PrEPConnect Privacy Policy

Last Updated: November 18, 2025

1. Introduction

PrepConnect ("we," "us," "our," or "the Platform") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

By using PrEPConnect, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Platform.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

Name, email address, phone number
Username and password
Date of birth
Profile picture
Educational background and qualifications (for tutors)
Academic interests and goals (for students)

Profile Information:

Biography and personal description
Subject expertise and teaching experience
Educational credentials and certifications
Availability and scheduling preferences
Pricing information (for tutors)

Payment Information:

Billing address
Payment method details (processed securely by third-party providers)
Transaction history

Communications:

Messages sent through the Platform
Customer support correspondence
Feedback and reviews
Survey responses

User-Generated Content:

Reviews and ratings
Forum posts and comments
Study materials or resources shared
Profile customizations

2.2 Information Collected Automatically

Usage Data:

IP address and device identifiers
Browser type and version
Operating system
Pages visited and time spent
Search queries and interactions
Referral sources
Clickstream data

Technical Information:

Device information (model, manufacturer)
Network connection type
App version and settings
Time zone and language preferences

Cookies and Tracking Technologies:

Session cookies
Persistent cookies
Web beacons and pixels
Analytics tools
Local storage

2.3 Information from Third Parties

Social Media:

Profile information when you connect social media accounts
Authentication data from social login providers

Background Checks:

Criminal background check results (for tutors)
Identity verification data

Payment Processors:

Transaction confirmation and payment status
Fraud prevention data

Educational Institutions:

Verification of credentials and degrees (with your consent)

3. How We Use Your Information

3.1 Core Service Delivery

Create and manage your account
Facilitate connections between students and tutors
Process payments and transactions
Enable communication between users
Provide customer support
Verify tutor qualifications and credentials

3.2 Platform Improvement

Analyze usage patterns and trends
Improve Platform functionality and user experience
Develop new features and services
Conduct research and analytics
Test and troubleshoot issues

3.3 Safety and Security

Detect and prevent fraud and abuse
Ensure Platform security and integrity
Enforce our Terms of Service
Protect against legal liability
Verify user identity
Conduct background checks

3.4 Communications

Send transactional emails (confirmations, receipts)
Provide service updates and notifications
Send marketing and promotional materials (with consent)
Respond to inquiries and support requests
Conduct surveys and collect feedback

3.5 Legal Compliance

Comply with legal obligations and regulations
Respond to legal requests and court orders
Protect our rights and property
Resolve disputes

4. How We Share Your Information

4.1 With Other Users

Your public profile information is visible to other users
Students can view tutor profiles, qualifications, and reviews
Tutors can view student profiles and educational goals
Messaging content is shared between conversation participants

4.2 With Service Providers

We share information with third-party vendors who perform services on our behalf:

Payment processors (Stripe, PayPal, etc.)
Cloud hosting providers (AWS, Google Cloud, etc.)
Analytics services (Google Analytics, Mixpanel, etc.)
Email service providers
Background check providers
Customer support platforms

4.3 For Legal Reasons

To comply with laws, regulations, or legal processes
To respond to government requests or court orders
To protect our rights, property, or safety
To prevent fraud or illegal activities
To enforce our Terms of Service

4.4 Business Transfers

If PrEPConnect is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4.5 With Your Consent

We may share your information for any other purpose with your explicit consent.

4.6 Aggregated or De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you.

5. Your Privacy Rights and Choices

5.1 Access and Correction

You have the right to:

Access your personal information
Correct inaccurate information
Update your profile and preferences
Download your data

5.2 Deletion

You may request deletion of your account and personal information. Note that:

Some information may be retained as required by law
Anonymized data may be retained for analytics
Transaction records may be kept for accounting purposes

5.3 Marketing Communications

You can opt out of marketing emails by:

Clicking "unsubscribe" in any marketing email
Adjusting notification settings in your account
Contacting us directly

Note: You cannot opt out of transactional or service-related communications.

5.4 Cookie Preferences

You can control cookies through:

Browser settings
Our cookie consent tool
Third-party opt-out mechanisms

5.5 Do Not Track

Our Platform does not currently respond to "Do Not Track" browser signals.

5.6 Region-Specific Rights

For California Residents (CCPA):

Right to know what information we collect
Right to delete personal information
Right to opt out of sale of personal information
Right to non-discrimination for exercising rights

For EU/UK Residents (GDPR):

Right to access and data portability
Right to rectification and erasure
Right to restrict processing
Right to object to processing
Right to withdraw consent
Right to lodge a complaint with a supervisory authority

For Other Jurisdictions: We comply with applicable local privacy laws.

