. Purposes of Processing
We process your personal data for the following purposes:
- •creating and securing your account, verifying your identity at sign-in;
- •providing the Platform's features (practice questions, AI feedback, IA planner, interactive lessons, dashboards);
- •measuring your progress and showing your performance back to you;
- •preventing fraud, abuse and security incidents (e.g. enforcing rate limits, detecting anomalies);
- •communicating service-related notices, product updates and (with consent) marketing emails;
- •complying with legal obligations and responding to lawful requests.
4. Sub-Processors and Third Parties
We rely on a small set of trusted infrastructure providers to deliver the Platform. These providers process personal data on our instructions only and are bound by their own data protection commitments:
- •Supabase (database, authentication and storage) — primary data store.
- •Anthropic (Claude AI models) — generates practice questions, evaluates answers, produces feedback. Inputs may include the question text and your written answer; we do not send your account email or avatar to the model.
- •Vercel (hosting and serverless functions) — runs the Platform.
- •Google (OAuth sign-in) — only if you choose to sign in with Google.
These providers may store data in jurisdictions outside Türkiye (including the European Union and the United States). Standard contractual clauses or equivalent safeguards apply.
5. AI-Powered Features
Praxis IB uses Anthropic's Claude API to power AI-generated practice questions, answer evaluation, and IA feedback features. When you use these features, your inputs (answers, IA text) are sent to Anthropic for processing. Anthropic's privacy policy applies to this data: anthropic.com/privacy.
We do not store your inputs beyond what is necessary to provide the service.
6. Retention
- •Account data: kept for the lifetime of your account, then deleted within 30 days of account deletion.
- •Educational content (practice sessions, exercise submissions, IA drafts): kept while your account is active; deleted within 30 days of account deletion.
- •Interactive lesson progress, written answers and unit test attempts: you can delete them at any time on the Your progress page; they are deleted automatically 24 months after the last time you saved anything in the lessons, and immediately when you delete your account.
- •Video watch history: you can delete it at any time on the Your progress page; it is deleted automatically 24 months after you last watched a video, and immediately when you delete your account.
- •Server logs and security telemetry: kept up to 90 days, then aggregated or deleted.
- •Email correspondence: kept for up to 24 months from the last reply for support and legal traceability.
- •Backups: rotated and overwritten on a rolling 30-day basis.
7. Your Rights (GDPR / KVKK)
Subject to applicable law, you have the right to:
- •learn whether we process your personal data, and request a copy;
- •request correction of inaccurate or incomplete data;
- •request deletion of your data (right to be forgotten);
- •object to or restrict certain processing activities;
- •withdraw consent for processing based on consent (e.g. marketing emails);
- •lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or your local data protection authority.
To exercise any of these rights, email contact@praxisib.com. We respond within 30 days.
8. Cookies
We use only cookies that are strictly necessary for the Platform to function — primarily an authentication session cookie set after sign-in and a small language-preference cookie.
We do not use third-party advertising cookies, and we do not currently use analytics cookies that profile individual users.
9. Security
Personal data is encrypted in transit (HTTPS) and at rest by our infrastructure providers. Access to production data is restricted to a minimal set of personnel and protected by multi-factor authentication.
No system is 100% secure. If we become aware of a personal data breach affecting you, we will notify you and the competent authority within the timeframes required by applicable law.
10. Children
The Platform is not intended for children under 13. Users between 13 and 18 must have parental or guardian consent. If we learn that we have collected personal data from a child under 13 without verifiable consent, we will delete that data promptly.
11. Contact
For privacy-related questions or requests, please email contact@praxisib.com.