Privacy Policy

1. Introduction

Mookti, Inc. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our educational platform and services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, and profile information
• Payment Information: Processed securely by Stripe (we never store full credit card numbers)
• Educational Content: Study materials, course information, goals, and learning activities
• Communication: Messages you send to support or through our platform

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent, and interaction patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies: Small files stored on your device for authentication and preferences
• Learning Analytics: Progress data, performance metrics, and study patterns to personalize your experience

3. How We Use Your Information

We use your information to:

• Provide and improve our educational services
• Personalize your learning experience with Ellen (our AI assistant)
• Process payments and manage subscriptions
• Send service updates and respond to your requests
• Analyze usage to improve our platform (using aggregated, de-identified data)
• Conduct research to advance learning science (with appropriate consent or anonymization)
• Send you marketing communications (you can opt out anytime)
• Ensure security and prevent fraud
• Comply with legal obligations

3.1 AI and Machine Learning

We use AI to power your learning experience. We may use aggregated, anonymized data to improve our AI systems. If we ever want to use your personal data to train AI models, we will obtain your explicit consent first and give you full control over what data is used.

4. Third-Party Services

We use trusted third-party services to operate our platform:

• Stripe: Payment processing (subject to their privacy policy)
• Firebase/Supabase: Authentication and database services
• Vercel: Web hosting and content delivery
• AI Providers: OpenAI, Anthropic, and others to power Ellen. These providers process your queries but do not use your data to train their models without your consent.
• Analytics: Vercel Analytics for usage insights (aggregated data only)

These providers are contractually required to protect your data and use it only for providing services to us.

5. Data Sharing and Disclosure

We only share your information when:

• You consent: When you explicitly agree to share information
• Service providers: With third parties who help operate our platform (under strict data protection agreements)
• Educational partners: With your consent, we may share information with educational institutions or service providers you choose to connect with
• Aggregated data: We may share anonymized, aggregated data for research or business purposes
• Legal requirements: When required by law, court order, or to protect rights and safety
• Business transfers: In connection with a merger or acquisition (your rights remain protected)

We never sell your personal information to third parties.

6. Data Security

We implement industry-standard security measures including:

• 256-bit SSL encryption for data transmission
• Encrypted data storage
• Regular security audits and updates
• Access controls and authentication requirements
• Secure, SOC 2 compliant data centers

In the event of a data breach affecting your personal information, we will notify you within 72 hours.

7. Data Retention

7.1 Active Accounts

We retain your data while your account is active and you continue to use Mookti.

7.2 After Subscription Cancellation

When you cancel your subscription:

• You lose access to premium features at the end of your billing period
• Your account and data remain intact
• You can resubscribe anytime to regain full access
• Your learning progress and history are preserved

Why we keep your account: Many users return after taking a break. We preserve your learning data so you can pick up where you left off.

7.3 Account Deletion (User-Requested)

You can permanently delete your account and all data at any time:

How to Delete Your Account:

• Option 1: Click "Delete Account" in your account settings
• Option 2: Email privacy@mookti.ai from your registered email address

What happens when you delete:

• We process your request within 24-48 hours
• All your data is permanently deleted from our systems
• You receive a confirmation email when deletion is complete
• This action cannot be undone

What gets deleted:

• Your profile and account information
• All conversations with Ellen
• Your learning progress and study history
• All study sessions and notes
• Your subscription and payment methods
• All stored embeddings and AI-generated data

7.4 Legal Retention Requirements

Some data is retained for legal compliance even after account deletion:

• Payment records: Anonymized billing data retained for 7 years (tax law requirement)
• Audit logs: Deletion requests and timestamps retained for 7 years (compliance requirement)
• Anonymized analytics: Aggregated usage data retained indefinitely (research purposes)

All retained data is anonymized and cannot be linked back to you.

7.5 Parental Rights (Users Under 18)

Parents/guardians can request deletion of their child's account by emailing privacy@mookti.ai with:

• Child's account email
• Proof of parental relationship
• Deletion request confirmation

7.6 Backups

Deleted data may persist in backups for up to 90 days, after which it is permanently removed from all systems.

8. Your Privacy Rights

8.1 All Users

You have the right to:

• Access: Request a copy of your personal data
• Correct: Update inaccurate information
• Delete: Request deletion of your account and data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing emails (service-related emails still sent)
• Object: Object to certain types of data processing
• Withdraw consent: Withdraw previously given consent for data use

8.2 California Residents (CCPA)

California residents have additional rights:

• Right to know what personal information we collect and how it's used
• Right to delete personal information
• Right to opt-out of "sale" of personal information (we don't sell data)
• Right to non-discrimination for exercising privacy rights

To exercise these rights, email privacy@mookti.ai

8.3 European Users (GDPR)

If you're in the EU/EEA, you have additional rights under GDPR including data portability, the right to object to processing, and the right to lodge a complaint with your supervisory authority.

9. Children's Privacy (COPPA Compliance)

Age Requirement: Mookti is intended for users 13 years and older. We do not knowingly collect information from children under 13 without verified parental consent.

9.1 If You're Under 13

If you're under 13, you must have your parent or guardian:

• Create and manage your account
• Provide consent for data collection
• Review this privacy policy

9.2 Parental Rights (For Users Under 18)

For users under 18 years of age, parents or legal guardians can:

• Review their child's personal information
• Request deletion of their child's data
• Refuse further collection of their child's information

Contact us at privacy@mookti.ai with proof of parental/guardian relationship to exercise these rights.

9.3 Teen Users (13-17)

Users aged 13-17 should have parental awareness of their Mookti use. We encourage parents to discuss online privacy with their teens.

10. Cookies and Tracking

We use cookies for:

• Authentication and security
• Remembering your preferences
• Understanding how you use our platform
• Improving our services

You can control cookies through your browser settings. Disabling cookies may limit some features.

11. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers in compliance with applicable laws.

12. Marketing Communications

We may send you marketing emails about new features, offers, and educational content. You can opt out anytime by:

• Clicking "unsubscribe" in any email
• Updating preferences in your account settings
• Emailing hello@mookti.ai

You'll still receive important service-related emails even if you opt out of marketing.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We'll notify you of significant changes by:

• Email to your registered address
• Prominent notice on our website
• In-app notification

Continued use after changes constitutes acceptance of the updated policy. For material changes that require consent, we'll obtain your explicit agreement.

14. Your Choices and Controls

• Account Settings: Update preferences and privacy controls in your account
• Email Preferences: Opt-out links in all marketing emails
• Cookie Controls: Browser settings to manage cookies
• Data Download: Request your data export anytime
• Account Deletion: Permanently delete your account from settings
• Consent Management: Review and withdraw consents for specific uses

15. Contact Us

Questions about this privacy policy or your data?

• Privacy inquiries: privacy@mookti.ai
• Support: help@mookti.ai
• General: hello@mookti.ai

Response time: We respond to privacy requests within 48 hours and fulfill requests within 30 days as required by law.

16. Our Public Benefit Commitment

As a Public Benefit Corporation, we're legally committed to balancing profit with purpose. Our data practices reflect this commitment:

• We prioritize your privacy and learning success over profit maximization
• We make data decisions based on what's best for students and learners
• We're transparent about how we use data to improve learning outcomes
• We give you meaningful control over your information
• We advocate for strong privacy protections in education technology