Privacy Policy

Who Is Responsible for Your Information

PrepExami is an independently operated study service. The legal operator identified in the contact section below is responsible for handling personal information collected through the service. This policy covers the PrepExami website and mobile app, including the iOS app, and related support communications.

For privacy questions or requests, email contact@prepexami.com. We do not sell or rent your personal information or share your private study content with advertisers.

Sign-In and Profile Details

Supabase manages account authentication. If you use a supported third-party sign-in option, such as Apple or Google, we receive the account identifier and profile information that provider makes available with your authorization. When you choose Apple’s Hide My Email option, your account may use an Apple private relay email address.

You can supply or update a display name through available account settings. Your Apple billing account and PrepExami account may use different email addresses; purchase ownership is associated with an account identifier rather than requiring those emails to match.

How We Use Your Information

We use information to authenticate you, maintain your account, generate and save study materials, track practice progress, process credit use, verify purchases, restore eligible access, respond to support requests, prevent misuse, and keep the service reliable and secure. Website analytics help us understand use of the website and improve its features.

We process information as necessary to provide requested services, with consent where required, to meet legal obligations, and to support service security and operation where permitted by applicable law.

Study Content and AI Processing

You retain your rights in your study content. We store and process it to provide the features you request; we do not make your private materials available to other users.

We do not sell your private study content, use it for advertising or unrelated profiling, or use it to train our own AI models. Its use is limited to the study features you request and the storage, support, security, and legal purposes described in this policy. This commitment does not mean that the service operates without processing data; account information, purchases, saved progress, and disclosed website analytics are handled as explained above and below.

Text extracted from your files, submitted URLs, and pasted content is sent to OpenAI through its API to generate study materials. This can include personal information present in that content. The mobile app requests permission before each AI processing request. You can decline and continue using features that do not require this processing. Submit only content you have permission to share.

You can stop future AI sharing by declining new requests. This does not undo processing that has already occurred. You may request deletion of saved content or your account as described below. Provider processing and retention are governed by applicable agreements; see OpenAI’s business and API data commitments.

Payments and Apple Purchase Verification

Paddle handles supported website purchases, and Apple handles purchases made through the App Store. We do not receive or store your full payment card details from these purchases.

Our backend exchanges purchase identifiers and verification requests with Apple and receives signed transaction information and server notifications. We store the verified information needed to identify the purchased product, associate it with your PrepExami account, prevent duplicate grants, and handle renewals, expiration, refunds, and restoration. Website billing records can include Paddle customer and subscription identifiers associated with your account.

Apple and Paddle process billing and payment information under their own policies. Managing or deleting your PrepExami account does not erase records those providers must retain or automatically cancel Apple billing.

Service Providers and Sharing

• Supabase provides authentication and stores account information, study data, progress, and purchase records.
• OpenAI processes submitted text to deliver requested AI features.
• Apple and Paddle provide the payment and transaction services described above.
• Vercel provides website hosting and website analytics; Google Analytics measures website usage where configured.
• Communication providers deliver account and support messages as needed.

We use providers for their service functions and require appropriate protection of personal information under applicable agreements and law. Some providers also have independent responsibilities for billing, security, or legal compliance. Their policies provide additional details: Supabase, OpenAI API data, Paddle, Apple, Vercel, and Google.

We may disclose information where required by law or reasonably necessary to investigate misuse, resolve disputes, or protect users and the service. Providers may process information outside your country of residence. Applicable contractual and legal safeguards govern those transfers; data is not guaranteed to remain in your country.

Cookies, Local Storage, and Website Analytics

The website and app use cookies or local storage to maintain sessions, remember preferences, and support account and purchase recovery. The website also uses Google Analytics and Vercel Analytics to understand page visits and feature use. Request information may be used to infer an approximate country or region for website preferences.

You can control website cookies through your browser’s settings; blocking essential storage may prevent sign-in or other features. Website analytics settings are separate from the app’s permission to share study content with OpenAI. Contact us with questions about choices available for your location.

Data Retention and Account Deletion

We retain account details and saved study data while needed to provide your account and requested features, unless you delete them through available controls or request deletion. Retention depends on the information’s purpose, account activity, security needs, and applicable legal obligations.

Use Delete Account in the mobile app’s Account Settings to initiate a deletion request. Deletion is complete only when confirmed by the service; a failed request does not confirm that your account or all associated data has been removed. Retry or contact us if you need assistance. When a deletion request is completed, associated study content and progress are removed from active systems, subject to the limited retention described here.

Cancel subscriptions with the provider that bills you before deleting your account. Account deletion does not cancel an Apple subscription.Manage it through Apple subscription settings. You can contact us for help with a website subscription.

We revoke Sign in with Apple authorization when a usable, verified Apple sign-in grant is available. If that grant is unavailable, your authenticated account-deletion request can still be completed. Remove any remaining PrepExami authorization through your Apple Account’s Sign in with Apple settings. This sign-in authorization is separate from your Apple subscription.

Limited transaction, billing, security, support, and operational records may be retained when needed for legal obligations, fraud prevention, dispute resolution, or service protection. Backups may remain until they expire under provider backup processes and are not necessarily erased immediately. Payment and AI providers maintain their own records under applicable agreements and legal requirements.

Your Choices, Rights, and Security

Depending on applicable law, you may request access to, correction, deletion, or a copy of your personal information, withdraw consent, or raise a privacy concern. Some requests may be subject to legal exceptions or identity verification. Withdrawing consent does not undo earlier lawful processing and may affect features that require it.

Use available account settings or email contact@prepexami.com to make a request or raise a complaint. You may also contact the competent data protection authority where applicable. We use safeguards designed to protect information, but no online service can guarantee complete security.

Children and Young Users

PrepExami is not directed to children under 13. Users must also meet any higher age and parental-consent requirements that apply where they live. If you believe a child has provided personal information without required authorization, contact us so we can review the circumstances and take appropriate action, including deletion where required.

Changes and Contact

We revise this policy when our practices change and update the date above. We provide additional notice or request renewed consent where required. Read our Terms of Service for account and subscription conditions.

Legal operator: Mousum Borah, trading as PrepExami. For privacy requests, contact contact@prepexami.com. You can also use our contact page.