Privacy Policy

What We Collect

When you create an account or use CertPractice AI, we collect the following information:

• Email address — required to create and identify your account.
• Password — stored as a secure hash; we never store your plaintext password.
• Study progress — which sections you have completed, skipped, or flagged as weak areas.
• Exam attempt scores — scores and answers from mock exams you take on the platform.
• IP address — collected indirectly when your browser loads fonts from Google Fonts (see Third Parties below). We are working to self-host fonts to eliminate this transfer.

We do not collect payment card information directly. Payments are processed by Stripe, which has its own privacy policy.

Why We Collect It

• To authenticate you and maintain your account.
• To save and display your study progress across sessions.
• To surface weak areas and track your readiness over time.
• To improve the accuracy and relevance of our content.

Age Requirement and COPPA

CertPractice AI is intended for users who are 13 years of age or older. We do not knowingly collect personal information from children under 13. If you are under 13, you may not create an account. If we become aware that we have collected information from a child under 13, we will delete it promptly.

How we enforce this: We ask for your birth year at signup and block registration when the self-reported year indicates the user is under 13. We do not independently verify age — our enforcement relies on the information you provide. If you believe a child under 13 has created an account, please contact privacy@certpractice.ai and we will delete the account and all associated personal information within 5 business days.

Users aged 13–17 may use the Service with parent or guardian consent. We collect the same data from minors as from adult users (email, study progress, exam scores). We do not sell or share minor user data with third parties for advertising or profiling purposes.

Third Parties We Share Data With

• Supabase — our database and authentication provider. Your email, hashed password, and study progress are stored on Supabase servers located in the United States.
• Google (Fonts CDN) — our website currently loads fonts from Google's servers, which may receive your IP address. We do not control Google's use of that data. We are working to self-host these fonts to eliminate this transfer.
• Anthropic (AI tutor) — when you use the AI tutor, your questions are sent to Anthropic's Claude API for processing. Anthropic's data handling is governed by their privacy policy and API terms. Do not include sensitive personal information in your AI tutor questions.
• Stripe — payment processing. We share only what Stripe requires to complete a transaction. We do not store card numbers.

We do not sell your personal information to any third party.

How Long We Keep Your Data

We retain your account information and study progress for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it by law.

Your Rights (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know — you can request a copy of the personal information we hold about you.
• Right to delete — you can request that we delete your personal information.
• Right to opt out — we do not sell personal information, so there is nothing to opt out of.
• Right to non-discrimination — exercising your privacy rights will not affect your access to our services.

To exercise any of these rights, email us at privacy@certpractice.ai. We will respond within 45 days.

Cookies and Local Storage

We use browser local storage to maintain your login session and save study progress when you are not connected to our servers. We do not use advertising cookies or third-party tracking pixels.

Changes to This Policy

If we make material changes to this policy, we will update the "Last updated" date at the top and, where appropriate, notify you by email.

Contact

Questions about this privacy policy? Email us at privacy@certpractice.ai.