Privacy Policy

1. Who We Are

Aim for Five is an educational platform for AP® exam preparation. It is operated as a personal project. For any privacy-related enquiries you can contact us at info@aimforfive.com.

2. Data We Collect

We collect the following categories of personal data:

• Account data — when you sign up through our authentication provider (Clerk) we receive your email address, display name, and profile picture if you sign in via a social provider.
• Usage data — pages you visit, features you interact with, and timestamps of your activity. This data is collected via analytics services only with your consent.
• Device data — browser type, operating system, and screen resolution, collected via analytics services only with your consent.
• Flashcard progress — your spaced-repetition review state is stored in your browser's local storage and is never transmitted to our servers.

3. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR) we rely on the following legal bases:

• Contract performance (Art. 6(1)(b)) — processing your account data is necessary to provide the educational service you signed up for.
• Consent (Art. 6(1)(a)) — analytics and non-essential cookies are only activated after you give explicit consent via our cookie banner.
• Legitimate interest (Art. 6(1)(f)) — maintaining the security and availability of our service.

4. How We Use Your Data

• To provide and maintain the Aim for Five study platform.
• To authenticate your identity and manage your account.
• To analyse usage patterns and improve the service (only with your consent).
• To ensure the security of our service and prevent abuse.

Classes

If you join a teacher's class, that teacher sees the name you enter when you join and the work you do for their assignments: answers, scores, when you turned the work in, and anything you write, with its AI score. They do not see anything else you do on the site. If you leave the class, or your teacher removes you, the work you turned in for that class is deleted. Teachers see only the classes they created.

5. Third-Party Services

Hosting. Aim for Five runs on a server we manage ourselves, deployed with Coolify, an open-source tool we run on that server. Coolify is software, not a company we send your data to. Our server keeps logs that may include IP addresses and the pages requested; we use them only to keep the site running and secure.

We share personal data only with the service providers necessary to operate Aim for Five. We do not sell your personal data to any third party.

• Clerk — authentication and account management. Privacy policy
• MongoDB Atlas — database hosting for educational content and your study data. Privacy policy
• Bunny.net — delivers podcast audio files. When you play an episode, your browser requests the file from Bunny, which sees your IP address. Privacy policy
• YouTube — review videos play in an embedded YouTube player, which loads only when you open a video. YouTube may then set its own cookies. Privacy policy
• Wikimedia Commons — some historical images in practice questions load directly from Wikimedia, which sees your IP address when they do. Privacy policy
• DeepSeek — scores written answers when you ask for an AI score. Only the answer and the question are sent, never your name or account details. Privacy policy
• Sentry — records errors that happen on the site or in your browser so we can fix them: what broke, the page, and your browser type. We don't send your name, email, answers, or anything you write. Privacy policy
• Google Analytics — usage analytics, activated only with your consent. Privacy policy

6. International Data Transfers

Our service providers process data in the United States. These transfers are safeguarded by Standard Contractual Clauses (SCCs) or equivalent mechanisms provided by each vendor. By using Aim for Fiveyou acknowledge that your data may be transferred to and processed in the United States.

7. Data Retention

• Account data — retained while your account is active. Deleted within 30 days of an erasure request.
• Server logs — retained for up to 30 days.
• Local storage data — controlled entirely by your browser; you can clear it at any time.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Access (Art. 15) — request a copy of your personal data.
• Rectification (Art. 16) — correct inaccurate data.
• Erasure (Art. 17) — request deletion of your personal data.
• Restriction (Art. 18) — restrict the processing of your data.
• Portability (Art. 20) — receive your data in a portable format.
• Objection (Art. 21) — object to processing based on legitimate interest.
• Withdraw consent (Art. 7(3)) — withdraw consent for analytics at any time via the cookie settings on our site.

To exercise any of these rights, email us at info@aimforfive.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.

9. Children's Privacy

Aim for Five is an educational tool intended for students aged 13 and older. If you are under 16 years of age, you may need parental or guardian consent to use this service, depending on the laws of your country. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that data promptly.

10. Cookies

We use cookies and similar technologies for authentication and, with your consent, analytics. For full details see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the “Last updated” date at the top of this page. We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us at info@aimforfive.com.