Privacy Statement

1. What we collect

If you join the waitlist, we collect your email address and the date you joined. That is all, and we use it only to tell you when Preppio.ai opens.

If you create an account, we collect:

• Your email address, which comes from the sign-in provider and is how we recognise you.
• Your first name, last name and display name.
• Your sign-in history: the time of each new sign-in session, and the IP address, browser and operating system it came from. Repeated page loads inside half an hour count as one session rather than many.
• How you use the product: events such as answering questions, asking Winston, clicking a recommended course, submitting a review, and errors the app hits.
• Your study activity: which questions you answered, how you did, and when.
• Your plan and subscription status.
• Support messages you send us.
• Reviews you write.
• An avatar image, if you upload one.
• Exam passes you record, including a credential link if you choose to add one.
• How you found us, recorded once when your account is created: the website that sent you, any campaign tag in the link you followed, and the first Preppio page you landed on.

What we never collect. We do not take payment card details. When you subscribe, Stripe handles the payment directly and we store only two identifiers that let us ask Stripe about your subscription. We hold no card number, no expiry, no security code and no billing address.

2. What we do with it

• Run the product. Track your progress, work out your readiness, serve you the right questions.
• Keep your account working. Sign-in, plan entitlements, usage limits.
• Answer you. Support tickets, and email about your account.
• Improve the question bank. Aggregate patterns, such as which questions learners widely miss.
• Keep the product working and secure. Sign-in records and error events tell us when something is broken and help us spot someone trying to break in.
• Send email you asked for. Marketing and reminder email can be switched off in your profile at any time. Email about your account or your payments is not optional while you have an account.

If you are a Nevada resident, you have a statutory right to tell us not to sell your personal information. We do not sell it to anyone, and that will not change without telling you first.

3. Who else handles it

We use a small number of service providers, each handling only what their job requires, each bound by contract to use it for nothing else:

• Cloud hosting and database providers — running the application and storing your data.
• An identity provider — sign-in. Your email address is your identity.
• Stripe — payments. Card details go to Stripe and never reach us.
• An email delivery provider — sending the email you receive from us.
• AI providers — generating and checking practice questions, and powering the Winston study assistant.
• A website analytics provider — counting visits to our public website and where they came from. Section 4 explains what it records.

Your account data, and the providers that handle it, are located in the United States. The one exception is our website analytics provider, which processes visit counts in the European Union and never receives account data.

We do not sell your personal information and we do not share it with advertisers. If you want to know whether a specific company processes your data, email privacy@preppio.ai and we will tell you.

4. Cookies and local storage

We use no advertising cookies and no advertising trackers. Nothing on this site reports you to an advertising network or a data broker. We have no Google Analytics, no pixels, no session recorders.

On our public website (www.preppio.ai), we count visits with Plausible Analytics. It is not used inside the app. It sets no cookies and stores nothing on your device. For each visit it records the page, the website or campaign link that sent you, your browser, operating system and device type, your approximate location to the city, and how far you scroll and how long you stay. It does not store your IP address: it combines it with your browser details into a code that changes every day, so it can count you as one visitor that day but cannot recognise you the next. We see these figures only as totals.

What we do keep is our own record of how the product is used, described in sections 1 and 2, held on our own systems. Only totals, with no names, email addresses or account details, ever leave them. Usage events are deleted automatically after 90 days. Two things stay with your account for as long as it exists: how you found us, and the date you first reached each step, such as picking an exam or starting checkout.

We use a sign-in cookie, which is what keeps you logged in, and your browser's local storage for small conveniences such as remembering which tab you were on and which prompts you have dismissed. That information stays on your device and is never sent to us, with one exception: a small note of how you first arrived waits in local storage until you sign in, is sent to us once, and is then removed.

5. What is public, and what is not

Almost nothing is. Your studying, your scores and your readiness are yours alone, and we never publish them.

The one thing that can be published is a review you choose to write, and you choose the name on it: your first name with a last initial, your display name, or no name at all. Choose no name and the published review carries no name, no initials, and nothing connecting it to your account.

Your first and last name are never published, under any of those options. They are used to work out an initial and to draw the letters on your avatar, and nowhere else.

6. How long we keep it

• Waitlist: until we launch and have told you, or until you ask us to remove you.
• Account data: for as long as your account exists.
• If you cancel or pause your subscription: nothing is deleted. Your account, your answered questions, your readiness and your history all stay exactly as they are, so when you come back you pick up where you left off. Cancelling payment and deleting your account are separate things, and only the second one removes anything.
• After you delete your account: your profile and study history are deleted. Reviews you published are kept but anonymised, with your name and avatar removed, because deleting a published review would misrepresent the record for everyone who already read it.
• Sign-in records and usage events, including IP addresses: 90 days. This is not a policy we remember to apply; the database deletes these records on a timer, so an old IP address stops existing whether or not anyone is paying attention.
• Billing records: seven years, as tax law requires. Most of that record lives with Stripe rather than with us.

7. Where your data is

Preppio.ai is operated from the United States and your information is stored and processed there. The rights in the next section are offered to everyone who uses Preppio.ai, wherever you are.

8. Your rights and choices

You can:

• see and change your name, display name and email preferences in your profile;
• choose the name on every review you write, or publish with no name at all;
• ask for a copy of the data we hold about you;
• ask us to delete your account and the data in it;
• stop marketing email without affecting your account.

Email privacy@preppio.ai or use Contact Support in the app. We respond within 30 days.

9. Children

Preppio.ai is not intended for anyone under 16, and we do not knowingly collect their information. If you believe a child has given us their details, email privacy@preppio.ai and we will remove them.

10. Changes

We will update this page when what we do changes, and change the date at the top. If a change materially affects you, we will tell you by email.

11. Contact

Preppio.ai is a service of Bandol Ventures, LLC.

privacy@preppio.ai