Privacy Policy

Information we collect

• Account: email address, authentication identifier, settings, target series, and test date.
• Study activity: answers, scores, attempts, review schedules, plan progress, and reports.
• Purchases: Stripe references, price, currency, status, and accepted terms. We do not store full card numbers.
• Operations: security logs, device/browser data, and cookieless product events when analytics is configured and Do Not Track is off.
• Email: subscription choice, delivery ledger, and a voluntarily reported real-test outcome.

How we use information

We use it to run and secure the service, personalize study plans, schedule spaced review, process payments and refunds, answer support requests, measure product reliability, and meet legal obligations. We do not sell personal information or use it for third-party advertising.

Service providers and transfers

Clerk provides authentication, Stripe provides payment processing, Railway provides hosting, Resend may deliver opted-in email, and PostHog EU may receive cookieless product events when explicitly configured. Each provider processes data under its own terms and our configuration.

Retention and security

Account and study data are retained while needed to provide the service; purchase and refund records may be retained for tax, accounting, fraud, and dispute obligations. Email suppression records are retained so we can honor opt-outs. We use access controls, row-level database security, encrypted transport, signed webhooks, and user-scoped offline storage. Exact retention periods require owner and counsel approval before launch.

Your choices and rights

You can change email preferences in Settings and unsubscribe from every marketing email. You may request access, correction, export, or deletion, subject to legal retention requirements, by emailing [email protected]. Depending on your state or country, additional privacy rights may apply. The operator identity and mailing address must be added before paid launch.