Information we collect
- Account information: email address, authentication identifiers, display information, and account status.
- Learning activity: answers, scores, saved questions, study progress, mock-exam results, readiness data, and feature activity.
- Purchase and access information: product entitlement, transaction status, and limited billing-related records. Payment providers may process payment details directly; we do not need to store full card numbers.
- Technical information: IP address, browser and device information, request logs, security events, and essential cookie or local-storage identifiers.
- Communications: information you provide when contacting us.
How we use information
We use information to create and secure accounts; save and personalise learning progress; provide purchased access; operate, troubleshoot, and improve the service; respond to support and privacy requests; prevent abuse; and comply with applicable legal obligations.
Legal grounds and choices
Depending on where you live, we rely on performing our agreement with you, our legitimate interests in operating and securing the service, legal obligations, or consent where consent is required. You may use public free features without an account where the product permits it, and you can control non-essential cookies if they are introduced.
How information is shared
We may share only the information needed with service providers that help us run the platform, including Supabase for authentication and database services, hosting and infrastructure providers, payment providers when checkout is available, and professional advisers where necessary. We may also disclose information to comply with law, protect rights and safety, or as part of a business reorganisation.
We do not sell personal information or share it for cross-context behavioural advertising.
International processing
Our providers may process information in countries other than your own. Where required, we use appropriate safeguards for international transfers.
Retention and security
We keep information only as long as needed for the purposes above, including maintaining an active account, meeting legal or accounting duties, resolving disputes, and preventing abuse. Retention periods vary by record type. We use reasonable technical and organisational safeguards, but no online service can guarantee absolute security.
Your privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict, or receive a copy of your information; object to certain processing; withdraw consent; or complain to a data-protection authority. These rights can have legal exceptions.
To make a request, email anthony@certcrush.app. We may verify your identity before acting.
Children
Part 107 Ace is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can investigate.
Changes and contact
We may update this policy as the service or legal requirements change. The date above shows the latest revision. Questions and requests can be sent to anthony@certcrush.app.