Privacy Policy

Effective date: November 3, 2026

1. Introduction and scope

ePrep, Inc. ("ePrep," "we," "us") is a Delaware corporation with its principal office in Princeton, New Jersey. We provide online study programs, assessments and related educational tools, including, but not limited to, the College Equipped Readiness Tool (CERT), ReACT, ReACT AI, Wordsmith Vocabulary Builder, Graduation Planner, test-day integrity and monitoring services, QTA Builder, reading-level assessments, math-level assessments, and our test-preparation courses (together, the "Services"), through eprep.com, certforschools.com, and other sites and applications.

This Privacy Policy explains what information we collect, how we use and share it, and the choices available to you. It applies to:

Individual users who register or purchase directly from ePrep, and their parents or guardians ("ePrep Customers").
Students, teachers, and administrators using the Services through a school, school district, library, or other organization (an "Educational Customer"). Section 5 explains additional protections for Educational Customers.
Students registered by an ePrep Affiliate like a tutor or college counselor ("ePrep Affiliate Program Users").
Visitors to our websites ("Web Visitors").

In this Privacy Policy, ePrep Customers, Educational Customers, ePrep Affiliate Program Users, and Web Visitors are, individually and collectively, referred to as "you."

Where we provide the Services under a written agreement with an Educational Customer or a business partner, that agreement (including any data privacy agreement) controls if it conflicts with this Privacy Policy. Services offered under a partner's brand may be governed by that partner's privacy policy instead (see Section 8).

This Privacy Policy should be read together with our User Agreement.

2. Information we collect

We collect the following categories of information:

Category	Examples	Source
Account information	Name, email address, username, password, grade level, school, account role	You, your parent, your school, or an Affiliate Partner
Purchase information	Billing name, billing address, payment card details (processed by our payment processor)	You or your parent
Assessment and learning data	Answers to questions, scores, time spent per question, progress, study plans, essays or other responses you submit	Generated when you use the Services
AI interaction data	Questions or text you enter into AI features such as ReACT AI, and the responses generated	Generated when you use those features
Usage and device data	IP address, browser type, operating system, device type, pages visited, session dates and times, referring site	Collected automatically, including through cookies (Section 10)
Communications	Messages you send to customer support	You

We do not ask for, or knowingly collect, Social Security numbers, biometric data, precise geolocation, or health information through the Services.

3. How we use information

We use collected information to:

Create and manage accounts and deliver the Services to you.
Score assessments, generate individual and group reports, and provide personalized and adaptive learning recommendations.
Provide customer and technical support.
Process payments and send transactional messages about your account.
Maintain, secure, troubleshoot and improve the Services, including detecting misuse.
Send information about ePrep products and updates to you, if you are an adult, or your parents, if you are a minor, but, in either case, only if you have not opted out. Notwithstanding any of the forgoing, students associated with Educational Customers are never contacted directly by us. (See Section 10)
Comply with law and enforce our agreements.

We use de-identified and aggregated data (see Section 4) to research, develop, test, improve, and offer products and services in education and all other markets, to the extent permitted by law and our agreements.

We do not use personal information for targeted advertising, and we do not build profiles of students except to provide the Services and for the educational purposes described in this Privacy Policy.

4. De-identified and aggregated data

We may create de-identified and aggregated data ("Anonymous Data") from the information we collect, whether collected before or after the effective date of this Privacy Policy, including assessment and learning data such as answers, response times and item-level results. We use this data to research, develop, test, improve, and offer our current and future products, services, and content in education and all other markets, including adaptive learning and AI features, and to demonstrate their effectiveness.

Information collected before this Privacy Policy. Our prior Privacy Policy permitted us to use the information we collected, together with that of other users, to generate statistics, to understand how our products and services are used, and to enhance and develop our Site, products and services. Consistent with those terms, we may create Anonymous Data from information collected before the effective date of this Privacy Policy and use it as described in this Section 4. Where applicable law requires your consent for that use, we will ask for it and will not use your previously collected information in that way without it.

Legal and contractual limits. We use Anonymous Data only as permitted by applicable law and our agreements with Educational Customers and partners. Where the law of the state in which a student's school is located, or our agreement with a school, district or partner, restricts these uses, we limit our use of that data accordingly. For example, data from some schools is used only to provide and improve the services we offer to schools and is not used for products offered outside education.

What "de-identified" means. Data is de-identified when all personally identifiable information has been removed or obscured so that the remaining information does not reasonably identify a specific individual, alone or in combination with other reasonably available information. Aggregated data combines information about many users so that no individual can be identified.

Our commitments. When we create or use de-identified data, we:

remove names, email addresses, account identifiers that can be linked back to an account, and other direct identifiers.
remove or generalize information that could indirectly identify a student, such as school, class or partner location, exact dates and times, and demographic details, and suppress results for small groups.
do not attempt to re-identify de-identified data, and prohibit anyone we share it with from doing so.
do not sell de-identified data. We share it with third parties only under written terms that prohibit re-identification, and only where permitted by our agreements with Educational Customers and partners and by applicable law.

Because de-identified data no longer identifies any individual, it is not personal information, and we may keep using it after an account is closed or a contract has been terminated or has expired. Where an agreement with an Educational Customer or partner places further limits on de-identified data, we follow those limitations.

5. School and district services

When we provide the Services to an Educational Customer like a school or a district, we collect and use student personal information on such Educational Customer's behalf and under its direction. For purposes of the Family Educational Rights and Privacy Act (FERPA), we act as a "school official" with a legitimate educational interest.

