PRIVACY POLICY

support@kingofthecurve.org

Updated: 21st January 2026

Introduction

The MCAT: King of the Curve Site www.kingofthecurve.org (the "Site"), the MCAT: King of The Curve Mobile Application (the "App"), and the King of the Curve Course portal currently available at https://kotcourse.web.app (the "Course") is owned by King of The Curve LLC ("we", "us", "King of The Curve" and "our") and operated from the United States. This privacy policy has been compiled to better serve those who are concerned with how their 'Personally Identifiable Information' (PII) is being used online. PII, as described in US privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Please read our privacy policy carefully to get a clear understanding of how we collect, use, protect, or otherwise handle your PII.

This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data. We use your data to provide and improve the Service. Service means the King of The Curve website, the King of The Curve App, and the Course (online course portal and course features/content) operated by King of The Curve LLC.

For US residents, we adopt this notice to comply with the California Consumer Privacy Act of ("CCPA") and other US privacy laws. Any terms defined in the CCPA have the same meaning when used in this Policy. We also comply with the Canadian PIPEDA. For users from Europe, see below "General Data Protection Regulation of 2018 (GDPR), (EU) 2016/679.

By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions.

Personal Information We Collect

Personal Information You Provide (PII or Personal Data)

Personal information you may provide to us through the Service or otherwise includes:

• Personal data, personal information such as your name, profile picture, email and mailing addresses, phone number

• Registration data, such as information that you provide to register for an account or sign up, including the day and month of your birth

• Profile data, such as your username and password that you may set to establish an online account with us and your interests and preferences

• Marketing data, such as the email address or contact details that we use to send marketing communications and your preferences for receiving communications about our activities, events, sweepstakes and contests

• Purchase data, including your order history and information needed to process and fulfill your order, including order details, billing address, and delivery address. Please note that Course and App purchases are processed by third-party payment processors; we do not store full credit card details

• Course Learning Data, including information regarding your engagement with the Course, such as lessons viewed, quiz and question performance, answers submitted, time spent on materials, and progress through study plans and learning analytics

• Other information that we may collect which is not specifically listed here, but which we will use in accordance with this Privacy Policy or as otherwise disclosed at the time of collection

Automatic Collection

We and our service providers may automatically log information about you, your computer or mobile device, and your activity occurring on or through the Service, such as:

• Device data, such as your computer or mobile device operating system type and version number, manufacturer and model, browser type, screen resolution, IP address, the website you visited before browsing our Site or Course, and general location information such as city, state or geographic area

• Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access

• When you download the King of The Curve App, we collect your device ID. As you access your account from the App we will collect your account activity

• Cookies and similar technologies. Some of our automatic data collection is facilitated by cookies and similar technologies

In accordance with the introduction of App Tracking Transparency (ATT) features, the App (excluding the web-based Course portal) collects data which is utilized for tracking purposes to enhance user experience.

How We Use Your Personal Information

We use your personal information for the following purposes and as otherwise described in this Privacy Policy or at the time of collection:

Service delivery

We may use your personal information to:

• Provide, operate and improve the Service, such as to enable you to make purchases of our pro version, Course subscriptions, or any other in-app purchases

• Provide Course access (e.g., for 12 months), operate course features (quizzes, study plans, analytics), and improve course content and functionality

• Establish and maintain your account on the Service

• Communicate with you about the Service, including by sending you announcements, updates, security alerts, and support and administrative messages

• Provide customer support and maintenance for the Service

Direct Marketing

We may use your personal information to send you King of The Curve-related marketing communications as permitted by law. You will have the ability to opt-out of our marketing and promotional communications as described in the Your Choices section below.

For research and development

We may use your personal information for research and development purposes, including to analyze and improve the Service and our business.

To create anonymous data

We may create aggregated, de-identified or other anonymous data records from your personal information and other individuals whose personal information we collect. We make personal information into anonymous data by excluding information (such as your name) that makes the data personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve the Service and promote our business.

To comply with laws and regulations

We use your personal information as we believe necessary or appropriate to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.

For compliance, fraud prevention and safety

We may use your personal information and disclose it to law enforcement, government authorities, and private parties as we believe necessary or appropriate to: (a) protect our, your or others' rights, privacy, safety or property (including by making and defending legal claims); (b) audit our internal processes for compliance with legal and contractual requirements; (c) enforce the terms and conditions that govern the Service; and (d) protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity, including cyber-attacks and identity theft.

With your consent

In some cases we may specifically ask for your consent to collect, use or share your personal information, such as when required by law.

