How we look after your data

• HK Study Hub creates every account. There is no public sign-up.
• We keep what we need to run your revision: your login, subjects, practice answers and progress.
• We don't save the text of your Compass AI chats, but each message is sent to an outside AI service to get an answer.
• We don't show adverts, and we don't sell or rent anyone's data.
• You, or your parent or guardian, can ask to see, correct or delete your data at any time by emailing contact@hkstudyhub.com.

HK Study Hub decides how your data in HK Study Pilot is used and is responsible for it under the PDPO. If you have a question about this notice, email us at contact@hkstudyhub.com.

When HK Study Hub sets up your account, and while you use the app, we store:

• Account details: your email address, the display name you see in the portal, and your role (student, tutor or admin). Your password is handled by our sign-in provider and stored in scrambled (hashed) form, so our staff can't read it.
• Your courses: the subjects and levels (for example SL or HL) your tutor has enrolled you in.
• Practice records: the practice sets you start, the answers you type, whether they were right, marks and self-marking, how many tries you took, whether you opened the worked solution, questions you flagged, and time spent.
• Progress: your XP, your streak and the last day you were active.
• Compass AI usage: how many messages you sent each day and how much text the AI processed, so we can apply the daily limit and keep costs under control. We do not store what you wrote or what Compass AI replied.

Your browser also keeps a sign-in cookie (so you stay logged in) and remembers which subject you last picked. We don't use advertising or tracking cookies. Like most websites, our hosting providers keep short-lived technical logs (such as IP address, browser type and the time of a request) to keep the service secure and working.

• To let you sign in and show you the subjects you study.
• To mark your practice, track your progress and show it on your dashboard.
• To let your HK Study Hub tutors see how you're getting on, so they can support you in lessons.
• To run Compass AI and keep it within fair daily limits.
• To keep the service secure, fix problems and improve our questions and guides.

We only use your data for these purposes. We don't use it for direct marketing.

Compass AI is an AI tutor. When you send it a message, we pass the message to an AI model so it can write a reply. This is how it works:

• Your message, the last few messages of the conversation, and the names and levels of your subjects are sent through the Vercel AI Gateway to a company that runs the AI model. At the moment we use the open DeepSeek model, run by cloud providers such as Alibaba Cloud, Microsoft Azure, Baseten, DigitalOcean or Wafer. These servers may be outside Hong Kong.
• We only allow providers that promise not to keep your messages after replying and not to use them to train AI models.
• If you ask about a practice question or a study guide, the question or guide text is sent too, along with the answer you typed for that question.
• We don't send your name or email address.
• We don't save the chat in our database. The conversation lives in your open browser tab and disappears when you close or refresh it.

Our staff also use the same AI service to help draft study guides. That only involves syllabus content, never student information.

We use a small number of service providers to run the app. They handle data on our behalf:

• Supabase provides our database and sign-in system. Your account and practice records are stored on its servers in the United States (US East).
• Vercel hosts the website and runs the app's code, in the United States (Washington, D.C. area).
• Vercel AI Gateway and the AI model provider it routes to process Compass AI messages, as described above.

This means your data is stored and processed outside Hong Kong. We choose providers that protect the data they hold, and we only share what's needed for them to provide their service. Other than these providers and HK Study Hub staff, we only share data if the law requires us to.

We never sell, rent or trade personal data, and there is no advertising in HK Study Pilot.

We keep your account and practice records while you're enrolled with HK Study Hub. When you leave, or if you or your parent or guardian ask us to, we delete your account. Deleting an account also deletes your practice records, progress and Compass AI usage counts. Copies in our providers' routine backups may take a short time longer to be overwritten.

The app only works over encrypted (HTTPS) connections. Database rules mean students can only see their own records, and only HK Study Hub staff who need it can see student progress. No system is perfectly secure, so please keep your password to yourself and tell us straight away if you think someone else has used your account.

Under the PDPO you can:

• ask for a copy of the personal data we hold about you;
• ask us to correct anything that's wrong (you can also change your display name on your Account page);
• ask us to delete your account and data.

If you're under 18, your parent or guardian can make these requests for you. Email contact@hkstudyhub.com and tell us the student's name and the email address used to sign in. We may need to check who you are before we act, and we will reply within 40 days.

If you're not happy with how we've handled your data, please tell us first. You can also contact the Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD).

If we change how we use data, we'll update this page and the date at the top. For bigger changes we'll let students and parents know through HK Study Hub. See also our terms of use.