Privacy Policy

Last updated: 2 July 2026

1. What we collect

• Account data — email address, name (if provided), and, if you sign in with Google, your Google account email and display name.
• Study activity — answered questions, scores, per-topic mastery, time on questions, exam sessions, flashcard decks you create, and your study goal (exam date / target score, stored in your browser).
• Bug reports — the message you write, the page name, your browser's user-agent string, and an optional contact you choose to leave.
• Payment data — handled entirely by Paddle.com, our merchant of record. We never receive or store card numbers; we only receive your subscription status.

2. Where it is stored

Account and study data are stored in Supabase (managed PostgreSQL hosting). Access is protected by row-level security: your data is readable only by your own authenticated account. Theme and local preferences are stored in your browser's localStorage.

3. How we use it

• To run the Service: grading, progress analytics, streaks, recommendations.
• To manage your subscription status.
• To fix problems you report.

We do not sell your data, show ads, or share your data with third parties beyond the processors named here (Supabase, Paddle, Google sign-in).

4. Cookies and similar technologies

We use browser localStorage and Supabase authentication tokens to keep you signed in and remember preferences. We do not use third-party advertising or tracking cookies.

5. Your rights

You can request a copy of your data or deletion of your account and all associated data at any time by contacting us. Deleting your account removes your study history, decks, subscription record and bug reports from our database.

6. Contact

Privacy questions and data requests: cscace.support@gmail.com