For student personal information we receive through an Educational Customer like a school or a district ("Student Data") (For purposes of clarity, Student Data does not include Anonymous Data created as described in Section 4.):

The Educational Customer controls it. Student Data belongs to the Educational Customer, its students and their families, as set out in our agreement.
We use it only to provide the Services and for the other purposes allowed by our agreement and applicable law, including creating and using Anonymous Data as described in Section 4. We do not use it for targeted advertising or to market products to students, and we do not sell it.
Parents and eligible students may review or correct Student Data by contacting their school. If you contact us directly, we will refer you to the school and help it respond.
Deletion. When our agreement ends, or when the Educational Customer asks, we delete or return Student Data as the agreement requires. Anonymous Data is handled as described in Section 4.
Breach notification. We notify the Educational Customer of any unauthorized access to Student Data as required by our agreement and applicable law.
Contract controls. If a data privacy agreement or contract with the Educational Customer is more protective than this Privacy Policy, we will adhere to the terms of that agreement.

We comply with applicable state student-privacy laws in the states where our Educational Customers are located, including laws that limit how data derived from student information may be used.

6. Children under 13

Some of our Services, including CERT elementary and middle school assessments, are used by children under 13 through an Educational Customer like a school or a district. We comply with the Children's Online Privacy Protection Act (COPPA). When a school registers a child under 13, the school may authorize the collection of the child's information on behalf of parents, solely for the educational purpose of the Services and not for any commercial purpose. Parents may ask their child's school to review the information we hold, have it deleted, or stop further collection. Information collected with a school's authorization is not used for any commercial purpose unrelated to the educational purpose of the Services. We may use Anonymous Data derived from it only to provide, maintain and improve our educational products and services.

ePrep does NOT sell elementary or middle school products directly to consumers or through ePrep Affiliates.

7. How we share information

We do not sell your personal information, and we do not share it with third parties for their own marketing or advertising.

We share personal information only:

With your school or organization. Teachers and administrators at an Educational Customer can see their students' accounts, results and reports.
With the partner or Affiliate Partner that registered you, to the extent needed for them to administer your account and see your progress.
With service providers that host, secure, support or operate the Services for us, such as cloud hosting, email delivery, payment processing and AI providers. They may use the information only to provide services to ePrep and must protect it under written terms at least as protective as this Privacy Policy.
For legal reasons, when required by law, subpoena or court order, or to protect the safety of users or others. Where permitted, we notify the affected Educational Customer before disclosure.
In a business transfer, such as a merger or sale of assets, provided the acquirer is bound by this Privacy Policy and our agreements with Educational Customers for information already collected.
With your consent, or your parent's consent if required.

We may share anonymous data as described in Section 4.

8. Partner, white-label and affiliate programs

Partner-branded services. Some partners offer our courses under their own brand. In those cases, such partner's agreement with us and the partner's privacy policy govern how your information is collected and used, and we process it on the partner's behalf. Any use of anonymous data for partner-branded services is limited to what the partner's agreement allows. Please review the partner's privacy policy and contact the partner with questions.

ePrep Affiliate Partners. Tutors, counselors and similar professionals in our Affiliate Partner Program can register students for ePrep programs. Information about students registered this way is collected and used by ePrep under this Privacy Policy. The Affiliate Partner can see the accounts it registers but may not use them for any other purpose.

9. AI features

Some Services, such as ReACT AI, use artificial intelligence to generate explanations, feedback and study recommendations.

What you type into an AI feature is processed by ePrep and, where applicable, by AI service providers acting on our behalf.
Our AI service providers are not permitted to use your information to train their own general-purpose models.
We may use de-identified AI interaction data, as described in Section 4, for the purposes described in that Section.
AI-generated content can contain mistakes. It supports learning and does not replace a teacher's judgment.
Please do not enter sensitive personal information, such as health details, into AI features.

10. Cookies, communications and your choices

Cookies. We use cookies and similar technologies to keep you logged in, remember preferences, secure the Services and understand how the Services are used. We do not use third-party advertising cookies on pages used by students. You can block or delete cookies in your browser settings, though some features may not work without them.

Marketing emails. We send product news and offers only to adult users and parents who purchased or registered directly with ePrep. Every marketing email includes an unsubscribe link. We do not send marketing to students using the Services through an Educational Customer.

Account messages. We may still send messages about your account, such as receipts, password resets and service notices.

11. Security and data retention

Security. We use administrative, technical and physical safeguards to protect personal information, including encryption in transit and at rest, access limited to employees who need it, multi-factor authentication for administrative access, and confidentiality agreements with staff and service providers. No system is completely secure, but we work to protect your information and review our safeguards intermittently.

Breach notification. If we learn of unauthorized access to personal information, we will notify affected users, parents or Educational Customers as required by law and our agreements.

Retention. We keep personal information associated with various accounts as follows:

Individual accounts: for the life of the account and indefinitely thereafter, unless you ask us to delete it sooner.
Student Data from Educational Customers: as set by our agreement, and deleted or returned when the agreement ends or on request.
Purchase records: as long as required for tax and accounting purposes.

Anonymous data may be kept as described in Section 4.

12. Your rights, changes to this Privacy Policy, and contact

Your rights. Depending on where you live, you may have the right to access, correct, delete or obtain a copy of your personal information, and to object to certain uses. Students using the Services through a school should contact their school first. Everyone else can contact us using the details below, and we will respond within the time required by applicable law. We will not discriminate against you for exercising these rights.

Changes to this Privacy Policy. We may update this Privacy Policy from time to time and will post the new version with a new effective date. If we make a material change to how we use personal information already collected, we will give prominent notice and obtain consent where required by law, and we will notify Educational Customers in advance. We will not make a material change that reduces protections for Student Data without the Educational Customer's agreement.

Contact us.

By mail:
ePrep, Inc.
340 Wall Street
Princeton, NJ 08542
Attn: Privacy

By email:
privacy@eprep.com

By phone (toll free):
877.377.3744