Privacy Policy

This Privacy Policy explains how Varsity Tutors LLC, a Nerdy company, and its related companies (“Nerdy,” “we,” “us” or “our”) collect, use, share and protect personal information when you use Nerdy’s AP courses: the websites at nerdy.com/ap, our apps, films, practice questions, study materials, live and on-demand sessions, AI features, and any other service that links to this policy (together, the “Service”). It also explains your choices and rights.

Please read it with our Terms and Conditions. By using the Service, you agree to this policy. If you don’t agree, please don’t use the Service.

1Who we are and what this policy covers

The Service is operated by Varsity Tutors LLC, 8001 Forsyth Blvd., Suite 1050, St. Louis, Missouri 63105. Varsity Tutors LLC and Varsity Tutors for Schools LLC are part of Nerdy Inc.

This policy covers personal information we collect through the Service. It doesn’t cover other Nerdy websites and services, which have their own privacy notices, or third-party websites and services, which have their own policies. If you use the Service through your school or district, our agreement with the school also governs how we handle your information (see Section 9).

“Personal information” means information that identifies you or could reasonably be linked to you, directly or indirectly.

2Information we collect

What we collect depends on how you use the Service. You can browse some parts of the Service without telling us who you are, and some features need more information than others.

Information you give us

• Account and profile information: your name, email address, phone number, sign-in details, profile photo, date of birth or age, grade, graduation year, school, the AP courses and exams you are preparing for, your goals and your preferences.
• Parent and guardian information: if a parent or guardian sets up, manages or pays for an account, their name, email address, phone number and relationship to the student.
• Payment and billing information: if you buy something, your billing name and address and payment details. Our payment processors, and app stores if you buy through them, collect and process card and bank details for us. We don’t store full credit or debit card numbers, card security codes or sensitive bank account information.
• Your learning work: your answers to practice questions and quizzes, scores, essays and written responses, notes, highlights, bookmarks, uploads, certificates you earn, and anything else you create or submit.
• AI feature inputs: what you type, say or upload into AI features, such as questions, prompts, drafts and images, along with what the features produce and any feedback you give on it.
• Live and recorded sessions: if you join a live class, tutoring session or other session, what you share in it, including chat messages, files, your voice and your image if you turn on your microphone or camera, and recordings and transcripts of the session (see Section 5).
• Messages with us: what you send us when you contact support, answer a survey, enter a promotion, write a review or testimonial, or otherwise get in touch, including by email, chat, phone or text. We may record and transcribe support calls; we tell you when we do.
• Information about other people: if you give us information about someone else, such as a parent’s email address, a friend you refer or an emergency contact, you are responsible for having their permission to do so.

Information we collect automatically

• Activity on the Service: the pages, courses and films you open; how far you watch, and where you pause, rewind or stop; the chapters, scenes and interactive moments you reach; the questions you answer and how; the resources and documents you open or download; the buttons and links you click; what you search for; how long you spend; and when you sign in and out. Section 4 explains how we use this record.
• Device and connection information: your IP address, browser type and version, operating system, device type and model, screen size, language, time zone, the site or link that brought you to the Service, and identifiers such as a random ID we store in your browser or app, cookie IDs and, in apps, device and push notification IDs.
• Approximate location: your general location, such as your city, state or country, which we work out from your IP address. We don’t collect precise location (such as GPS) unless we ask for your permission first.
• Performance and diagnostics: how the Service is performing on your device, including errors, crashes, loading times and video playback quality, so we can fix problems.
• Cookies and similar technologies: see Section 6.

Information we get from others

• Sign-in providers. If you sign in with Google, Apple or another provider, it shares information such as your name, email address and profile photo with us, according to your settings with that provider. Apple may give us a private relay email address instead of your own.
• Schools, districts and teachers. If your school provides the Service, it may give us information such as your name, school email address, grade, class and teacher, and it may receive information from us (see Section 9).
• Parents and guardians. A parent or guardian may give us information about their child to set up or manage the child’s account.
• Payment processors and app stores. They tell us whether a payment succeeded, and give us details of your purchases and subscriptions.
• Service providers and partners. Companies that help us with analytics, security, fraud prevention, customer support and marketing may give us information, for example to help us understand how people find the Service.

