Legal

Privacy Policy

Last updated: May 2026

Our Commitment

Ecily collects only what is needed to run the app. We never sell your data, never use it for advertising, and never share it without your knowledge. This policy explains exactly what we collect, why, and how long we keep it.

Data We Collect

Account Information
What
Name, email address
Why
To create your account and identify you across devices. Email is used for account recovery and critical security notices only.
Kept for
Kept until you delete your account, then purged within 30 days.
Onboarding Profile
What
Age, US state, money situation, financial goals, explanation style, birthday (optional)
Why
To personalize lesson content, tone, and difficulty. Your state is used to display accurate local tax rates and minimum wage. Your age group determines which Jump$tart standards apply to you.
Kept for
Kept until you update your profile settings or delete your account.
Learning Progress
What
Completed lessons, quiz scores, XP, Ecily Coins, streak, world progress, last active date
Why
To track your progress, award achievements, maintain your streak, and personalize what Cily recommends next.
Kept for
Kept for the lifetime of your account. Exported on request within 30 days.
Paper Trading Activity
What
Simulated trades, portfolio value, watchlist tickers
Why
To simulate a realistic investing experience. No real money is ever involved.
Kept for
Kept for the lifetime of your account. Deleted with account.
AI Coach Conversations
What
Messages you send to Cily
Why
Sent to Groq's API to generate responses. For context, Ecily also sends your first name, age group (never your exact age or birthday), US state, money situation, goals, explanation style, and a short summary of your recent in-app activity.
Kept for
NOT stored by Ecily after the response is returned. Groq's privacy policy applies (groq.com/privacy).
Device & Usage Data
What
Device model, OS version, crash logs, feature usage
Why
To fix bugs and improve performance. Analytics events are tied to your app instance, never sold or used for ads.
Kept for
Crash logs kept 90 days. Usage analytics kept up to 2 years.
Reminders
What
Locally scheduled streak and learning reminders
Why
Scheduled on your device, only if you grant permission. Nothing leaves your phone.
Kept for
Stored only on-device. Cleared when you disable notifications or delete the app.

How We Share Data

Service Providers

Firebase (Google) stores your account and progress data. Groq Inc. processes AI coach messages. Yahoo Finance provides stock prices, charts, and news headlines, ticker symbols only, never anything that identifies you. All three are bound by data processing agreements or public API terms and are prohibited from using your data for any other purpose. We do not share your learning progress with schools or teachers.

Legal Requirements

We may disclose data if required by law, valid court order, or to protect the safety of our users or the public. We will notify you of such disclosures where legally permitted.

Your Rights

Access & Export

Request a full copy of your personal data by emailing [email protected]. We respond within 30 days.

Correction

Update your name, state, age, goals, or explanation style at any time in Settings.

Deletion

Delete your account from Settings → Account → Delete Account. All personal data is permanently removed from our systems within 30 days. Anonymized aggregate analytics (not linked to you) may be retained.

Children (COPPA)

Ecily is designed for users 13 and older. We do not knowingly collect data from children under 13. Parents can request deletion of any under-13 account by emailing [email protected].

California (CCPA) / EU/UK (GDPR)

You have the right to know, access, correct, and delete your data. We do not sell data. EU/UK users may contact our DPO at [email protected] for erasure or portability requests.

Security

All data is encrypted in transit (TLS 1.3) and at rest (AES-256 via Firebase). Access to user data is restricted to authorized Ecily engineers on a strict need-to-know basis.

Contact

Privacy questions: [email protected]