YALEX.AIHome

Privacy Policy

Last updated: September 24, 2026

Yalex (“Yalex,” “we,” “us”) operates the Yalex AI mathematics tutoring platform, including the website and related services (the “Service”). This policy explains what information we collect, why we collect it, how we use and protect it, and the choices you have. It is written to be consistent with British Columbia's Personal Information Protection Act (PIPA), the federal Personal Information Protection and Electronic Documents Act (PIPEDA), and substantially similar legislation.

By using the Service, you acknowledge that you have read this policy. If you do not agree with it, please do not use the Service.

1. Information we collect

We collect only what the Service needs to function:

  • Account information. Your email address, username, and authentication credentials. If you sign in with Google, Google shares with us the profile information its consent screen describes (such as your email address and display name). We do not receive your Google password.
  • Learning data. Your placement answers, practice and assessment responses, correctness, timing of sessions, streaks, module progress, and computed level. This is the core of the adaptive engine.
  • Tutor conversations. The messages you send to the AI tutor and the responses generated for you.
  • Community content. Forum posts, replies, and the username and timestamp displayed with them.
  • Technical data. Information generated automatically when you use the Service, such as IP address, browser type, and error logs, used for security, abuse prevention, and debugging.

We do not require you to provide government identification, financial information, or health information, and we do not collect them.

2. How we use your information

  • To operate, secure, and improve the Service;
  • To adapt problem difficulty, compute your level, and generate mastery maps and progress reports;
  • To provide AI tutor responses to the questions you ask;
  • To display your public forum contributions under your username;
  • To communicate with you about your account, security, or changes to the Service;
  • To meet legal obligations and enforce our Terms of Service.

We do not sell personal information, and we do not use your information to advertise third-party products to you.

3. Artificial intelligence processing

When you use the AI tutor, your message is transmitted to one or more third-party AI model providers solely to generate the reply you requested. Those providers process the text of your message under their own terms and privacy commitments.

Do not type personal or identifying information into AI fields — including your full name, address, phone number, school name, or anyone else's personal information. Treat anything you send to the tutor as content you are comfortable having processed by a third-party model.

4. How we share information

We share information only with the following categories of recipients, and only to the extent necessary:

  • Infrastructure providers. We use Supabase for authentication, database storage, and file storage. Your account and learning data are stored on infrastructure operated by Supabase.
  • AI model providers. As described in section 3, limited to the text of your tutor messages.
  • Legal process. If we are required by law, court order, or a governmental authority to disclose information, we may do so, and where lawful we will attempt to notify you.
  • Business transfers. If Yalex is involved in a merger, acquisition, or sale of assets, user information may be transferred subject to this policy or a notice to you.

Forum posts and replies are visible to other users of the Service by design. Everything else is private to your account.

5. Cookies and local storage

We use only functional cookies and browser storage: session tokens that keep you signed in, temporary tokens that connect your placement result to a new account, and preferences such as which update notes you have already seen. As of the last-updated date above, the Service does not set advertising cookies and does not include third-party advertising or cross-site tracking scripts.

6. Data retention

We retain account and learning data for as long as your account exists. If you ask us to delete your account, we delete or de-identify your personal information within a reasonable period, except where we must retain records to comply with law, resolve disputes, or enforce our agreements. Forum content you posted may remain visible until removed; contact us and we will remove it with your request.

7. Security

We apply reasonable safeguards appropriate to the sensitivity of the data, including encryption in transit, password handling managed by Supabase Auth, and access controls on our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach of personal information creates a real risk of significant harm, we will notify affected individuals and the relevant regulator as required by PIPEDA.

8. Your rights and choices

Under PIPEDA and comparable laws, you may:

  • Request access to the personal information we hold about you;
  • Request correction of inaccurate information;
  • Withdraw consent for collection or use, subject to legal consequences (for example, we cannot provide adaptive practice without your learning data);
  • Request deletion of your account and data;
  • Challenge our compliance by contacting us, and, if unsatisfied, by complaining to the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, contact us at the address in section 12. We respond within the timelines applicable law requires.

9. Children and minors

The Service is designed for students in grades 9 to 12 and is not directed to children under 13. If you are under the age of majority in your province or territory, you may use the Service only with the involvement and consent of a parent or guardian, who agrees to this policy on your behalf. If we learn that we hold personal information of a child under 13 without verifiable parental consent, we will delete it.

10. Where your data is processed

Yalex is operated from Canada. Our infrastructure providers (including Supabase and AI model providers) may store or process data on servers located outside Canada, in which case the information is subject to the laws of that jurisdiction, and we rely on contractual and legal mechanisms to protect it.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date above reflects the current version. For material changes, we will provide notice in the Service before they take effect. Continued use after changes take effect constitutes acceptance of the revised policy.

12. Contact

Privacy questions, access requests, and deletion requests: support@yalex.ai.