Legal

Privacy Policy

How CaribGenius collects, uses, shares, and protects your information.

Last updated: May 11, 2026

1. Introduction

CaribGenius ("we", "us", or "our") provides an exam preparation platform for Caribbean Secondary Education Certificate (CSEC) and Caribbean Advanced Proficiency Examination (CAPE) candidates, operated through mobile apps and the website at caribgenius.tech. This Privacy Policy explains what information we collect, how we use and share it, and your rights in relation to that information.

By creating an account or using CaribGenius, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the platform.

2. Information We Collect

We collect the following categories of information:

  • Account information: name, email address, and password when you register.
  • Profile information: territory, exam path (CSEC, CAPE, or Both), enrolled subjects, target grade, exam date, and study schedule.
  • Usage data: quiz attempts, practice sessions, diagnostic results, mock exam attempts, lesson views, AI Explain interactions, and derived progress metrics (readiness score, streak, weak topics).
  • Device information: device type, operating system version, app version, push notification tokens, and crash diagnostic data.
  • Identifiers for free-tier advertising (mobile apps only): on iOS, the IDFA (only with your App Tracking Transparency consent); on Android, the Advertising ID. These are used by Google AdMob to serve ads on free tier and are never collected for paid users. See §5 below.
  • Subscription status: tier (Free, Pro, Premium), billing period, expiry date, and the platform of purchase. Card and payment details are processed entirely by Apple, Google, or Stripe — we never see or store card numbers.

3. How We Use Your Information

We use your information to:

  • Provide and personalise the exam preparation experience: diagnostic assessments, lesson recommendations, weak-topic surfacing, and readiness tracking.
  • Manage your account, subscription, and exam-path scope.
  • Generate AI Explain tutoring text for individual questions (see §6).
  • Send you push notifications you have opted into (streak reminders, mock-day prompts, season pushes).
  • Show advertisements to free-tier users only via Google AdMob (see §5). Paid users never see ads.
  • Detect, prevent, and respond to abuse, fraud, or misuse of the platform.
  • Improve the platform by analysing aggregate, anonymised usage patterns.
  • Comply with legal obligations.

4. Third-Party Services We Use

CaribGenius integrates the following third-party services. Each is governed by its own privacy policy, which we encourage you to read:

  • Google AdMob — advertising for free-tier mobile users only. Receives IDFA / Advertising ID, IP address, ad-request metadata, and SKAdNetwork beacons. policies.google.com/privacy.
  • Anthropic — powers the AI Explain feature. Receives the question content, choice text, model explanation, and your authenticated user identifier (so we can rate-limit). Does not receive your name, email, or any cross-question data. anthropic.com/legal/privacy.
  • Apple App Store and Google Play — process all subscription billing on iOS and Android respectively. We receive only the subscription tier, period, and expiry. apple.com/legal/privacy · policies.google.com/privacy.
  • Firebase Cloud Messaging — delivers push notifications. Receives device push tokens. firebase.google.com/support/privacy.
  • Hostinger / our hosting provider — operates the underlying infrastructure that stores account data, progress, and content.

5. Advertising and IDFA / Advertising ID (Free Tier Only)

Free-tier users see banner ads on Home, Progress, and History screens, and one interstitial ad after completing a mock exam. Ads are served by Google AdMob.

On iOS 14.5 and above, we ask for your permission via the App Tracking Transparency prompt before allowing personalised ads. If you decline, you will still see ads, but they will not be personalised based on your IDFA. On Android, ads use the system Advertising ID, which you can reset or limit at any time in your device settings.

If you upgrade to Pro or Premium, all advertising is disabled immediately and the ad SDK is no longer queried. Your IDFA / Advertising ID is no longer transmitted for ads while you remain on a paid tier.

6. AI Explain

Our AI Explain feature sends the question stem, answer choices, your selected answer, and a small amount of grounding metadata (topic, objective, syllabus tier) to Anthropic's API to generate a tutoring-style explanation. Anthropic does not train its models on the data we send via the API. We do not send your name, email address, age, or any other personally identifying information to Anthropic. Each request is rate-limited and bounded by a hard daily ceiling.

7. Data Sharing

We do not sell your personal information to third parties. We share data with the third-party services listed in §4 strictly to deliver the platform you are using. We may also disclose information when legally required (e.g. valid subpoena, court order) or to protect the rights, safety, or property of CaribGenius or our users.

8. Data Retention

We retain your account and progress data for as long as your account is active. If you delete your account, your personal data is removed within 30 days, except where retention is required by law (e.g. invoice records for tax purposes). You can request deletion at any time at caribgenius.tech/delete-account.

9. Children and Students

CaribGenius is designed for secondary-school and sixth-form students. We do not knowingly collect personal information from children under 13 without verifiable parental consent. If you are a parent or guardian and believe your child under 13 has registered without consent, please contact us via our help page and we will remove the account.

10. Your Rights

Depending on your location (Caribbean Data Protection Acts, EU GDPR, UK GDPR, CCPA, etc.), you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data (see caribgenius.tech/delete-account).
  • Object to or restrict certain processing.
  • Withdraw consent for notifications, tracking, or marketing at any time via the app settings or your device's permissions.
  • Lodge a complaint with your local data-protection authority.

11. Security

We use industry-standard security practices including encrypted data storage, HTTPS-only communication, hashed passwords, Laravel Sanctum bearer-token authentication for API access, and per-user rate limits on sensitive endpoints (AI Explain, login, password reset). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. International Transfers

Our infrastructure is hosted in data centres operated by our hosting provider. Some third-party services (AdMob, Anthropic, Firebase, Apple, Google) process data in the United States and other jurisdictions. Where required, these transfers are governed by Standard Contractual Clauses or equivalent legal mechanisms.

13. Changes to This Policy

We may update this policy as the platform evolves. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be communicated in-app or via email. Continued use of CaribGenius after updates constitutes acceptance of the revised policy.

14. Contact

For privacy-related questions, deletion requests, or to exercise any of the rights in §10, please contact us via our help page.