Privacy Policy
Last updated: August 31, 2026
1. Information We Collect
This Privacy Policy describes how Accuity LLC (“Accuity,” “we,” “us,” or “our”) collects, uses, and shares information when you use our services. When you create an account or use Accuity, we may collect:
- Account Information: Name, university email address, phone number, major, and classes.
- Payment Information: Billing details processed securely through our third-party payment processor (Stripe). We do not store your full credit card number.
- Usage Data: Study time, course progress, practice test results, and interaction with our platform.
- Device Information: Browser type, operating system, and IP address for security and analytics purposes.
- Advertising & Attribution Data: The campaign parameters and click identifiers carried in the link you arrived on (for example, a link from one of our Reddit or Facebook ads), the first page of ours you landed on, and the date we recorded it. If you go on to create an account, that information is stored on your account. We also run advertising pixels that report page views, signups, and purchases back to the ad platform. See Section 5 for exactly what this involves and how to opt out.
- User-Submitted Content: Text you submit through interactive features — including the “Common Wordings” form on /learn concept pages, support requests, and similar inputs — along with the time of submission and the user account it was submitted from. See Section 4 for how this content is displayed publicly, and Terms & Conditions § 6 for the license you grant us.
- DMCA Notice Information: If you file a copyright takedown notice through /dmca, we collect your name, email, optional phone and address, description of the work, the allegedly infringing URLs, and your signature. See Section 10 for how this information is handled.
- Calendar Connection Credentials: If you choose to connect a Google Calendar or an iCal/ICS feed to your Study Plan, we collect and store OAuth access and refresh tokens (for Google) or the feed URL (for iCal). See Section 3 for the full scope of what we access and how we use it.
2. How We Use Your Information
- To provide, maintain, and improve our educational services.
- To personalize your learning experience and study recommendations.
- To process payments and manage your subscription.
- To send marketing and promotional communications (see our Terms & Conditions for details on opting out).
- To respond to your inquiries and provide customer support.
- To measure and target our own advertising — that is, to work out which ads and campaigns actually bring students to Accuity, and to reach more students like the ones already using it (see Section 5).
- To detect and prevent fraud or unauthorized access.
- To moderate and, where appropriate, publicly display User-Submitted Content as described in Sections 4 and 10.
3. Calendar Integrations
Accuity's Study Plan can connect to a third-party calendar so that the study tasks we generate respect your existing schedule. These integrations are opt-in: nothing is read from or written to your calendar until you explicitly connect it, and you can disconnect at any time from the Study Plan settings page or from your provider's own account controls.
Google Calendar (Google API Services)
When you choose to connect Google Calendar, Accuity initiates a standard OAuth 2.0 consent flow operated by Google. After you grant consent, Google issues us scoped credentials (an access token and a refresh token) tied to your Google account. The sections below describe exactly what we access, how we use it, who it's shared with, how we secure it, and how long we keep it.
3.1 Data Accessed
Accuity requests the following Google OAuth scopes when you click “Connect Google Calendar”:
https://www.googleapis.com/auth/calendar.events— grants Accuity the ability to create, update, and delete events on your Google Calendar.https://www.googleapis.com/auth/calendar.readonly— grants Accuity read-only access to the events on your primary Google Calendar.
The specific event fields we read are: event id, summary (title), start and end time, all-day flag, location, and attendee count. We do not request, read, or store the contents of attachments, video conferencing URLs, attendee email addresses, contacts, Gmail messages, Drive files, or any other Google product's data. We do not request offline access to any data other than calendar events.
Google itself also issues us OAuth credentials (an access token, a refresh token, and a token expiry timestamp). These credentials are the only Google-issued tokens we persist.
3.2 Data Usage
We use the Google user data described above strictly to power the following user-facing features of the Accuity Study Plan:
- Display your existing events inside the Study Plan calendar view so you can see your real-life schedule next to the study tasks Accuity has generated for you.
- Push Accuity-originated events (the study tasks you schedule and the tutoring sessions you book) to your Google Calendar so you get reminders and so the events appear on every device that already syncs your Google Calendar.
- Avoid scheduling conflicts when our planner generates or regenerates a study schedule, by skipping or de-prioritising dates and time windows that already contain events. All-day events are ignored for this purpose and never cause a day to be skipped.
We do not use Google user data to train any machine learning or AI model, generate generalised insights across users, target advertising, or score, profile, or rank users in any way unrelated to the study planning features above.
3.3 Data Sharing
Accuity's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We do not sell Google user data, and we do not share it with data brokers, advertising networks, or analytics platforms.
- We do not transfer Google user data to any third party except (a) to a small set of infrastructure sub-processors that host or operate our application (described below) and only for the purpose of running the features in §3.2 on our behalf; (b) where we are required to do so to comply with applicable law or valid legal process; or (c) as part of a merger, acquisition, or sale of assets, in which case the receiving party must honour the commitments in this Privacy Policy.
