Privacy policy
Last updated: 2026-10-17
What we collect
Your email address and a hashed password; your practice history (answers, mock exams, favourites, feedback, messages to us and attachments); your sign-up IP address and session cookies; and your purchase records. Card details go directly to Stripe and never reach us.
Why
To run your account and passes, show your progress, prevent abuse (rate limits, one account per person), answer your messages and send the emails you ask for (sign-up and password codes, replies).
Who processes it
Hosting and database providers; Stripe (payments); Resend (email); Cloudflare (file storage and bot checks); OpenAI (only the question and template text you use with the AI features, not your email). They act on our instructions.
Cookies
We use a sign-in cookie, a language cookie and, for invitations, a referral cookie. No advertising or tracking cookies.
How long
Account data is kept while your account exists. Purchase records are kept as required for tax and accounting.
Your rights
You can ask for a copy of your data, a correction, or deletion of your account through Contact us. Deleting your account ends any remaining pass time.