3How we use information

We use personal information to:

• Provide the Service: create and run your account, sign you in, play films, save your progress, score your practice, issue certificates, run live sessions and AI features, and deliver what you buy.
• Personalize your learning: remember where you left off, recommend what to study next, and adapt practice and feedback to how you are doing.
• Communicate with you: send sign-in links, receipts, reminders, account and security messages, and answers to your questions; and, with the choices described in Section 8, news, study tips and offers about our products and services and those of other Nerdy companies.
• Process payments and manage subscriptions, including renewals, trials, promotions and refunds.
• Support you: respond to requests and fix problems.
• Keep the Service safe and fair: protect accounts, detect and prevent fraud, abuse, cheating and security incidents, and enforce our Terms.
• Improve and develop the Service: understand how people use it, find what works for learning and what doesn’t, fix bugs, research and build new courses and features, and train and improve the models behind our AI features.
• Market the Service: plan, run and measure our marketing and advertising, as described in Sections 6 and 7.
• Meet legal obligations and protect rights: comply with the law, respond to lawful requests, and establish, exercise or defend legal claims.
• Run our business: for business planning, reporting, auditing and corporate transactions.
• For any other purpose we describe when we collect the information, or with your consent.

We may also create de-identified or aggregated information that can no longer reasonably identify you, and use it for any lawful purpose, such as research and reporting on how students learn. We won’t try to re-identify it, except to check that our de-identification works.

4How we measure use of the Service

Whenever you use the Service, we keep a record of what happens in it, as described under “Activity on the Service” in Section 2. Each entry notes what happened (for example, a page view, a film starting, a question answered or a document opened), where and when it happened, how long it took, the type of device and browser, and the page or link that led to it.

• When you are signed in, the record is linked to your account.
• When you aren’t, it is linked to a random ID stored in your browser or app, which doesn’t by itself tell us who you are. If you later sign in on that device, we may connect the earlier record to your account.

This record is part of how the Service works. We use it to save and sync your progress, to show you what to continue, to keep the Service secure and reliable, and to learn which films, questions and resources help students and which need work. Because the Service depends on it, there is no setting to switch it off while you use the Service. It is stored with our service providers on our behalf (see Section 7), and we don’t sell it.

5Live sessions, recordings and AI features

Recordings. Live classes, tutoring sessions and other sessions may be recorded, including audio, video, screen sharing, chat and transcripts. We use recordings and transcripts to provide the Service (for example, so you can watch a class again), to review quality and safety, for the training and professional development of tutors, instructors and other educators (“Instructors”), to resolve disputes, and to improve the Service, including with automated tools and AI. Recordings may include your voice and image if you turn on your microphone or camera.

AI features. When you use AI features, we process what you enter and what the features produce to give you a response and to run the feature. We also use them to maintain and improve the Service and the models behind our AI features, to keep the features safe and accurate, and to prevent misuse. Some AI features are powered by technology from third-party AI providers, which process this information for us under contracts that limit how they may use it. People on our team, or service providers working for us, may review inputs and outputs, for example to check quality or investigate a report. Please don’t enter sensitive personal information into AI features.

Automated decisions. We use automated tools, including AI, to score practice answers, give feedback and recommend what to study. These don’t make decisions that have legal or similarly significant effects on you.

6Cookies and similar technologies

We and the companies that work for us use cookies, local storage, pixels, tags, software development kits (SDKs) and similar technologies (together, “cookies”) in the Service and in our emails.

• Essential cookies keep you signed in, keep your account secure, remember your settings and progress, and make the Service work. For example, when you sign in we set a cookie that lets the Service recognize your session.
• Analytics cookies help us record and understand how the Service is used (see Section 4) and measure performance. We may use analytics providers, such as Google Analytics, to help us with this.
• Advertising and measurement cookies, where we use them, let us and our advertising partners, such as Google and Meta, measure how well our ads work and show ads for the Service on other websites and apps, based on visits to our sites. These partners may collect information about your activity on our sites and others, under their own privacy policies.

We don’t place advertising cookies, or allow advertising partners to collect information, on parts of the Service used by students through a school (see Section 9).

