Privacy Policy
Score Pilot Inc. · Effective May 7, 2026
This Privacy Policy describes how Score Pilot (“Score Pilot,” “we,” “us,” or “our”), operated by Score Pilot Inc., collects, uses, and shares information about you when you access or use our SAT practice platform at scorepilotai.com (the “Service”). By using the Service, you agree to the practices described in this policy.
If you are a California resident, please see the Your Privacy Rights (CCPA) section for additional disclosures.
1. Information We Collect
Account Information
When you register using an invitation code, we collect your email address, display name, and the invitation code used.
Application Information Alpha Test Only
During the alpha test period, when you apply for access we collect the following information to evaluate access and improve the product: current grade, most recent SAT score, number of exams taken, preparation stage, weekly study time, test timeline, preparation methods, primary device, location, target score, planned test date, phone number, and WeChat ID (optional). This information is used solely to coordinate alpha test access and improve the platform during the testing period. It will not be used for marketing or shared with third parties beyond what is described in this policy.
Academic Performance Data
When you complete practice exams, we collect your question answers, whether each answer was correct, time spent per question, your overall scores (total, Reading & Writing, Math), and exam session metadata (section, mode, status).
Usage & Device Information
We automatically collect information about how you access the Service, including: device type (mobile, tablet, desktop), browser name and version, operating system name and version, user agent string, and language preference.
IP-Derived Location
On your first visit and each time you start an exam, we record your approximate geographic location derived from your IP address: country, region (state/province), and city. We do not collect or store your precise GPS location.
AI Interaction Metadata
Each time you use an AI-powered feature (question explanations, voice tutor), we log metadata about the request: the AI provider and model used, token counts, response latency, and estimated cost. We also log the purpose of each call (e.g., explanation, text-to-speech). We do not retain the content of AI responses beyond the immediate API call for purposes other than displaying it to you.
Voice Session Data
When you use the voice tutor, we record session metadata: duration, live connected duration, how the session ended, a count of tool calls made, and any post-call helpfulness rating you choose to submit. Full conversation transcripts are only stored when our engineering team has enabled a debug mode on the server side; any such transcripts are automatically deleted after 30 days.
Bug Reports
When you submit a bug report, we collect the free-text description you provide, the question and answer context at the time of submission, and any associated AI call identifiers.
Diagnostic & Bug Analysis Data When Enabled
We may enable diagnostic tooling to help identify and resolve technical issues. When enabled, this may include system logs, request traces, app UI screenshots (limited to Score Pilot’s own interface — not your full screen, desktop, or other applications), and network request and response data. Sensitive headers (such as Authorization and cookies) are redacted before capture. This data is used solely for debugging and product improvement and is retained for up to 30 days.
2. How We Use Your Data
- Providing and operating the Service, including delivering AI-powered explanations and voice tutoring
- Personalizing your study experience based on your performance history
- Maintaining and improving the accuracy and reliability of the platform
- Tracking usage patterns and analytics to improve the Service (using aggregated, non-personally identifiable data where possible)
- Detecting and preventing fraud, abuse, and unauthorized access
- Complying with legal obligations and enforcing our Terms of Service
- Communicating with you about your account or the Service (we do not send marketing emails)
We do not use your data for interest-based advertising or sell your personal information to third parties.
3. Third-Party Services & Data Sharing
We share data with the following categories of third parties solely to provide the Service:
| Service | Data Sent | Purpose |
|---|---|---|
| Anthropic (Claude) | Question text, answer choices, images, and your first name — sent on each explanation request. | |
| Google (Gemini Live) | Streaming audio and text during real-time voice tutoring sessions. | |
| Google Cloud TTS | Explanation text for conversion to audio. | |
| Sentry | Error data, stack traces, and request metadata (authorization and cookie headers are redacted). Currently disabled during alpha; may be enabled in future. | |
| Supabase | All stored user data (database hosting in the United States). | |
| Vercel | All traffic (infrastructure hosting); also provides IP-based geolocation headers we use for access logging. |
We do not sell your personal information. We do not share your data with advertisers, data brokers, or analytics companies. We do not use your data for interest-based advertising.
We may disclose personal information if required by law, legal process, or government request, or to protect the rights, safety, or property of Score Pilot, our users, or others.
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change via email or a prominent notice on the Service.
4. AI & Voice Data
Anthropic Claude
Question content and your first name are sent to Anthropic’s API to generate explanations. Anthropic’s use of this data is governed by Anthropic’s Privacy Policy. Score Pilot does not use Anthropic API responses to train its own models.
Google Gemini Live
Voice tutor sessions are processed in real time by Google’s Gemini API. Score Pilot does not store your voice audio. We only retain session metadata (duration, live connected duration, end reason, tool usage, and optional helpfulness rating). Google’s use of this data is governed by Google’s Privacy Policy.
