Privacy Policy

Only what the product needs:

• Account details: your name, email address, a hashed password (we never store the password itself) or your Google account ID and profile picture if you sign in with Google.
• Your profile: what you tell the onboarding chat — for example your degree, year, college, skills, interests, goals and target role.
• Your learning data: skill-check questions and your answers, scores, practical-task submissions and the feedback on them.
• AI usage: a record of each AI request (which feature, when, how many tokens, whether it worked). This lets us run the free trial and daily limits fairly.
• Technical data: request logs with your IP address and browser details, kept to keep the service secure and fix errors.

To run PrepSuccess for you: personalise your checks, score them, show your dashboard and give feedback. To keep accounts secure, prevent abuse and fix problems. And to understand, in aggregate, how the product is used so we can improve it.

We don't sell your data, and we don't show ads.

When you chat, take a check or submit a task, the relevant part of your profile and answers is sent to our AI provider (Google's Gemini API) to generate the reply. We send only what that request needs, and we tell the AI to use only your own data — it can't invent skills or scores for you.

We use a small number of service providers, each only for its job:

• Supabase — hosts our database.
• Render and Vercel — host the backend and the website.
• Google — Gemini for AI features, Google sign-in if you choose it, and Gmail for sending verification codes.
• Error tracking and product analytics tools, if enabled, receive technical data and anonymous usage events — never your answers or chats.

Admins see account details needed for support (name, email, role, whether the account is active) and platform-wide totals. The admin tools don't let anyone browse an individual student's answers or results. When mentorship launches, a mentor will see only what a booked session needs.

We keep your sign-in tokens in your browser's local storage so you stay signed in, and use a short-lived cookie during Google sign-in. We don't use advertising cookies.

We keep your data while your account is active. If you ask us to delete your account, we delete your profile, chats, checks and submissions, keeping only what the law requires us to keep.

You can see and edit your profile in the app at any time. You can also ask us for a copy of your data, to correct it, or to delete it, by writing to preparationssuccess@gmail.com. We'll reply within 30 days.

Passwords are hashed with bcrypt, sign-in tokens are short-lived and rotated, traffic is encrypted with HTTPS, and the database is only reachable through our backend. No system is perfectly secure, so if we ever learn of a breach affecting you, we'll tell you.

If we change this policy in a way that matters, we'll update the date above and let signed-in users know.

Questions about your data? Write to preparationssuccess@gmail.com.