Effective October 15, 2026

Privacy policy

This policy explains what Graphite Learning, Inc. ("Graphite SAT", "we") collects when students and parents use graphiteprep.com and the Graphite SAT app, why we collect it, and the choices you have.

1. What we collect

  • Account details: name, email address, grade, planned test date, target score, and a password stored as a salted hash.
  • Practice data: the questions you answer, your answers, time spent, hints used, and practice test scores.
  • Tutor conversations: messages you send to the AI tutor and its replies.
  • Parent details: a parent or guardian's name and email when a student adds them for progress emails.
  • Billing details: handled by our payment processor. We see the card brand, last four digits and expiry date, never the full card number.
  • Account history: while you're signed in, we save what you do on Graphite SAT to your account: every question you answer and whether it was right, changes to your profile and settings, rewards, market trades, and the pages you open. It's encrypted, it never includes passwords, you can read it in Settings > History or download it, and it's deleted with your account.
  • Copy and paste on questions: when a student copies text from a question or pastes into an answer, we record when it happened and on which page (not what was copied). The first time, the page shows a warning. After that, each time is recorded and a connected parent gets an email.
  • Usage data (only if you accept analytics cookies): the pages you open on Graphite SAT and their titles, the website or campaign link that brought you here, the kind of device, browser and operating system, screen and window size, language and time zone, how long each page was open, how far you scrolled, and clicks on the site's main buttons. A random visitor id in a cookie ties your visits together, and when you're signed in, this is tied to your account. See the cookie policy.
  • Your cookie choices: whether you accepted analytics, when, the policy version, and whether your browser sent a Global Privacy Control signal. We keep this as the record of your consent.

We don't collect what you do on other websites, your precise location, or a device fingerprint, and we don't store IP addresses with usage data.

2. How we use it

We use this information to run your account, choose your daily practice, explain mistakes, send progress emails you've asked for, process payments, answer support requests, and keep the service secure. We don't sell personal information and we don't show advertising.

3. The AI tutor and your data

Your answers and tutor messages are sent to our AI provider to generate explanations. Our contract with that provider prohibits it from using student data to train its models. We review a small sample of anonymized tutor conversations to check explanation quality.

4. Students under 18

Graphite SAT is built for high school students. We don't knowingly collect information from children under 13. If you believe a child under 13 has created an account, email us and we'll delete it. Parents and guardians of students under 18 can ask to see, correct or delete their student's data at any time.

5. Who we share it with

  • Service providers that host the site, process payments, send email and run the AI tutor, under contracts that limit their use of the data.
  • A parent or guardian the student has added, who receives progress summaries.
  • Authorities, when required by law or to protect someone's safety.

We don't share data with colleges, the College Board or advertisers.

6. How long we keep it

Usage data is deleted after 13 months. Turning analytics off in cookie settings deletes the usage data from that browser that isn't tied to an account. We keep account and practice data while your account is open. If you close your account, we delete it within 30 days, except billing records we must keep for tax purposes.

7. Your rights

You can ask to access, correct, download or delete your data. Depending on where you live, including California and other US states, you may have additional rights under state law. We won't treat you differently for using them. Email privacy@graphiteprep.com and we'll respond within 30 days.

8. Security

All traffic uses HTTPS. Passwords are hashed, data is encrypted at rest, and staff access is limited and logged. No system is perfectly secure, so we'll notify you promptly if a breach affects your information.

9. Changes to this policy

If we make a material change, we'll email account holders and update the effective date at the top of this page at least 14 days before it takes effect.

10. Contact us

Graphite Learning, Inc.
Email: privacy@graphiteprep.com