Privacy Policy

1. Introduction

This Privacy Policy explains how Carib Excellence Academy Ltd (“CariLearn”, “we”, “us”, or “our”) collects, uses, stores, and protects the personal information of users who access our platform at caribexcellence.com and any associated services. This policy applies to all users, including students, parents, guardians, and educators.

By creating an account or using CariLearn, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the platform.

2. Information We Collect

We collect the following categories of information:

• Account data — name, email address, password (hashed), account type (student, parent, educator), and school or institution name where provided
• Academic data — subject enrolments, assessment submissions, grades, AI-generated feedback, progress records, and diagnostic placement results
• Usage data — pages visited, features used, session duration, and interaction patterns within the platform
• Device data — browser type, operating system, IP address, and device identifiers collected automatically when you access the platform

3. How We Use Your Information

We use collected information to:

• Provide and maintain the CariLearn platform and its features
• Track student progress and generate performance reports for students and linked parents
• Power AI-based grading and feedback on student submissions
• Communicate important account and platform updates
• Improve our content, features, and overall user experience
• Detect and prevent fraud, abuse, or security incidents

4. Student and Minor Privacy

We take the privacy of minors seriously. CariLearn is designed for secondary school students, many of whom may be under the age of 18. We are aware of the requirements of the Children's Online Privacy Protection Act (COPPA) and similar international regulations, and we apply the following practices:

• Students under 16 must have a parent or guardian create and manage their account
• Parental consent is obtained before collecting personal information from minor students
• Data collection from minors is limited to what is necessary for educational purposes
• Parents may review, correct, or request deletion of their child's data at any time

5. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with the following third-party service providers, strictly to operate the platform:

• AI Grading (Anthropic) — student submissions are sent to Anthropic's API for AI-powered feedback and grading. Anthropic does not use this data to train its models.
• Payment Processing (PayPal) — payment information is handled directly by PayPal. We do not store credit card or bank account details on our servers.
• Email Communications (Resend) — transactional emails such as account verification and password resets are sent through Resend.

6. Cookies and Tracking

CariLearn uses essential session cookies to keep you logged in and to maintain your preferences while using the platform. These cookies are necessary for the platform to function correctly.

We do not use third-party advertising trackers, and we do not serve targeted advertisements. We do not share cookie data with advertising networks.

7. Data Security

We implement industry-standard security measures to protect your information:

• All data is transmitted over encrypted HTTPS connections
• Passwords are hashed using secure, one-way algorithms
• Our platform is hosted on Vercel with PostgreSQL database infrastructure
• Access to production data is restricted to authorised personnel only
• Regular security reviews are conducted to identify and address vulnerabilities

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. Specific retention practices include:

• Active accounts: data is retained for the duration of the account's existence
• Deletion on request: you may request deletion of your account and associated data at any time by contacting us
• Academic records: anonymised academic performance data may be retained for analytical and platform improvement purposes after account deletion

9. Your Rights

You have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct any inaccurate or incomplete data
• Deletion — request that we delete your personal data, subject to any legal retention requirements
• Data portability — request a machine-readable export of your data

To exercise any of these rights, please contact us at the address listed below.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will notify you by email or through a prominent notice on the platform at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

11. Contact

If you have questions or concerns about this Privacy Policy or how your data is handled, please contact us: