Privacy Policy

FinancialEdu Inc. ("we," "us," or "our") is a C Corporation and the developer and operator of the FinEdu financial literacy application and website (the "Service"). We are the data controller for personal information collected through the Service.

Privacy & Legal Inquiries: info@thefinedu.com

Support & Account Issues: support@thefinedu.com

When you register or use the Service, you may provide:

• Full legal name — collected at registration for account identification;
• Email address — required for account creation, login, transactional messages, and notifications;
• Phone number — collected at registration and used for account security (e.g., two-factor authentication if enabled) and optional SMS notifications;
• Age range confirmation — at registration, you confirm you are 13 years of age or older. We collect an age range, not your exact date of birth, solely to confirm eligibility and apply the correct version of the Service;
• Onboarding assessment responses — answers to the placement assessment used to set your personalized learning level and news complexity level; and
• Financial data entered into tools — data you voluntarily enter into the Budget Planner, Paycheck Calculator, or other financial tools. Where technically feasible, this data is processed locally on your device. If you choose to save results to your account, that data is stored on our servers as described in this Policy.

To understand how people use FinEdu and to improve the Service, we automatically collect certain identifiers about your device and usage. We collect only what is necessary for this purpose — we do not collect your precise location, and the identifiers below are not combined with your name, email, or phone number for any purpose beyond operating your account.

• Device information: device type, operating system version, and a device identifier used to keep your session secure;
• General location: we derive your country and state from your IP address for compliance and content purposes only — we do not collect precise GPS location;
• Usage data: features accessed, modules and mini games completed, quiz scores, XP earned and spent, time spent in the app, and navigation between screens; and
• Diagnostic data: error reports, crash logs, and basic performance metrics, used to keep the app stable.

This usage and device data is stored in connection with your account so the app can function (for example, to resume where you left off or track your XP). When we use this data to understand product usage and improve FinEdu — such as identifying which lessons are confusing or which features drive engagement — we use it only in aggregate or de-identified form, with your name, email, and other direct identifiers removed. If we ever need to share any of this usage or device data with an outside provider for a purpose beyond operating the Service, we will state that explicitly in this Policy before doing so.

• Apple / Google Play — subscription status and purchase confirmations (we do not receive your full payment card details);
• Stripe — payment confirmation and subscription status for web purchases (we do not receive your full card number);
• Finlight — financial news article content (we receive content from Finlight but do not share your personal data with Finlight); and
• Alpaca Markets — market price data used to power our simulated paper trading feature. No real brokerage account is created and no real money or securities are involved; we send Alpaca only the data necessary to retrieve market prices, never your personal or financial account information.

We do not currently use third-party analytics, crash-reporting, or advertising SDKs (such as Firebase, Mixpanel, Sentry, or AdMob) in the Service. If we add any such service in the future, we will update this Policy before that service begins receiving any data.

• Create, authenticate, and maintain your account;
• Deliver, personalize, and improve the Service, including matching content to your assessed learning level;
• Process payments, manage subscriptions, and handle billing matters;
• Send transactional communications — account confirmations, password resets, subscription receipts, and security alerts;
• Send push notifications — streak reminders, Wads of Cash refill alerts, and learning nudges (you may opt out at any time via device settings);
• Send marketing emails about new features and promotions (you may opt out at any time — see Section 9);
• Understand product usage, in aggregate or de-identified form, to improve features and the overall learning experience;
• Detect, investigate, and prevent fraud, abuse, unauthorized access, and illegal activity;
• Comply with applicable legal obligations including FERPA, CCPA, and others; and
• Provide authorized institutional administrators with student learning progress data through the admin dashboard.

FinEdu is not directed to children under the age of 13, and we do not knowingly collect personal information from anyone under 13.

FinEdu is intended for users who are 13 years of age or older. At registration, every user must confirm they meet this age requirement before an account can be created. We do not operate a process for collecting verifiable parental consent for users under 13, because the Service is not designed or directed at that age group and is not intended to be used by them.