Your choices. You can block or delete cookies in your browser or device settings. If you block essential cookies, parts of the Service won’t work. You can opt out of Google Analytics at tools.google.com/dlpage/gaoptout, and you can opt out of interest-based ads from many companies at optout.aboutads.info and youradchoices.com. We honor Global Privacy Control (“GPC”) signals for third-party online tracking (learn more at globalprivacycontrol.org). Some browsers send “Do Not Track” signals; because there is no common standard for them, the Service doesn’t respond to them.

7How we share information

We don’t sell personal information (see “We don’t sell your personal information” below). We share it only as this policy describes:

• Service providers. Companies that work for us and process information on our behalf, under contracts that require them to protect it and use it only to provide their services to us. They provide services such as hosting, databases, cloud storage, video and media delivery, email, text messaging and push notifications, payment processing, customer support, analytics, security and fraud prevention, AI technology, surveys, and professional services such as legal and accounting. For example, we store accounts, progress and activity records with Supabase, deliver video and media through Amazon Web Services, and host our websites with Netlify.
• Nerdy companies. Our parent company, Nerdy Inc., and its subsidiaries and affiliates, such as Varsity Tutors for Schools LLC, which use it for the purposes in this policy, including to provide and support the Service and to tell you about other Nerdy products, subject to your choices.
• Business partners. Companies we have a commercial relationship with, such as a partner in a joint program, promotion or affiliate marketing agreement, when you take part. We don’t share School Data with them.
• Your school. If you use the Service through a school or district, we share information with the school as our agreement with it allows, such as your progress, scores and activity (see Section 9).
• Parents and guardians. If a parent or guardian set up, manages or pays for a student’s account, they may see the student’s account details, progress and activity.
• Instructors. Tutors and instructors who teach you see information they need to teach you, such as your name, the course, your progress and what you share in sessions.
• Other users, when you choose. In a live class or other shared feature, other participants can see your name and what you share. If you post something where others can see it, they can see it.
• Services you connect. If you sign in with or connect another service, we share information with it as needed to make the connection work, as you direct.
• Legal and safety reasons. If we believe it is needed to comply with the law or a legal process (such as a subpoena or court order) or a request from law enforcement or government; to establish, protect or exercise our rights or defend against legal claims; to protect the rights, property or safety of you, our users or others; or to investigate or prevent fraud, a breach of our Terms or other illegal or harmful activity.
• Business transfers. In connection with, or while negotiating, a merger, acquisition, financing, reorganization, sale of assets or similar transaction, or in bankruptcy, where information may be transferred to the other company.
• With your consent or at your direction, such as when you ask us to share a certificate or let us post your testimonial. We ask for your consent before posting a testimonial with your name.
• De-identified and aggregated information, which can no longer reasonably identify you, with partners, researchers, investors and others.

We don’t sell your personal information

We don’t sell personal information collected through the Service, and we don’t consider any of the sharing described in this policy to be a sale. We don’t sell or share for targeted advertising the personal information of anyone we know is under 16. If we use the advertising and measurement cookies described in Section 6, some state laws may treat that as “sharing” or “targeted advertising,” and you can opt out as described in Sections 6 and 13. If our practices change, we will update this policy first.

8Your choices

• Your account. You can review and update much of your account information in your account settings. For anything else, contact us (see Section 18).
• Email. Use the unsubscribe link at the bottom of any marketing email. We will still send account and service emails, such as sign-in links and receipts.
• Texts and calls. Reply STOP to any text to stop texts from that number, or follow the opt-out prompt during a call. You can also send a Do Not Call request to dnc@varsitytutors.com.
• Push notifications. Turn them off in your device settings or in the app.
• Cookies and tracking. See Section 6.
• Closing your account and deleting information. Contact us or use our request form (see Section 13). Deleting your account removes your progress and history from the Service, although we may keep some information as Section 10 describes.

You can always choose not to give us personal information, but you may not be able to use some features without it.

9Children and students

Children under 13

The parts of the Service that need an account are not directed at children under 13, and we don’t knowingly collect personal information online from a child under 13 except as described here. Free materials that don’t need an account may be used by anyone. When they are, we collect only the information described under “Information we collect automatically” in Section 2, and use it to run, secure and improve the Service.

A child under 13 may use the parts of the Service that need an account only if a parent or legal guardian sets up and manages the account and gives the consent the law requires, or if the child’s school provides the Service and gives consent for the school’s use under our agreement with the school. A parent or guardian may give us information about their child, such as the child’s name, age and grade, so we can provide the Service. We use a child’s personal information only to provide and support the Service for the child, including keeping it secure and working properly, unless the parent or school agrees to more. We don’t use it for marketing or targeted advertising, or disclose it to third parties for their own purposes.