How We Share Your Personal Information

We may share your personal information with the following third parties and as otherwise described in this Privacy Policy or at the time of collection:

• Service providers: Companies and individuals that provide services on our behalf or help us operate the Service or our business (such as order fulfillment, shipping, third-party payment processing where we do not store full card details, customer support, hosting, analytics, email delivery, marketing, database management services, returns processing and risk and fraud mitigation)

• Third party platforms: Social media and other third party platforms that you connect to the Service, such as when you use options to access the Service by logging into a social media platform

• The public: Other users of the Service and the public, when you disclose personal information for public use

• Professional advisors: Professional advisors, such as lawyers, bankers, auditors and insurers, where necessary in the course of the professional services that they render to us

• Authorities and others: Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate to comply with law

Your Choices

• Access or update your account information: If you have registered for an account with us, you may review and update certain personal information in your account profile by logging into the account

• Do Not Track: Some Internet browsers may be configured to send "Do Not Track" signals to the online services that you visit. We currently do not respond to "Do Not Track" or similar signals

• Privacy settings and location data: Users of our App can disable our access to their device's precise geo-location in their mobile device settings

• Choosing not to share your personal information: If you do not provide information that we need to provide the Service, we may not be able to provide you with the Service or certain features

• Third-party platforms or social media networks: If you choose to create an account through or connect the Service with another third-party platform, you may have the ability to limit the information that we may obtain from the third-party at the time you log in to the Service

Deleting Data and Information

Users on the App, Site, and Course can delete their Account. Once an account is deleted, we will erase ALL data of the User associated with their account including messages, their connections, and their personal information. The process cannot be undone once the user proceeds with the deletion of data.

Other Sites and Services

The Service may contain links to other websites and online services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. We do not control third party websites or online services, and we are not responsible for their actions.

Security Practices

The security of your personal information is important to us. We employ a number of organizational, technical and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal information.

International Data Transfers

King of The Curve is headquartered in the United States and may have service providers in other countries. Your personal information may be transferred to the United States or other locations outside of your state, province, country, or other governmental jurisdiction where privacy laws may not be as protective as those in your jurisdiction.

CCPA – For U.S.

The CCPA grants California residents the following rights. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

• Information: You can request information about how we have collected, used and shared and used your Personal Information during the past 12 months.

• Access: You can request a copy of the Personal Information that we have collected about you during the past 12 months.

• Deletion: You can ask us to delete the Personal Information that we have collected from you.

You are entitled to exercise the rights described above free from discrimination.

General Data Protection Regulation (GDPR)

If you are from the European Economic Area (EEA), King of The Curve legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data we collect and the specific context in which we collect it.

King of The Curve may process your Personal Data because:

• We need to perform a contract with you

• You have given us permission to do so

• The processing is in our legitimate interests and it's not overridden by your rights

• For payment processing purposes

• To comply with the law

Retention of Data

King of The Curve will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

Artificial Intelligence and Machine Learning

We may use Artificial Intelligence (AI) and Machine Learning (ML) technologies to enhance your experience with our Service. These technologies analyze data patterns to improve recommendations, personalize content, and optimize our Service's functionality.

How AI and ML Are Used:

• Personalization: Tailoring study recommendations and content based on your usage patterns and preferences

• Performance Insights: Improving our algorithms by analyzing aggregated data for accuracy, efficiency, and relevance

• Fraud Detection: Detecting and preventing unauthorized activities or suspicious behavior

• Content Moderation: Using AI to filter and monitor user-generated content for compliance with our terms

Data Processed for AI and ML:

• Usage data such as study habits, page views, and quiz performance

• Profile information such as user preferences and selected features

• Aggregated, anonymized data used solely for algorithm improvement

We do not use AI/ML technologies to make decisions with legal or significant effects on you without human intervention.

Your Choices Regarding AI

If you wish to opt out of AI-based personalization features, you can manage your preferences within your account settings or contact us at support@kingofthecurve.org. Note that opting out may limit certain functionality.

Data Encryption and Security

We prioritize the security of your personal data by employing:

• End-to-End Encryption: Sensitive data, such as payment details, is encrypted during transmission and storage

• Access Controls: Only authorized personnel with a legitimate need can access your data

• Regular Audits: Periodic security assessments to ensure compliance with evolving standards

Despite our efforts, no method of transmission or storage is completely secure. If you suspect a security breach, contact support@kingofthecurve.org immediately.

International Compliance

We comply with international data protection regulations to ensure your privacy, regardless of your location.

• For EEA Users (GDPR): Your data is processed based on consent, contractual necessity, or legitimate interest

• For Canadian Users (PIPEDA): We comply with requirements for consent, accuracy, and accountability

• For Other Jurisdictions: We strive to adhere to applicable local laws

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

KING OF THE CURVE LLC

Email: support@kingofthecurve.org

This Privacy Policy is effective as of January 21, 2026. We may update this policy from time to time to reflect changes in our practices or applicable laws.