Privacy Policy

TL;DR

• We collect: your email, your practice answers, and basic analytics (pages viewed, not personally identifying).
• We do not: sell your data, share it with advertisers, or send you marketing spam.
• You own your data. Request an export or deletion anytime at support@uatestprep.com.
• We use: Stripe (payments), Resend (sending login links), PostHog (anonymous usage analytics), Vercel + Railway (hosting). That's it.

1. What we collect

Account data

• Your email address (required for passwordless sign-in)
• Account creation timestamp
• Subscription tier and billing status (via Stripe)

Usage data

• Practice question attempts: which questions you answered, what you chose, whether it was correct, and how long you spent
• Study plans generated from your diagnostic results
• Anonymous page-view analytics (which pages are popular, where users drop off)

Payment data

We do NOT store your full credit card number or CVC. Payment processing is handled entirely by Stripe. We store only a Stripe customer ID and the last 4 digits of your card (for your reference in the billing portal).

What we do NOT collect

• Your name (unless you tell us)
• Your phone number (unless you tell us)
• Your physical address
• Your real test score or test date
• Any data from third-party social networks

2. How we use your data

• Authentication: to verify it's really you signing in
• Personalization: to recommend practice questions based on your weak sections
• Progress tracking: to show you how you're improving over time
• Billing: to process payments and manage subscriptions
• Product improvement: aggregate (non-personal) statistics to find bugs, improve questions, and fix UX problems
• Support: to reply to you if you email us

3. Who we share data with

We share data only with the third parties strictly necessary to run the service:

• Stripe — payment processing. Stripe receives your email and payment info when you purchase a paid tier. See Stripe's privacy policy.
• Resend — transactional email (login links, receipts). Resend receives your email address. See Resend's privacy policy.
• PostHog — anonymous analytics. PostHog receives non-personally-identifying page views. See PostHog's privacy policy.
• Vercel / Railway — hosting. Our databases and servers run on their infrastructure.

We do not sell your data. We do not share your email, your practice history, or your test results with advertisers, data brokers, or any other third party.

4. Your rights

You have the right to:

• Access a copy of everything we store about you
• Correct any inaccurate data
• Delete your account and all associated data
• Export your data in a machine-readable format
• Object to any specific use of your data

To exercise any of these rights, email support@uatestprep.com with your request. We will respond within 7 days.

5. Data retention

We keep your account data for as long as your account is active. If you request account deletion, we delete your personal data within 30 days. Some aggregate (non-identifying) data may be retained for statistical purposes.

6. Security

We use industry-standard security practices: HTTPS for all connections, encrypted database storage, passwordless authentication (no stored passwords to leak), and minimal third-party dependencies. No system is 100% secure, but we take your data seriously.

7. Children

UA Test Prep is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have collected data from a child under 13, contact us immediately and we will delete it.

8. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email at least 7 days before the change takes effect.

9. Contact

Questions about privacy? Email support@uatestprep.com.