Privacy Policy

Thank you for using JustLockedIn. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

1) Scope

This Privacy Policy covers personal information processed by Indigo Learning when you visit, access, or use the Service, contact us, or otherwise interact with us. It does not apply to third-party websites or services we do not control; please review their policies before providing information.

2) Eligibility; Children's Privacy

• The Service is intended for individuals 13 years of age or older.
• If you are between 13 and 17, a parent or legal guardian must consent to your use of the Service and to our processing of your personal information as described herein.
• We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact [email protected] and we will promptly take appropriate action.

3) Information We Collect

We collect the categories of information below. The exact data depends on how you use the Service.

3.1 Information You Provide

• Account & Profile: name, email, password (hashed), and any preferences you set.
• Purchase Details: plan type and duration (e.g., 3/6/12 months), price paid, limited billing/tax details needed for invoicing/receipts. We do not store full payment card numbers (payments are handled by our payment processors).
• Study Activity: your answers, scores, timing, private flags/notes you save, test sessions, practice history, and progress metrics.
• Support & Feedback: communications with us (including emails and attachments), and survey responses.

3.2 Information Collected Automatically

• Device/Usage Data: IP address, device and browser type/version, operating system, timestamps, pages viewed, clickstream, and general diagnostic data (including approximate location derived from IP).
• Cookies & Similar Technologies: cookies, local storage, pixels, and SDKs used to keep you signed in, remember preferences, measure usage, and improve performance. See Section 7.

3.3 Information from Service Providers

• Payments: limited transaction metadata (e.g., transaction ID, last 4 digits, card brand, status), and fraud-prevention signals.
• Analytics/Security/Support: aggregated or de-identified statistics, error reports, and operational logs from vendors that help us operate, secure, and improve the Service.

4) How We Use Information

We use personal information to:

1. Provide and maintain the Service (account creation, authentication, access control, content delivery).
2. Operate study features (serving questions, scoring, explanations, progress tracking, dashboards).
3. Personalize the experience (recommendations, adaptive practice/test flows, timing tips).
4. Improve quality and safety (content corrections; abuse, cheating, and fraud detection; troubleshooting; performance tuning).
5. Communicate with you (service announcements, account notices, support responses).
6. Process purchases (invoicing/receipts, tax calculation, payment confirmations).
7. Comply with law and enforce our Terms and Conditions.

Where required, we rely on appropriate legal bases (e.g., performance of a contract, legitimate interests such as personalization and security, consent where applicable, and legal obligations).

5) AI & Analytics Disclosures

To power recommendations and improve quality, we may process your study activity using artificial intelligence (AI) and analytics. This may include sending necessary inputs (e.g., question text, your answer/score/attempt metadata) to service providers and receiving model or analytical outputs.

• Purpose: personalization (e.g., next best question), explanation and feature improvements, quality review, abuse prevention, and product development.
• Safeguards: we contractually seek appropriate protections from service providers and limit the data shared to what is necessary for the intended purpose.
• Limitations: AI/analytics outputs can be incorrect or incomplete; consider them recommendations, not definitive answers.

If you have questions about this processing, contact [email protected].

6) How We Share Information

We do not sell personal information. We share or disclose information as follows:

• Service Providers / Processors: cloud hosting, analytics, AI/model processing, email delivery, customer support, security/fraud prevention, and payment processing. These parties are contractually restricted from using personal information except to provide services to us.
• Payments: to process one-time purchases and handle fraud prevention—we do not store full card numbers.
• Legal & Safety: to comply with laws or respond to lawful requests; to protect our rights, users, or the public; to enforce our terms; or to investigate suspected violations.
• Business Transfers: in connection with a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction.

We may share aggregated or de-identified information that does not identify you.

7) Cookies and Similar Technologies

We use cookies and similar technologies to:

• Keep you signed in and remember preferences;
• Measure traffic and usage patterns;
• Diagnose performance and security issues.

Your controls. Most browsers allow you to block or delete cookies; doing so may affect functionality. The Service may not respond to "Do Not Track" signals. If you prefer not to be measured for analytics, you can adjust browser settings, use available opt-out tools, or contact us for more information about your options.

8) Your Choices & Rights

Depending on your location, you may have rights over your personal information, such as to access, correct, delete, or receive a copy of your data, and to opt out of certain processing.

• Access, Correction, Deletion: Email [email protected] to request access, correction, or deletion. We may need to verify your identity and, for users aged 13–17, verify parental consent.
• Marketing Communications: You can opt out of non-essential emails by using the unsubscribe link or contacting us. We may still send transactional or legal notices.
• Authorized Agents (where permitted): If you use an authorized agent to make a request, we may require proof of authorization and verification of your identity.

We will not discriminate against you for exercising your rights, consistent with applicable law.

9) U.S. State Privacy Disclosures (including California)

If you are a resident of a U.S. state with consumer privacy rights (e.g., California), the following additional disclosures apply:

Categories Collected (examples):
Identifiers (e.g., name, email, IP address), customer records (e.g., billing address), commercial information (e.g., purchase history), internet/network activity, geolocation (IP-based), payment information (processed by payment vendors), and inferences (preferences). See Sections 3–4 for examples, sources, and purposes.

Sources, Purposes, and Disclosures:
We collect information directly from you, automatically from your device, and from service providers; we use it for the purposes in Section 4 and disclose it to service providers as in Section 6.

Your Rights (state examples):

• Right to Know/Access: Request the categories and specific pieces of personal information we collected, sources, purposes, categories disclosed, and categories of third parties.
• Right to Delete: Request deletion of personal information, subject to legal exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising rights.
• "Shine the Light" (CA): Request details about certain disclosures for direct marketing.

Sale/Share Statement:
We do not "sell" personal information for monetary value. We also do not "share" personal information for cross-context behavioral advertising. If these terms are interpreted more broadly under applicable law, you may contact us to exercise an opt-out.

To exercise rights or submit an agent request, email [email protected]. We will verify and respond consistent with applicable law. If your state provides an appeal right (e.g., VA/CO), you may appeal by replying "Appeal" to our decision email.

10) Data Retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by category (e.g., transactional records may be retained for tax/audit). When no longer needed, we delete or de-identify information consistent with our retention policies and applicable law.

11) Security

We use administrative, technical, and physical safeguards designed to protect personal information (e.g., encryption in transit, access controls, secure development practices). However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12) International Users & Data Transfers

We are based in the United States, and personal information may be processed in the U.S. and other countries that may not offer the same level of data protection as your home jurisdiction. By using the Service, you consent to such transfers and processing consistent with this Policy.

13) Third-Party Links

The Service may link to third-party sites or services. We are not responsible for their privacy practices. Review their policies before providing personal information.

14) Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices or the law. When we do, we will update the Effective Date above and post the revised Policy. Your continued use of the Service after an update signifies your acceptance of the revised Policy, as permitted by law.

15) Contact Us