Privacy Policy

Preporia ("we", "us", or "our") operates preporia.io, an ASCPi exam preparation platform. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data.

1. Information We Collect

Account Information

When you create an account, we collect your email address and display name. If you sign in with Google, we also receive your Google profile name and profile picture URL as provided by Google OAuth.

Exam & Study Data

We record your exam sessions, including the questions you answered, whether each answer was correct, your score, and time spent. This data powers your dashboard analytics, progress tracking, and the adaptive testing algorithm.

Usage Data

We track your daily question usage count to enforce free-tier limits. This counter resets at midnight UTC each day.

Subscription Data

If you purchase a subscription, we store your plan type, subscription status, and expiry date. Payment processing is handled by a third-party provider; we do not store payment card details.

Waitlist & Contact Information

If you submit your email on the checkout or contact page, we store that email to notify you of product updates or respond to your inquiry.

2. How We Use Your Information

• Provide the service — authenticate your account, deliver adaptive exam questions, track your progress and streaks, and display your analytics dashboard.
• Improve the product — analyze aggregate usage patterns to make the platform more effective for ASCPi exam preparation.
• Communicate with you — send transactional emails (password resets, account confirmations) and, if you opted in, product updates.
• Enforce limits — track daily question usage for free-tier accounts.

We do not sell your personal data to third parties. We do not use your data for advertising.

3. Cookies and Local Storage

Essential Storage (always active)

We use browser localStorage to store your Supabase authentication token so you remain logged in between sessions. We use sessionStorage to hold your in-progress exam state (question order, answers) during a single browser session. These are required for the platform to function.

Preference Storage

We store your cookie consent choice and course progress (which lessons you have viewed) in localStorage. No third-party tracking pixels or advertising cookies are used.

Opting Out

You can clear all stored data at any time by clearing your browser's site data for preporia.io. Note that this will sign you out and clear your local course progress.

4. Data Storage and Security

Your data is stored in Supabase (supabase.com), a PostgreSQL database hosted on AWS infrastructure. Supabase enforces row-level security so your data is only accessible to your authenticated account. Data is encrypted in transit (TLS) and at rest.

5. Third-Party Services

Service	Purpose	Privacy Policy
Supabase	Database, authentication, and file storage	supabase.com/privacy
Google OAuth	Optional sign-in with Google	policies.google.com/privacy
Vercel	Website hosting and edge delivery	vercel.com/legal/privacy-policy

6. Data Retention

We retain your account data for as long as your account is active. Exam session data and statistics are retained indefinitely to support long-term progress tracking. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Correction — update your display name and email through your profile settings.
• Deletion — request that we delete your account and associated data.
• Portability — request an export of your exam history and scores.
• Opt-out of communications — unsubscribe from any marketing emails using the link in those emails.

To exercise any of these rights, contact us at privacy@preporia.io.

8. Children's Privacy

Preporia is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

10. Contact

Questions or concerns about this Privacy Policy? Contact us at privacy@preporia.io or through our contact page.