Parents’ rights. A parent or guardian of a child under 13 can review the personal information we have collected from or about the child, ask us to delete it, and refuse to let us collect or use it further. To do this, email privacy@varsitytutors.com, saying what you would like us to do, and we will contact you to verify that you are the parent or guardian and act on your request. If the child uses the Service through school, we may refer you to the school.

If we learn that we have collected personal information from a child under 13 without the consent the law requires, we will delete it.

Students 13 and older

Students under 18 need a parent or guardian’s permission to use the Service (see our Terms). Parents and guardians who manage or pay for a student’s account may see the student’s progress and activity.

Students who use the Service through school

Nerdy, through Varsity Tutors for Schools LLC, contracts with schools, school districts and other education agencies (“Schools”) to provide the Service to their students. When a School provides the Service:

• School Data. Personal information about students that we receive or collect in providing the Service to the School, alone or combined, and that is linked or linkable to a specific student (“School Data”), is governed by our agreement with the School as well as this policy. If they conflict, the agreement controls.
• FERPA. Where the Family Educational Rights and Privacy Act applies, we act as a “school official” with a legitimate educational interest in School Data, under the School’s direct control for its use and maintenance.
• How we use School Data. We collect and use School Data only to provide the Service to the School, including reporting, improving users’ experience and improving our products and services, and for no other commercial purpose. We don’t use School Data for targeted advertising, sell it, or build marketing profiles of students from it, and we don’t allow advertising partners to collect information related to School Data.
• Consent. The School is responsible for giving any notices and getting any consents the law requires for its students to use the Service, including parental consent for children under 13 where it applies.
• Access, correction and deletion. Parents and eligible students should send requests about School Data to the School, and we will help the School respond.
• Deletion. We delete School Data within 90 days after our agreement with the School expires or ends, unless the School has contracted for a different retention schedule, or we must keep it by law.
• What isn’t School Data. School Data doesn’t include de-identified, anonymized or aggregated information, or information we collect outside the services we provide to the School (for example, if a student also creates their own personal account). We may use that information for our own purposes, including analytics and product development, as this policy describes.

We comply with the student privacy laws that apply to us, such as state laws that protect student information collected through school services.

10How long we keep information

We keep personal information for as long as you have an account or use the Service, and as long as we need it for the purposes it was collected for: to provide the Service, resolve disputes, pursue legitimate business purposes, enforce our agreements, establish legal defenses, prevent fraud and comply with the law. How long that is depends on the type of information and how it is used, so retention varies. For example, School Data is deleted within 90 days after a School agreement expires or ends, unless the School has contracted for a different schedule. When we no longer need personal information, we delete it or de-identify it.

11How we protect information

We use industry-standard security measures to protect personal information, both while it is sent to us and once we receive it, and we take measures reasonably necessary to protect against its unauthorized access, use, alteration or destruction. Within Nerdy, we give access to personal information only to employees, contractors and affiliated organizations that need it to provide the Service or process transactions for us, and that have agreed to keep it confidential.

No security measures are perfect, and we can’t guarantee that information sent to, stored on or sent from our systems is completely secure. Please keep your sign-in details and email account secure. If you have a question about security, or think your account has been compromised, contact privacy@varsitytutors.com.

12Users outside the United States

Nerdy is based in the United States, and the Service is hosted there. If you use the Service from outside the United States, your information will be transferred to, stored and processed in the United States, where data protection laws may differ from those where you live. By using the Service, you consent to this.

We rely on different legal bases to process personal information, depending on how you use the Service: your consent; the need to provide the Service and perform our agreements with you; our legal obligations; protecting the security of our systems and users; and our other legitimate interests, such as improving the Service. Depending on where you live (for example, the United Kingdom or Canada), you may have the right to ask us to give you access to or a copy of your information, correct it, delete it, restrict or object to its processing (including for direct marketing), transfer it, or withdraw your consent. To make a request, see Section 13. We respond within the time the law requires and may ask for information to confirm your identity first.