6. Data Security

6.1 Security Measures

We implement appropriate technical and organizational measures to protect your information:

Encryption of data in transit (SSL/TLS)
Encryption of sensitive data at rest
Regular security assessments and audits
Access controls and authentication
Employee training on data protection
Secure payment processing (PCI-DSS compliance)

6.2 Limitations

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6.3 Your Responsibility

You are responsible for:

Maintaining the confidentiality of your password
Logging out of your account when using shared devices
Reporting security incidents promptly

7. Data Retention

We retain your information for as long as necessary to:

Provide our services
Comply with legal obligations
Resolve disputes
Enforce our agreements

When information is no longer needed, we securely delete or anonymize it.

Typical Retention Periods:

Active accounts: Duration of account existence
Closed accounts: Up to 7 years for legal compliance
Transaction records: 7 years for tax and accounting purposes
Communications: 3 years or as required by law
Analytics data: Aggregated indefinitely

8. Children's Privacy

8.1 Age Requirements

Users must be at least 13 years old
Users under 18 require parental consent
We do not knowingly collect information from children under 13

8.2 Parental Controls

Parents or guardians can:

Create and manage accounts for minors
Monitor their child's activity
Control privacy settings
Request deletion of a minor's account

8.3 Notification

If we learn we have collected information from a child under 13 without parental consent, we will delete it promptly.

9. International Data Transfers

PrEPConnect is based in [Your Country]. If you access the Platform from outside [Your Country], your information may be transferred to, stored, and processed in [Your Country] or other countries.

We ensure appropriate safeguards are in place for international transfers, including:

Standard contractual clauses
Adequacy decisions
Privacy Shield certification (if applicable)
Your explicit consent

10. Third-Party Links and Services

Our Platform may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

Third-Party Services We Use:

Google Analytics (analytics)
Stripe/PayPal (payment processing)
Typeform (hosting)
[Email Provider] (communications)
Zoom/Google Meet (video)

11. Cookies and Tracking Technologies

11.1 Types of Cookies We Use

Essential Cookies:

Authentication and security
Session management
Load balancing

Functional Cookies:

User preferences and settings
Language selection
Accessibility features

Analytics Cookies:

Usage statistics
Performance monitoring
Error tracking

Marketing Cookies:

Advertising personalization
Campaign effectiveness
Retargeting

11.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may limit Platform functionality.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

Posting the updated policy with a new "Last Updated" date
Sending an email notification
Displaying a prominent notice on the Platform

Your continued use after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

13.1 General Privacy Inquiries

Email: admin@cfhcs.org
Phone: [Your Contact Number]
Address: [Your Business Address]

13.2 Data Protection Officer (if applicable)

Email: admin@cfhcs.org

13.3 Exercise Your Rights

To exercise your privacy rights, contact us at: admin@cfhcs.org

We will respond to your request within 30 days (or as required by applicable law).

14. Additional Information for Specific Regions

14.1 California Residents

CCPA Disclosures:

Categories of Personal Information Collected:

Identifiers (name, email, IP address)
Commercial information (transaction history)
Internet activity (browsing history, interactions)
Professional information (for tutors)
Education information
Inferences from the above

Sources of Information:

Directly from you
Automatically through Platform use
From third parties (background checks, payment processors)

Purposes for Collection:

Service delivery
Platform improvement
Marketing (with consent)
Legal compliance

Categories of Third Parties We Share With:

Service providers
Payment processors
Background check providers
Analytics services

Your California Privacy Rights:

Request disclosure of information collected
Request deletion of personal information
Opt out of sale of personal information (we do not sell information)
Non-discrimination for exercising rights

Shine the Light Law: California residents may request information about sharing personal information with third parties for direct marketing purposes.

14.2 European Economic Area (EEA) and UK Residents

Legal Basis for Processing:

Consent: When you provide explicit consent
Contract: To fulfill our services to you
Legal Obligation: To comply with laws
Legitimate Interests: To improve and protect our Platform

International Transfers: We use Standard Contractual Clauses approved by the European Commission for transfers outside the EEA/UK.

Your GDPR Rights:

Right of access
Right to rectification
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object
Rights related to automated decision-making

Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

14.3 Australian Residents

We comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

14.4 Canadian Residents

We comply with PIPEDA (Personal Information Protection and Electronic Documents Act).

15. Glossary

Personal Information: Information that identifies, relates to, or could reasonably be linked with you.

Processing: Any operation performed on personal information, including collection, storage, use, and disclosure.

Controller: The entity that determines the purposes and means of processing personal information (PrEPConnect).

Processor: A third party that processes personal information on behalf of the controller.

De-identified Data: Information that cannot reasonably be used to identify you.

‍

By using PrEPConnect, you acknowledge that you have read, understood, and agree to this Privacy Policy.

For questions or concerns about this Privacy Policy, please contact us at admin@cfhcs.org.