Privacy policy

Last updated 8 September 2026

This explains what we collect, why, and what you can ask us to do about it. The controller of your data is [LEGAL ENTITY NAME], [REGISTERED ADDRESS].

What we collect

When you join the founding list: your email address and which exam you are taking.
When you create an account: your name, email address, which exam you are taking, and optionally your exam date.
As you study: which questions you answered, what you chose, whether it was right, and how long you took.
If you buy: the fact that you paid, which plan, and when it renews. We never receive or store your card number. Stripe handles that.
Automatically: basic technical logs kept by our hosting provider, such as IP address and browser, for security and troubleshooting.

We do not run advertising trackers, we do not build a profile of you across other websites, and we do not sell or rent your data to anybody. Ever.

Why we collect it

To give you an account and keep you signed in.
To show your own progress back to you, which is the product.
To take payment and give you what you paid for.
To email you about your account, and about the launch if you joined the list.
To keep the service secure and working.

Who else touches it

We use a small number of established companies to run the service. Each sees only what it needs:

Supabase — accounts and database. Holds your name, email and study history.
Netlify — hosting and the founding-list form. Holds the emails from that form and server logs.
Stripe — payments. Holds your card details, which we never see.
[EMAIL PROVIDER] — sending email.

Data is stored in [REGION, for example the United States]. If you are in the European Economic Area or the United Kingdom, your data may be transferred outside it, protected by the transfer mechanisms those providers operate.

How long we keep it

Account and study history: while your account exists, and [RETENTION PERIOD] after you close it.
Founding-list email: until you unsubscribe or we launch and you decide not to join.
Payment records: as long as tax law requires, which is typically several years.

Your rights

Wherever you live, you can ask us to:

Show you what we hold about you.
Correct anything wrong.
Delete your account and your data.
Send you your data in a portable file.
Stop sending you marketing email. Every one has a one-click unsubscribe.

Email [SUPPORT EMAIL] and we will act within [RESPONSE PERIOD, for example 30 days]. If you are in the EEA or UK you may also complain to your local data protection authority.

Cookies and what we store in your browser

We do not use advertising or analytics cookies. Your browser holds a sign-in token so you stay logged in between visits, and small preferences such as which theme you chose. Clearing your browser data signs you out and loses nothing else.

Security

Your password is never stored by us in a readable form; our authentication provider stores a one-way hash of it. The site is served only over HTTPS. Each account can read only its own records, enforced by the database itself rather than by the website. If we ever suffer a breach affecting your data, we will tell you and the relevant authority as the law requires.

Children

This service is for professionals and is not intended for anyone under 18. We do not knowingly collect data from children.

Changes

If we change this policy in a way that matters, we will email you before it takes effect.

Contact

[SUPPORT EMAIL], or write to [REGISTERED ADDRESS].