Privacy Policy

This policy explains what PrepApex collects, why, and the choices you have. We keep it short because we collect little.

What we collect

• Account data: email address, a hashed password, and optional details you choose to add (first name, graduation year, target score, test date).
• Practice data: which questions you answered, your answers, whether they were correct, and how long each took. This powers your analytics and the adaptive engine.
• Billing data: if you subscribe, Stripe processes your payment and shares with us your subscription status and a customer reference. We never receive your card number.
• Technical data: standard server logs (IP address, browser type, timestamps) kept briefly for security and reliability. We do not use advertising trackers or third-party analytics scripts.
• Messages: anything you send us through the contact form or by email.

What we do not collect

We do not ask for and you should not submit school records, transcripts, accommodations, medical, or financial information. Please keep such details out of messages and feedback.

How we use it

To run the Service, personalize your practice, show your progress, process payments, respond to you, and keep the Service secure. We do not sell personal data and we do not use it for advertising.

Family links

A student can share a family code from Settings. A parent who enters that code can see the student's practice progress (readiness, score range, weak skills, and session summaries) and, on the Parent Insights plan, receive a weekly progress email. Parents never see the student's password, and either side can remove the link at any time.

Children

The Service is intended for students 13 and older. Accounts for younger students may only be created by a parent or guardian. If you believe a child under 13 has created an account without consent, contact us and we will delete it.

Sharing

We share data only with providers needed to operate the Service: our hosting provider, Stripe for payments, and an email delivery provider for transactional email. Each is bound to use data only to provide their service to us. We may disclose data if required by law.

Retention and deletion

Your data is kept while your account is active. You can delete your account at any time from Settings, which permanently removes your account and practice history. Billing records are retained as required for accounting.

Your choices

You can view and update your profile in Settings, review your full progress on the Report page, and delete your account. For anything else, email hello@prepapex.com.

Security

Passwords are hashed with bcrypt, connections use HTTPS, and access to production systems is limited to the people who operate the Service.

Changes

If we change this policy in a material way we will notify you by email or in the app before the change takes effect.

Contact

hello@prepapex.com