Privacy Policy

Account. Your email address and name, and a password (stored only as a one-way hash). If you sign in with Google, we receive your Google email, name, profile picture and Google account identifier. We do not receive your Google password.

Study information. Your goal and target score, exam date, current level, study preferences, and everything you do in ALTON: diagnostic and practice answers, answer times, lesson progress, test attempts, scores, notes in your mistake notebook, and vocabulary entries.

Payments. Payments are handled by Stripe. We receive a customer and subscription identifier, plan, amounts, status, the last four digits and brand of the card, and the payer’s name and email. We do not receive or store the full card number. A parent or guardian who pays through a payment link gives these details to Stripe and does not create an account with us.

Technical and security data. Sign-in sessions, and hashed email and IP identifiers used only to limit repeated sign-in attempts. Our hosting provider keeps standard server logs (for example IP address, browser and time of requests) for a limited period.

Communications. If you email us, we keep the message. We send you only service emails: email confirmation, password reset, and billing or account notices. We do not store the contents of those emails after sending.

Score guarantee claims. If you make a claim, we collect the official score reports and test dates you submit.

We do not run third-party advertising or advertising trackers in ALTON, and we do not sell your information.

• To provide ALTON: sign you in, build your plan, adapt practice, track progress and show results.
• To take payments, give receipts and handle refunds and guarantee claims.
• To keep the service secure, prevent account sharing and abuse, and check good-faith use for the guarantee.
• To fix content errors and improve ALTON using aggregated or de-identified information.
• To send you service emails and respond to your requests.
• To meet legal, tax and accounting obligations.

We share information only with service providers who help us run ALTON, under terms that limit their use of it: Stripe (payments), Google (sign-in and sending our email from our own Google Workspace account), Vercel (application hosting), Supabase (database hosting), and our email provider. We may also share information when the law requires, to protect our rights or safety, or in a business transfer, in which case we will tell you.

Parents or guardians who pay do not receive the student’s study data through the payment link. If you want a parent to see your progress, you can show them your account.

ALTON is for students aged 13 and older. We do not knowingly collect personal information from children under 13. If we learn we have, we delete it; a parent who believes this happened can email us at official@alton.education.

If you are under 18, you confirm that a parent or legal guardian has read this policy and the Terms and permits you to use ALTON. We use students’ information only to provide the study service, run payments and security, and improve the product as described here. We do not use it for advertising, we do not sell it, and we do not build advertising profiles. A parent or guardian can ask to review, correct, or delete a minor student’s information by emailing us from the account address, or at the address above with enough detail for us to verify the request.

We keep your account and study information while your account is active. You can delete your account yourself from your Account page, or ask us by email. Self-service deletion starts after you confirm by email and takes effect after 7 days, during which you can sign in and keep your account. Once it takes effect, or if you ask us by email, we delete or de-identify your personal information within 30 days, except for records we must keep: payment and tax records (kept as the law requires), records of a guarantee claim for as long as needed to resolve it, and security logs for a limited period. Backups are overwritten on their normal schedule.

You can ask us to access, correct, export, or delete your information, to stop sending emails that are not required for the service, or to close your account, from your Account page (deletion) or by emailing official@alton.education from your account address. Depending on where you live (for example California or the European Economic Area) you may have additional rights, including to object to or restrict certain processing; we will honor those rights as the law requires. You can cancel a subscription yourself in the billing portal.

We use encryption in transit, hashed passwords, per-account access controls, limits on sign-in attempts, and restricted access to production data. No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.

ALTON is operated from the United States. If you use it from another country, including Korea, your information is processed in the United States and in the countries where our providers operate.

We use a necessary session cookie to keep you signed in and security cookies. We do not use advertising cookies.

If we make a material change, we will tell you by email or in the app before it applies to you. Questions or requests: official@alton.education, Alton Education LLC.