Google Cloud Text-to-Speech
Explanation text is sent to Google Cloud TTS to generate audio playback. This data is governed by Google’s Privacy Policy. Score Pilot does not use TTS responses to train its own models.
5. Cookies & Tracking
We use the following cookies to operate the Service:
- sp_uid — stores your user identifier; expires after 1 year. Required for the Service to function.
- invited — records that your invitation code has been verified; expires after 7 days.
We do not use third-party advertising cookies or tracking pixels. We do not fingerprint your browser for advertising purposes.
If you are a California resident and your browser broadcasts a Global Privacy Control (GPC) signal, we honor it as a request to opt out of any sale or sharing of your personal information.
6. Data Retention
| Data Category | Retention Period |
|---|---|
| Account information | Retained while your account is active; deleted upon a valid deletion request. |
| Application information (alpha only) | Retained for the duration of the alpha test period; subject to deletion upon request. |
| Academic performance data | Retained while your account is active. |
| Access logs (device, location) | Retained for up to 12 months for security and analytics purposes. |
| AI interaction metadata | Retained for up to 12 months for cost tracking and analytics. |
| Voice session metadata | Retained while your account is active. |
| Voice debug transcripts (when enabled) | Automatically deleted after 30 days. |
| Bug reports | Retained for up to 24 months or until you request deletion. |
| Diagnostic data (when enabled) | Automatically deleted after 30 days. |
| Aggregated / de-identified analytics | May be retained indefinitely; cannot be linked back to you. |
7. Data Security
We implement industry-standard safeguards to protect your personal information, including: TLS encryption for all data in transit, HTTPOnly and Secure cookies, CAPTCHA and rate-limiting protections on public application endpoints, and access controls limiting who can view your data. Our database is hosted on Supabase with standard cloud security practices.
No system is completely secure. While we take reasonable measures to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at customer.service@scorepilotai.com.
8. Children’s Privacy
Score Pilot is intended for users who are 16 years of age or older. Users between the ages of 13 and 15 may use the Service only with the verified consent of a parent or legal guardian, who agrees to this Privacy Policy and our Terms of Service on the minor’s behalf.
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13 without parental consent, we will delete it as required by the Children’s Online Privacy Protection Act (COPPA) or other applicable law. If you believe we have inadvertently collected such information, please contact us at customer.service@scorepilotai.com.
9. International Users
Score Pilot is operated from the United States. If you access the Service from outside the United States, your personal information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer and processing. If you do not agree, please do not use the Service.
10. Your Privacy Rights (U.S. State Law)
If you are a resident of California or another U.S. state with applicable privacy laws, you may have the following rights with respect to your personal information:
- Right to Know — You may request information about the categories and specific pieces of personal information we have collected about you, and how we have used and shared it.
- Right to Access — You may request a copy of the personal information we hold about you.
- Right to Correct — You may request that we correct inaccurate personal information we hold about you.
- Right to Delete — You may request that we delete the personal information we have collected from or about you, subject to certain legal exceptions.
- Right to Opt Out of Sale or Sharing — We do not sell your personal information and do not share it for cross-context behavioral advertising purposes. There is nothing to opt out of, but you may contact us to confirm this.
- Right to Non-Discrimination — We will not discriminate against you for exercising any of the rights described here.
- Right to Appeal — If we deny your request, you may appeal by contacting us at the address below.
How to Submit a Request
To exercise any of the rights above, email us at customer.service@scorepilotai.com with the subject line “Privacy Rights Request.” We will respond within 45 days. We may need to verify your identity before processing your request.
California Shine the Light
Under California Civil Code Section 1798.83 (“Shine the Light”), California residents may request information about our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for direct marketing purposes, so there is no information to report. To submit a Shine the Light request, email us at customer.service@scorepilotai.com with “Shine the Light Request” in the subject line.
California Civil Code §1789.3
California residents may also report complaints to the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs by writing to 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834, or by calling (800) 952-5210.
11. Alpha Test Notice
Score Pilot is currently in an invite-only alpha test phase. During this phase:
- Information collected through the application form is used solely to coordinate alpha test access and may not reflect the data we collect in future versions of the Service.
- Data (including exam sessions, scores, and account information) may be reset without notice as we develop the platform.
- Features, data practices, and this Privacy Policy are subject to change as the platform evolves.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the “Effective” date at the top of this policy and, where feasible, by sending an email to the address associated with your account or by posting a prominent notice within the Service. Your continued use of the Service after the effective date of the updated policy constitutes your acceptance of the changes.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:
Score Pilot Inc.