- We do not use Google user data for serving advertisements, including retargeting and personalised or interest-based advertising.
- We do not allow humans to read Google user data unless we have your explicit consent for specific events, it is necessary for security purposes (e.g., investigating abuse), it is necessary to comply with applicable law, or the data is aggregated and used for internal operations in accordance with applicable privacy and other legal requirements.
The infrastructure sub-processors that may handle Google user data on our behalf, in transit only, are:
- Vercel Inc. — application hosting and serverless execution (United States).
- Neon, Inc. — managed PostgreSQL database that stores your OAuth tokens (United States).
- Google LLC — the source API itself; this is where Google Calendar data originates and where we send requests when you take an action in Accuity that creates, updates, deletes, or reads an event.
3.4 Data Storage & Protection
- Your Google OAuth access token, refresh token, and token expiry are stored in our managed PostgreSQL database (Neon), in a table dedicated to Google Calendar connections, keyed to your Accuity user id.
- All data in that database is encrypted at rest by the database provider and all traffic between Accuity, our database, and Google's APIs is encrypted in transit using TLS 1.2 or higher.
- Calendar event contents themselves are not stored or warehoused on our servers. Events are fetched from Google on demand when you load the Study Plan calendar view, rendered in your browser, and then discarded.
- Access to the database is restricted to a small number of Accuity engineering accounts protected by single sign-on and multi-factor authentication. Production access is logged, and no Accuity employee or contractor reads stored Google user data outside the four narrow exceptions listed in the previous section.
3.5 Data Retention & Deletion
- OAuth tokens are retained only for as long as your connection is active. They are deleted the moment you (a) click “Disconnect” in Accuity's Study Plan settings, (b) revoke Accuity from your Google Account permissions page, or (c) close your Accuity account — whichever happens first. Deletion is immediate rather than a soft delete.
- Calendar event contents are never persisted on our servers (see §3.4), so there is nothing to delete beyond your browser session.
- Accuity-originated events we previously pushed to your Google Calendar are not automatically removed from your calendar when you disconnect; you can delete them from Google Calendar directly. We do not retain a copy of those events outside Google.
How to request deletion or disconnect:
- In-app: Open the Study Plan page, click the settings gear, and choose “Disconnect” under Google Calendar. The disconnect button revokes our access token and immediately deletes the stored credentials.
- From your Google Account: Visit myaccount.google.com/permissions, locate “Accuity,” and click “Remove Access.” This revokes Accuity's tokens at Google's end; our nightly job removes the now-invalid stored tokens on our side.
- By email: Email support@accuitytutors.com from the address associated with your Accuity account and ask us to delete all Google user data and OAuth credentials associated with your account. We will action the request within 30 days and confirm by reply.
iCal / ICS Feeds (e.g., university LMS calendars)
When you add an iCal/ICS feed URL (for example, an exported feed from your university's learning management system), Accuity stores the URL and periodically fetches the feed. Parsed events are cached in our database so we can render them quickly inside the Study Plan calendar without re-fetching on every page load. You can remove a feed at any time from the Study Plan settings page, which immediately deletes the URL and the cached events from our database.
4. Data Sharing
We do not sell your personal information for money, and we do not share information received from Google APIs with anyone except as described in Section 3 above. We do run advertising pixels that send a limited amount of activity data to the ad platforms we advertise on — some U.S. state privacy laws call that “sharing” even though no money changes hands, so we describe it in full in Section 5 and tell you how to opt out in Section 9. We may share your other data with:
- Service Providers: Third-party vendors that help us operate our platform (e.g., payment processing, email delivery, hosting).
- Advertising Platforms: Reddit, Meta (Facebook and Instagram), TikTok and LinkedIn receive page views, signups, and purchases from the pixels described in Section 5, which they use to report on our ads and to build advertising audiences.
- Legal Requirements: When required by law, regulation, or legal process.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
- Public Display of User-Submitted Content: Text you submit through interactive features such as the “Common Wordings” form may, after admin moderation, be displayed publicly on the corresponding concept page and indexed by search engines. We do not display your name, email, or other identifying information alongside this content — only the text itself is shown, with a generic “Submitted by a student” attribution. Your user account remains associated with the submission internally for moderation, deduplication, and abuse prevention.
- DMCA Counter-Notice Process: If a third party files a valid DMCA takedown notice against User-Submitted Content you posted, we may forward portions of the notice to you so you may file a counter-notice. If you file a counter-notice, federal law requires us to share its contents (including your contact information) with the original notice submitter. See Section 10 for details.
