What we collect, and why.

Account. Your email address, used to sign you in via a magic link (no password to store or leak).

Quiz and exam activity. The questions you answer, whether multiple-choice answers were correct, and the free-response answers you submit — along with the AI-generated score and feedback for each. This is what powers your progress view and the "areas to work on" breakdown.

Diagram photos (optional). For a small number of free-response questions that ask you to draw a diagram or graph, you can optionally upload a photo of your hand-drawn work alongside your typed answer. Every photo is automatically screened for objectionable content before it's ever stored — a flagged photo is rejected and never saved, anywhere. Accepted photos are deleted automatically after 30 days.

Purchases. Which subject you bought and a reference to the Stripe transaction. We never see or store your card number — Stripe handles payment directly and only hands us a confirmation.

Basic usage counts. We may track coarse, non-identifying usage counts (e.g. how many people visit a page) to understand whether the product is working. We do not use ad-tracking pixels, third-party analytics scripts, or cross-site tracking of any kind.

We don't sell your data, and we don't share it for advertising. A few vendors process it on our behalf, strictly to run the product:

• Supabase — hosts our database and handles authentication.
• Stripe — processes payment for a subject purchase.
• Anthropic (Claude API) — grades your free-response answers against the question's rubric. Your submitted answer text — and, when you attach one, your diagram photo — is sent to Claude for this purpose only.
• Microsoft Azure (Blob Storage) — stores an optional diagram photo you upload, only until it's automatically deleted 30 days later.
• Azure AI Content Safety — screens every diagram photo for objectionable content before it's stored or graded. A flagged photo is rejected and never saved.
• Our email provider — delivers your magic-link sign-in email.

We keep your account and activity data for as long as your account exists, so your progress and purchase history stay intact. You can request deletion of your account and all associated data at any time — see Contact below.

One exception: an uploaded diagram photo is deleted automatically 30 days after upload, regardless of your account status — this happens on a fixed schedule, not something you or we need to manage manually. A photo flagged by content screening is never stored in the first place.

If your student uses AP Maxing, you're welcome to review what we've collected on their account or request that it be deleted. Reach out at the email below and we'll handle it directly — no account login required to make the request.

We use a session cookie strictly to keep you signed in. We do not use third-party advertising or tracking cookies.

If how we collect or use data changes meaningfully, we'll update this page and change the date above. We won't expand data collection beyond what's described here without updating this policy first.

Questions, data requests, or deletion requests — reach us at admin@jmportalservices.com.