Privacy notice

We store what we need to save your progress and answer you, and nothing else. We do not sell your information, we do not show ads, we run no analytics or tracking services, and we do not let AI providers train on your data. You can ask us to export or delete everything at any time.

If you create an account, we store your name, email address, a securely hashed password, practice answers, test attempts, scores, timing, flags, and problem ratings. When you use the Guided Study Coach, we also store your questions and its responses. When you message us, we store that conversation.

Practice, full tests, saved history, and the coach all require an account. The free sample at /try is the one exception: it needs no account, stores nothing, and creates no identifier for you. If your browser still holds a practice identifier issued before accounts were required, signing in moves that earlier history onto your account and we stop using the identifier.

We use this information only to operate HonorsUp, save your progress, improve question quality, prevent abuse, troubleshoot failures, reply to you, and send account-recovery email. We do not sell personal information, we do not share it for advertising, and we do not use student answers to target anything at you.

HonorsUp sets one essential cookie to keep you signed in. There are no advertising cookies, no analytics services, and no third-party tracking scripts on this site. Because we do not track you across other sites, there is nothing for a “do not track” or Global Privacy Control signal to opt out of.

To limit automated abuse we count requests against a one-way hash of your network address. We do not store the address itself, and these counters are deleted after one day.

When a signed-in student uses the coach, the relevant problem, the submitted answer where available, and the conversation are sent to our AI provider (OpenAI by default) to generate a reply. Your name and email address are never sent — the request carries only an opaque account identifier.

We do not permit AI providers to train models on your data. We use these providers through their business API, where submitted content is not used for model training. Providers may retain content briefly — typically up to 30 days — solely to detect abuse, after which it is deleted. We do not train our own models on your coach conversations or messages either.

The coach can still be wrong, and anything you type is stored. Please do not put personal or sensitive information in coach messages.

HonorsUp runs on Microsoft Azure, which hosts the application and database. Password-reset email is delivered through Resend. Question generation and review use an AI provider. These providers process data on our instructions; none of them are permitted to sell it or use it for their own purposes. Some processing may happen outside your country.

Account records, practice history, and messages are kept while your account is active, and are deleted when you ask us to close it. Sign-in sessions expire after 30 days. Password-reset links expire after 30 minutes. Abuse-prevention counters are deleted after one day. Backups may hold copies for a short period after deletion.

Passwords are stored using scrypt with a unique per-account salt, so we never hold your actual password and cannot tell you what it is. Traffic is encrypted in transit, and pages that show your work require an active signed-in session. No system is perfectly secure, but we will tell affected students promptly if we ever discover a breach of their data.

HonorsUp is intended for students age 13 or older, and we do not knowingly collect information from children under 13. If you believe a child under 13 has given us information, message us and we will delete it. If you are under 18, a parent, guardian, or teacher should approve your use. We do not sell or share the personal information of anyone under 16 — in practice we do not sell anyone's.

Wherever you live, you can ask us to show you what we hold, correct it, export it, or delete it, and we will not treat you differently for asking. If you are in California, Washington, Colorado, Connecticut, Virginia, Texas, or another state with a privacy law, those rights include the right to know, delete, correct, and opt out of sale or targeted advertising — we do neither of the latter two. If you are in the UK or EU, our basis for processing is performing the service you asked for and our legitimate interest in keeping it safe and working.

While HonorsUp is in beta, new accounts are reviewed before they are activated. That means we hold the name and email address of people whose requests are still pending or were declined. Message us and we will delete a pending request.

We may update this notice. The effective date at the top always reflects the current version, and if a change materially affects your rights we will tell you through the site or your messages before it takes effect.

Make privacy requests through your messages and choose the Privacy request category, so we can find and prioritise it. Because you are signed in, we already know the request is really from you and will not ask you to prove it again. If you cannot sign in, use the password reset link on the sign-in page first. You can also email us at support@honorsup.com, but because email does not prove who sent it, we will ask you to verify your identity before we act on a privacy request that arrives that way.