5. Advertising, Cookies & Tracking Technologies
We advertise Accuity on social platforms, and we use those platforms' advertising pixels to find out whether those ads actually work. A pixel is a small piece of code that runs in your browser, loads from the platform's own servers, and can set cookies or read browser storage under that platform's control. We do not run anyone else's ads on Accuity — you will never see a third-party ad on our pages. The tracking described here exists so we can tell which of our ads brought students to us.
The advertising pixels we run
- Reddit Ads Pixel (Reddit, Inc.) — live on our site today.
- Meta Pixel (Meta Platforms, Inc., which operates Facebook and Instagram) — being added as we begin advertising there. It collects the same categories of data as Reddit's.
- TikTok Pixel (TikTok Inc.) — being added as we begin advertising there. It collects the same categories of data as the other two.
- LinkedIn Insight Tag (LinkedIn Corporation) — being added as we begin advertising there. It collects the same categories of data as the others.
These load on every page of accuitytutors.com, including the pages you see after signing in. They are advertising and measurement tools only — they play no part in delivering your courses, and blocking them does not break anything.
What the pixels send to those platforms. Each pixel reports:
- Page views — the address of the page you are on and the fact that you viewed it.
- Signups — the fact that an account was created.
- Purchases — the fact that a purchase completed, its amount and currency, and our internal order reference. Card details never touch these pixels; payment information goes only to Stripe (see Section 1).
- Whatever a browser sends any site it loads a script from — your IP address, browser and device type, and any cookie or identifier that platform has already set in your browser.
We do not send these platforms your name, email address, phone number, university, or any of your coursework, grades, or study activity. If you happen to be signed in to Reddit, Facebook, or Instagram in the same browser, that platform may be able to connect the activity above to your account with them. That matching happens on their side, under their privacy policy, not ours.
Some of this is sent from our servers, not your browser. When a free trial starts or a payment goes through, we report that one event to Meta from our own servers as well as from the pixel in your browser. Both copies carry the same order reference, so the sale is counted once rather than twice. We do this because a browser can close, lose its connection, or drop the pixel before it reports, and we would rather know which ads actually work than guess.
What goes out that way is the same short list above: that a trial or purchase happened, its amount and currency, our order reference, the identifiers Meta's own pixel had already stored in your browser, and your IP address and browser type. We still do not send your name, email address, phone number, university, or anything about your coursework, grades, or study activity — not in any form, including hashed or otherwise scrambled. If you have asked us to stop using your account for advertising, or unsubscribed from our email, we do not send these events for you at all.
Campaign attribution we keep ourselves. When you arrive from one of our ads, the link usually carries campaign parameters (utm_source, utm_medium, utm_campaign, and similar) and sometimes a click identifier the platform generated for that click (fbclid from Meta, rdt_cid from Reddit). We read those values from the address of the page you land on, keep them in a first-party cookie on your device for up to 90 days, and — if you go on to create an account — store them on that account together with the first page you landed on and the date.
We keep the first campaign we saw for you and do not overwrite it on later visits, because the point is to credit the ad that introduced you. This is our own record, held in our own database; it is not sent back to the ad platforms unless we are reporting a conversion as described above. It lets us answer “which campaign brought this student to Accuity” from our own data rather than relying on a platform's self-reported numbers.
Our own page-view analytics. Separately from the ad platforms, we record page views on our own servers using a randomly generated identifier stored in your browser. That identifier is not derived from anything about you, and it is not shared with anyone. If you are signed in, the page view is associated with your account so we can see how the product is actually used.
How to opt out. You have several options, and they work at different levels:
- Your browser. A content blocker, or tracking protection that blocks
connect.facebook.net,redditstatic.com,analytics.tiktok.comorsnap.licdn.com(built into Safari and Firefox), stops these pixels loading at all — those events never reach the platform. Two limits worth knowing. Blocking third-party cookies or using a private window is weaker: the pixel still loads and still reports the page view, it just has fewer identifiers to attach it to. And blocking in your browser cannot stop the trial and purchase events we send to Meta from our servers, described above, because those never travel through your browser at all — to stop those, ask us directly using the next option. - Ask us to turn it off. Email support@accuitytutors.com from the address on your account and we will stop using it for advertising, including the events sent from our servers. This is the only control that reaches those. Unsubscribing from our marketing email has the same effect.
- Reddit's own ad settings. Manage personalization at reddit.com/settings/privacy.
- Meta's own ad settings. Manage ad preferences at facebook.com/adpreferences, and review or disconnect activity that businesses like us have sent to Meta at facebook.com/off_facebook_activity.
- Industry opt-out tools. The Digital Advertising Alliance's optout.aboutads.info and the Network Advertising Initiative's optout.networkadvertising.org let you opt out of interest-based advertising from participating companies. These tools set their own cookies, so you would need to repeat them in each browser you use.
