Privacy Policy

Personal data we collect

• Account data: name, email address, login identifiers, profile image, password/authentication metadata, and account preferences.
• Course data: enrollments, progress, answers, quiz attempts, flashcard activity, notes, submitted content, messages, comments, and support requests.
• Payment data: checkout status, purchased product, billing country, tax information, transaction identifiers, refund status, and limited payment metadata. Full card details are normally handled by the payment processor.
• Device and usage data: IP address, browser, device, pages visited, referring pages, approximate location, cookies, logs, diagnostics, and security events.
• Marketing data: newsletter signups, campaign source, consent choices, and communication preferences.

How we use personal data

• Provide the website, course, learning platform, support, community, certificates or records, and account access.
• Process purchases, payment plans, tax, invoices, refunds, fraud prevention, and chargeback handling.
• Personalize learning features, track progress, recommend next steps, and improve lessons, quizzes, flashcards, search, and platform quality.
• Send service messages, purchase confirmations, security notices, support replies, and marketing where allowed.
• Protect users, enforce terms, prevent abuse, debug errors, comply with law, and defend legal claims.

Legal bases for EU/UK users

Where GDPR or similar laws apply, processing is based on one or more legal bases depending on the activity.

• Contract: to create accounts, deliver the course, process payments, and provide support.
• Legitimate interests: to secure the platform, prevent abuse, improve the service, maintain business records, and understand site performance.
• Consent: for optional marketing, certain cookies, or other choices where consent is required.
• Legal obligation: for tax, accounting, consumer-protection, safety, and lawful-request obligations.

How personal data is shared

We do not sell course account data as a standalone product. Personal data may be shared when needed to operate the course and platform.

• the course provider, so the course provider can deliver teaching, support, community, and customer care.
• Prep OS, so the platform can host accounts, lessons, progress, analytics, security, payments, and support infrastructure.
• Service providers such as hosting, authentication, database, email, analytics, payment, tax, customer support, fraud-prevention, and error-monitoring vendors.
• Authorities, courts, professional advisers, or other parties when needed to comply with law, enforce terms, prevent harm, or protect rights.
• Successors in a merger, acquisition, financing, reorganization, or sale of relevant business assets.

Cookies and similar technologies

The website and platform may use cookies, local storage, pixels, and similar technologies for login, security, preferences, analytics, performance, and marketing attribution.

Where required, non-essential cookies should be used only after consent. Browser and device controls may also limit cookies.

International transfers

Personal data may be processed in countries other than where you live. Where EU/UK transfer rules apply, appropriate safeguards such as adequacy decisions, standard contractual clauses, or similar mechanisms should be used where required.

Retention

Personal data is kept for as long as needed to provide the course and platform, maintain records, comply with legal obligations, resolve disputes, prevent fraud or abuse, and enforce agreements.

Some learning records may be retained while an account is active or while lifetime access remains available. Support, billing, tax, and security records may be retained longer when legally or operationally necessary.

Security

We use reasonable technical and organizational measures designed to protect personal data. No website or platform can guarantee absolute security.

If you believe your account or data has been compromised, contact support promptly.

Children and students

The course and platform are not intended for children under 13. Where EU/UK consent rules apply, a higher age threshold may apply depending on the country.

If a parent, guardian, school, or organization provides access for a minor, they are responsible for obtaining any required permissions and supervising use.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or port your personal data, and to withdraw consent where processing is based on consent.

You may also have the right to complain to a data-protection authority or other privacy regulator.

Contact

Privacy requests can be sent to the privacy contact shown inside your account. The course provider's address is the business address shown at checkout or inside your account. We may need to verify your identity before acting on a request.