If we learn that we have collected personal information from a child under 13, we will take prompt steps to delete that information and to deactivate the associated account. If you believe a child under 13 has created an account or provided us with personal information, please contact us immediately at info@thefinedu.com with the subject line "Underage User Report," and we will investigate and take appropriate action, including deletion of the account and associated data.

For users between the ages of 13 and 17, we apply the following additional protections:

• We do not sell their personal information;
• We do not use their data for behavioral profiling or targeted advertising;
• Push notifications are limited to Service-related content — no promotional or sponsored push messages; and
• Parents or guardians of users ages 13–17 may contact info@thefinedu.com to request access to, correction of, or deletion of their child's account data.

Although FinEdu does not require parental consent for users 13 and older, parents and legal guardians of a user in this age range may still contact us to:

• Review the personal information we have collected from their teen;
• Request correction of any inaccurate information; and
• Request deletion of their teen's account and associated personal data.

To exercise any of these rights, contact: info@thefinedu.com with subject line "Parental Rights Request."

We do not sell your personal information. We share information only as described below.

• Apple Inc. / Google LLC — mobile subscription and in-app purchase management;
• Stripe, Inc. — web payment processing;
• Finlight — financial news data delivery;
• Alpaca Markets — market price data for the paper trading simulator (no personal or financial account data is shared); and
• Resend — transactional email delivery (account confirmations, password resets, receipts).

All service providers are contractually required to use your data only as directed by us and in a manner consistent with this Privacy Policy.

FinEdu's institutional plans serve schools, businesses, credit unions, nonprofit organizations, and other entities. The data practices in this section apply to all institutional account types.

If you join FinEdu through an institutional course code, the following information will be visible to that institution's authorized administrators through the FinEdu admin dashboard:

• Your display name or username;
• Modules and topics completed;
• Quiz scores and pass/fail outcomes;
• Time spent on assigned content;
• Overall course completion percentage; and
• Last login date and engagement status (Standard and Professional plans).

We will identify the institution to you at the point you enter a course code, before your data becomes visible to them. Institutions are contractually prohibited from using this data for any purpose other than legitimate educational or HR administration.

As between FinancialEdu Inc. and the institution, the institution retains ownership of all student, employee, and participant data entered into the platform. FinancialEdu Inc. acts as a data processor on behalf of the institution for this data. We process Institutional Data solely to provide the Service and do not use it for advertising, analytics sold to third parties, or any purpose beyond service delivery.

Companies using FinEdu as an employee financial wellness benefit operate under the same institutional data practices described in this section. Employee completion data, quiz scores, and engagement metrics are visible to HR administrators through the admin dashboard. HR compliance reports (Enterprise tier) generate a documented summary of employee financial literacy training completion for audit and regulatory purposes. FinancialEdu Inc. does not share individual employee performance data with any third party outside the scope of service delivery.

Nonprofit organizations operating FinEdu for program participants follow the same institutional data practices as schools. Completion certificates and analytics exports generated for grant reporting purposes contain only the data necessary for that purpose. We do not use participant data from nonprofit accounts for advertising or commercial profiling.

Upon cancellation of a paid institutional account, the institution retains read-only access to its account data for 90 days following the cancellation effective date, for the sole purpose of exporting participant data and course records. After this 90-day period, all institutional data is deleted in accordance with our standard data retention schedule. FinancialEdu Inc. will send a reminder notice 14 days before the export window closes.

If FinancialEdu Inc. undergoes a merger, acquisition, reorganization, or sale of substantially all of its assets, your information may be transferred as part of that transaction. We will provide at least 30 days' advance notice by email and/or prominent in-app notice before your data becomes subject to a materially different privacy policy.

We do not currently serve advertisements anywhere in the Service. This section will be updated, and you will be notified in accordance with Section 13, before any advertising is introduced.