- Ask us directly. Residents of California and several other U.S. states can tell us to stop sharing their information for advertising — see Section 9.
Opting out does not change your access to Accuity or what you pay, and it does not delete the campaign attribution already stored on your account — to have that removed, contact us at support@accuitytutors.com.
6. Data Security
We implement industry-standard security measures to protect your personal information, including encryption in transit and at rest. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. If you close your account, we will delete or anonymize your data within a reasonable timeframe, except where retention is required by law. OAuth credentials for connected calendars are deleted immediately when you disconnect the integration from Study Plan settings, when you revoke access from your Google account, or when you close your Accuity account — whichever happens first. The campaign attribution described in Section 5 is stored as fields on your account, so it is deleted or anonymized along with the rest of your account data. DMCA notices and any related correspondence may be retained indefinitely as required for legal compliance and to support our repeat-infringer policy (see Terms & Conditions § 8).
8. Your Rights
Depending on your location, you may have the right to:
- Access and receive a copy of your personal data.
- Request correction of inaccurate information.
- Request deletion of your personal data.
- Opt out of marketing communications at any time.
- Opt out of targeted advertising and of the “sharing” of your information with ad platforms. Section 5 covers the browser and platform controls; Section 9 covers how to tell us directly.
- Request removal of User-Submitted Content you posted (for example, a wording you submitted on a concept page). Removal requests for User-Submitted Content are honored within a reasonable timeframe unless we are required to retain the content for legal reasons.
- Disconnect any third-party calendar integration. For Google Calendar, disconnecting in Study Plan settings revokes our access token; you may additionally remove Accuity from your Google account permissions at myaccount.google.com/permissions.
To exercise any of these rights, contact us at support@accuitytutors.com.
9. Do Not Sell or Share My Personal Information
California's privacy law (the CCPA, as amended by the CPRA) and similar laws in states including Colorado, Connecticut, Texas, and Virginia give residents the right to opt out of targeted advertising — what California calls the “sharing” of personal information for cross-context behavioral advertising. The advertising pixels described in Section 5 fall into that category, so here is the plain version:
- We do not sell your personal information for money. We have never taken payment for it and have no plans to.
- We do share a limited amount of activity data with Reddit, Meta, TikTok and LinkedIn — the page views, signups, and purchases listed in Section 5 — so we can measure our ads and reach similar students. Under California law that counts as “sharing,” even though no money changes hands, and you can tell us to stop.
To opt out, do any of the following:
- Email us. Write to support@accuitytutors.com with the subject line “Do Not Sell or Share My Personal Information,” from the email address on your Accuity account so we can tell the request is really yours. We will remove you from any advertising audience we control, stop using your account in advertising measurement, and confirm by reply. We do this by hand rather than through an automated account setting, so please allow us a few days — the browser controls below take effect immediately and do not depend on us, though they are the one route that does not reach the events we send from our own servers (Section 5). You may use an authorized agent, in which case we may ask for proof that you authorized them.
- Block it in your browser. The controls in Section 5 stop the pixels at the source and take effect immediately, without waiting on us. This is also the effective route if you never created an Accuity account — in that case we hold no identified record of you to flag. It does not cover the trial and purchase events we send to Meta from our servers; for those, email us as described above.
- Use the platforms' own settings. The Reddit and Meta links in Section 5 control how those companies personalize ads to you across every site they track, not just ours.
Opting out costs you nothing: we will not deny you service, change your price, or give you a lesser version of Accuity for exercising any of these rights. Depending on your state, you may also have the right to know what personal information we hold, to correct it, to delete it, and to appeal if we turn a request down — Section 8 explains how to make those requests, and we handle them the same way regardless of which state you live in.
10. DMCA Notice Information
When you file a DMCA copyright takedown notice through /dmca (or send one to tutors@accuitytutors.com), the information you provide — including your name, contact information, description of the work, the URLs you identify, and your sworn statement — is stored in our internal moderation system and reviewed by our designated agent (registration on file with the U.S. Copyright Office).
Federal law (17 U.S.C. § 512(g)) requires that, if the user whose content you targeted files a valid counter-notice, we provide them with a copy of your counter-notice contact information so they may pursue the matter through the courts. Likewise, if a counter-notice is filed against a takedown of your content, your counter-notice information will be shared with the original notice submitter. By using either process, you consent to this disclosure.
We may also share DMCA notice contents with law-enforcement or judicial authorities if compelled by valid legal process, and we retain notice records as part of our repeat-infringer compliance program.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. Where the change materially affects how we use Google user data, we will obtain renewed consent from affected users before applying the new practice.
12. Contact Us
For questions about this Privacy Policy, please contact us at support@accuitytutors.com. For copyright-related inquiries, please use the DMCA notice form or email tutors@accuitytutors.com.
© 2026 Accuity LLC. All rights reserved.