Legal

Privacy Policy

Last updated: 2026-05-06

1. What we collect

• Account info: email, optional first name, optional country, the exam level you're targeting.
• Practice activity: which questions you answered, whether you got them right, timestamps. Used to show your weak areas and build your readiness score.
• Payment metadata: the plan you purchased, amount, currency, payment provider's transaction ID. We do not store card numbers — that's handled by our payment processor (Ziina).
• Server logs: request paths, IP, user agent — kept short-term for security/debugging.

2. How we use it

• Run the Service: track your progress, score competencies, gate paid features.
• Email you about your account: receipts, password-style sign-in, important changes.
• If you opted in: send prep tips and exam-readiness emails. You can unsubscribe at any time from any email we send.
• Aggregate, anonymized analytics to improve the question bank and the product.

3. Who we share with

Only with the providers we need to run the Service:

• Vercel — hosting and edge delivery (US/EU/global).
• Neon / Vercel Postgres — primary database.
• Ziina — UAE-licensed payment processor (only purchase events, no card data flows through us).

We never sell your email or personal data. We never share with advertisers.

4. Cookies

We use a single first-party HttpOnly session cookie to keep you signed in. No third-party ad cookies, no fingerprinting. We may add a privacy-respecting analytics tool later (Plausible or similar) — if so, this page will be updated before it goes live.

5. Your rights

You can email kreem.hmedan1@gmail.com any time to:

• Get a copy of all data we have on you.
• Correct anything that's wrong.
• Delete your account and all associated data (we'll do it within 30 days).

6. Retention

We keep your account and practice data while your account is active. If you delete your account, we erase personal data within 30 days; aggregate, anonymized stats may remain. Payment records are kept as long as required by tax law in our jurisdiction.

7. Children

The Service is for adults preparing for a professional certification. Don't use it if you're under 16.

8. International transfers

Our infrastructure is global. By using the Service you consent to data being processed in the regions where our providers operate (US, EU, UAE).

9. Contact

Privacy questions: kreem.hmedan1@gmail.com.