13Your privacy rights

Depending on where you live, you may have the right to:

• Know and access: ask what personal information we collect, use and disclose about you, and get a copy of it in a portable format.
• Correct: ask us to correct inaccurate personal information.
• Delete: ask us to delete personal information.
• Opt out: opt out of the sale of personal information, its sharing for targeted (cross-context behavioral) advertising, and profiling that has legal or similarly significant effects. We don’t sell personal information collected through the Service, but you may still ask.
• Limit sensitive information: ask us to limit how we use sensitive personal information, where the law gives that right. We use sensitive personal information, such as account sign-in details, only to provide the Service and for other purposes the law allows.
• Appeal: where the law gives this right, ask us to reconsider if we decline your request, and contact your state attorney general if we deny your appeal.
• Not be treated differently: we won’t discriminate against you for exercising these rights.

These rights come from laws such as the California Consumer Privacy Act (as amended by the California Privacy Rights Act) and the consumer privacy laws of Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, Tennessee, Utah, Virginia and other states. Where the law requires it, we honor these rights under every state privacy law in effect, even one not yet listed here. If you live somewhere not listed, you may still send us a request, and we will handle it as the law that applies to you requires.

How to make a request. Use our privacy request form or email privacy@varsitytutors.com. To ask about School Data, contact your school (see Section 9).

Verification. We verify your request by comparing the information you give us with the information in your account, including by confirming your email address. We may ask for more information to verify your identity, and for some requests we may ask for a signed declaration, under penalty of perjury, that you are the person the request is about. If an authorized agent makes a request for you, we may ask for proof of your written permission and ask you to verify your identity with us directly. A parent or guardian may make a request for their child.

We respond within a reasonable time and within the time the law requires.

14Notice for California residents

This section adds to the rest of this policy for California residents and is our notice at collection under the California Consumer Privacy Act.

Categories we collect. We collect the following categories of personal information, and in the past 12 months we may have collected them and disclosed them for business purposes:

• Identifiers, such as your name, email address, phone number, postal address, IP address, account and device IDs.
• Customer records, such as billing information. Card numbers are collected and processed by our payment processors.
• Characteristics of protected classifications, limited to age or date of birth.
• Commercial information, such as purchases, subscriptions and purchase history.
• Internet and other electronic network activity, such as your activity on the Service, device information and interactions with our emails.
• Geolocation data, limited to approximate location from your IP address.
• Audio, electronic and visual information, such as recordings of sessions and support calls, and images you upload.
• Education information, such as your school, grade, courses, answers, scores and progress. School Data is handled as Section 9 describes.
• Inferences drawn from the above, such as your strengths, the topics you need to practice, and your preferences.
• Sensitive personal information, limited to account sign-in details.

Sources, purposes and recipients. We collect these categories from the sources in Section 2, for the purposes in Sections 3 to 6, and disclose them to the recipients in Section 7. We don’t sell personal information collected through the Service. Section 7 explains how we handle advertising and measurement cookies, and Sections 6 and 13 explain how to opt out. We keep each category as Section 10 describes.

Your rights. See Section 13.

15Notice for Nevada residents

Nevada law lets residents ask us not to sell certain personal information. We don’t sell personal information as Nevada law defines it, but you may still send us a verified request using our privacy request form. We will record your instructions and follow them if our practices change. We verify requests using information associated with your account, including your email address, and may need more information.

16Links and other services

The Service may link to, or work with, websites, apps and services that we don’t control, such as sign-in providers, app stores, payment processors and sources we cite. Their own privacy policies govern what they collect, and we aren’t responsible for their practices. We recommend reading the privacy policy of any service you use.

17Changes to this policy

We may update this policy as the Service, our practices or the law change. When we do, we change the “Last updated” date at the top. If we make a material change, we may tell you by email (to the address on your account) or with a notice in the Service before the change takes effect. Please check this policy from time to time. If you keep using the Service after a change takes effect, the updated policy applies to you.

18Contact us

If you have questions or comments about this policy or our privacy practices, contact us:

• Email: privacy@varsitytutors.com
• Privacy requests: our privacy request form
• Mail: Varsity Tutors, Attn: Legal, 8001 Forsyth Blvd., Suite 1050, St. Louis, Missouri 63105

If you need this policy in another format because of a disability, contact us at accessibility@varsitytutors.com or using any of the methods above.