We use basic, first-party usage analytics — collected and stored on our own servers as described in Section 2.2 — to understand how people use FinEdu and to improve the product. We do not currently use a third-party analytics SDK (such as Firebase or Mixpanel) in the Service. If we add a third-party analytics or crash-reporting tool in the future, we will identify that provider here and describe what data it receives before it begins receiving any data.

• Account data (name, email, phone, age range confirmation): retained while your account is active and for 90 days following a confirmed deletion request, then deleted or anonymized;
• Learning progress, quiz, and mini game data: retained while your account is active; deleted upon account deletion;
• Financial tool inputs saved to your account: deleted upon account deletion or upon your request;
• Usage and device data: retained for up to 24 months, then anonymized or deleted;
• Payment and transaction records: retained for 7 years as required by U.S. tax law;
• Crash logs and error reports: retained for 90 days; and
• Server log data: retained for up to 12 months.
• Institutional Data (upon account cancellation): read-only export access for 90 days post-cancellation, then deleted or anonymized in accordance with Section 5.2.5.

• All data transmitted between your device and our servers is encrypted using TLS (HTTPS);
• Sensitive account data is encrypted at rest;
• Access to user data within our organization is restricted on a need-to-know basis with role-based access controls;
• We do not store full payment card numbers — processing is handled by Apple, Google, and Stripe; and
• We conduct periodic reviews of our security practices.

No transmission or storage method is completely secure. In the event of a data breach that affects your rights or freedoms, we will notify affected users and applicable authorities as required by law.

Request a copy of the personal information we hold about you by emailing info@thefinedu.com. We will respond within 30 days.

Update your name, email, and phone number in app settings. For other corrections, contact info@thefinedu.com.

Delete your account via "Delete Account" in app settings or email support@thefinedu.com with the subject line "Account Deletion Request." We will process requests within 30 days. Some data may be retained as required by law (e.g., payment records).

Click "Unsubscribe" in any marketing email, or contact info@thefinedu.com. Opting out of marketing does not affect transactional messages (receipts, security alerts, account notices).

Disable push notifications at any time through your device's notification settings. Note that disabling all notifications will also disable core product reminders such as streak alerts and lives refill notifications.

California residents have rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell personal information. To exercise your rights, contact info@thefinedu.com.

Nevada residents may opt out of the sale of personal information. We do not sell personal information. Contact info@thefinedu.com with any questions.

If you are in the European Economic Area or United Kingdom, you have rights under GDPR/UK GDPR including access, rectification, erasure, restriction, portability, and objection. Our lawful bases for processing include: contract performance, legitimate interests (security and product improvement), legal obligation, and consent where required. Contact info@thefinedu.com to exercise your rights or lodge a complaint.

The FinEdu website uses cookies for essential site functionality, such as authentication and session state. The mobile app uses a device identifier for the same purpose. Categories used:

• Essential / Functional: authentication tokens, session state, and security — cannot be disabled without impairing core functionality; and
• Usage analytics: first-party usage data described in Section 2.2, used to understand and improve the product.

We do not use cookies or device identifiers for advertising or ad measurement. You can configure your browser to refuse cookies; doing so may limit some site functionality.

FinancialEdu Inc. is based in the United States. If you access the Service from outside the U.S., your personal information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. For European users, we rely on Standard Contractual Clauses (SCCs) for cross-border data transfers where required by GDPR.

The Service may link to or integrate with third-party websites and services. This Privacy Policy applies only to data we process. We encourage you to review the privacy policies of: Apple (apple.com/legal/privacy), Google (policies.google.com/privacy), Stripe (stripe.com/privacy), Finlight (finlight.me), and Alpaca Markets (alpaca.markets/privacy).

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this document;
• Display a prominent in-app notice for at least 14 days; and
• Send an email notification to registered users for significant changes.

Continued use of the Service after a policy update constitutes acceptance of the revised Policy.

All privacy requests, data subject rights requests, and legal inquiries:

• FinancialEdu Inc.

Support & Refunds: support@thefinedu.com

Legal, Privacy & General Inquiries: info@thefinedu.com