Privacy Policy

1. Who We Are

This Privacy Policy explains how MyPrepPro LLC, a New Jersey limited liability company ("MyPrepPro," "we," "us"), collects, uses, shares, and protects personal information when you use mypreppro.com and related services (the "Service").

This policy is part of, and should be read with, our Terms of Service.

2. The Short Version

• We collect your account details, your payment records (not your card number), your study activity, and technical data about your device and sessions.
• We use it to run the Service, show you your progress, take payment, support you, prevent account sharing and content theft, and improve our questions.
• We do not sell or share your personal information, and we do not run advertising trackers. We use one privacy-preserving tool that counts page visits without cookies and without identifying you.
• We are not a healthcare provider and this is not a medical record. Do not send us patient information.
• You can access, correct, export, or delete your data by emailing legal@mypreppro.com.

3. Information We Collect

Information you give us

• Account: name, email address, password (stored hashed, never in readable form).
• Profile (optional): exam pathway, target test date, program or school, graduation year.
• Purchases: plan purchased, amount, date, and a payment-processor reference. We never receive or store your full card number: payments are handled by Stripe.
• Communications: emails you send us, support requests, and question feedback or error reports you submit.

Information created as you use the Service

• Study activity: questions attempted, answers selected, correctness, time per question, sessions, chapters covered, flags and notes.
• Performance analytics: scores, mastery estimates, readiness indicators, and progress over time. These are generated from your activity within the Service and are described further in Section 8 of the Terms.

Information collected automatically

• Technical and session data: IP address, browser and device type, operating system, approximate location derived from IP (city or region level), timestamps, pages viewed, referring URL, and session identifiers.
• Security and enforcement data: number and timing of concurrent sessions, login frequency and history, request volume, and patterns suggesting automated access or credential sharing.

Why we say that last part plainly: our Terms of Service prohibit account sharing and content scraping, and we enforce that. Enforcement requires collecting the data above. If you are not comfortable with this collection, do not use the Service.

Information from others

• Payment processor: confirmation of payment, partial card details (brand, last four digits, expiry), and dispute or chargeback notices.
• Infrastructure and analytics providers: server and performance data, and aggregate page-visit counts, generated in the course of hosting the Service.

4. How We Use Information

We use personal information to:

1. Create and administer your account and authenticate you;
2. Provide the Licensed Materials and deliver the question bank;
3. Generate your performance analytics and readiness indicators;
4. Process payments, manage subscriptions and renewals, and handle refunds and disputes;
5. Send transactional messages: receipts, renewal confirmations, cancellation confirmations, password resets, and service notices;
6. Provide customer support and respond to your messages;
7. Detect and prevent account sharing, scraping, fraud, and unauthorized access, and enforce our Terms;
8. Improve our questions and rationales, including by reviewing aggregate performance data to identify items that are unclear, mis-keyed, or too easy or hard;
9. Maintain security, back up data, and diagnose technical problems;
10. Comply with legal obligations and protect our legal rights.

Marketing. We may send occasional product emails to registered users, new features, study resources, or changes to the Service. Every one includes an unsubscribe link, and you can unsubscribe at any time. You will still receive transactional messages about your account, such as receipts, renewal notices, and password resets.

We do not use your individual study performance to make automated decisions with legal or similarly significant effects.

5. Payment Information

Payments are processed by Stripe, which acts as an independent controller of the payment data it collects and applies its own privacy policy. We receive confirmation of the transaction and limited card metadata. We do not store full card numbers, CVV codes, or bank credentials.

6. We Are Not a Healthcare Provider

MyPrepPro is an examination-preparation service. We are not a covered entity or business associate under HIPAA, and nothing you store with us is a medical record.

Do not submit protected health information, patient identifiers, or any clinical information about a real person through feedback forms, support email, notes, or any other channel. If you do, we may delete it. This is also required by Section 13 of the Terms.

7. Cookies and Similar Technologies

We use only the cookies necessary to make the Service work:

• Sign-in and session cookies: set by our authentication provider so you stay logged in as you move between pages. The Service cannot function without these.
• Payment and fraud-prevention cookies: set by Stripe during checkout.
• Preference cookies: remembering settings such as display options.

Page-visit measurement. We use Vercel Web Analytics to see which pages are visited and where people run into problems. It sets no cookies. Instead of a stored identifier, it derives a temporary hash from the incoming request, and that hash is discarded after 24 hours. It cannot follow you across other websites or applications, cannot reconstruct your browsing session, and does not personally identify you. What it records is the page visited, the referring page, approximate location at the country, region, or city level, and general device and browser type. We strip all query parameters from page addresses before they are sent, so nothing carried in a link reaches our analytics provider.

We do not use advertising cookies, tracking pixels, or third-party ad networks on the Service. Because we use only strictly necessary cookies and our page-visit measurement is cookieless, there is no cookie consent banner to click through.

You can control cookies through your browser settings, but disabling the necessary cookies above will prevent you from signing in.

8. How Long We Keep Information

• Account and profile: While your account is active, then 30 days after a deletion request
• Study activity and performance data: While your account is active; deleted or de-identified within 30 days of account deletion
• Purchase and subscription records: 7 years, for tax and accounting obligations
• Security and access logs: 90 days, longer where needed for an active investigation
• Support correspondence: 2 years

We may keep de-identified, aggregated data indefinitely (for example, overall performance statistics for a question). This data cannot be linked back to you.

9. How We Share Information

We do not sell your personal information. We do not share it for targeted or cross-context behavioral advertising. We do not run advertising pixels or ad networks on the Service, and we do not disclose your information to advertisers or data brokers.

We share personal information only as follows:

• Service providers who process data on our behalf under contract and may not use it for their own purposes:
• Stripe: payment processing and subscription management
• Clerk: account creation, sign-in, and authentication
• Vercel: website hosting and delivery, and cookieless page-visit measurement (Vercel Web Analytics)
• Neon: database hosting
• Resend: transactional email (receipts, renewal and payment notices, service messages)
• ImprovMX: email routing for our support and legal addresses

We use no advertising networks, ad trackers, or data brokers. Our page-visit measurement receives no information that identifies you.

• Legal and safety: when required by law, subpoena, or court order, or where we reasonably believe disclosure is necessary to investigate suspected fraud, protect our rights or property, enforce our Terms, or protect the safety of any person.
• Business transfer: in connection with a merger, acquisition, financing, or sale of assets. We will notify you before your information becomes subject to a different privacy policy.
• With your direction: where you ask us to share something.

We do not share your individual study performance with schools, employers, or certification bodies. If we ever offer an institutional or cohort product where a program can see student progress, that will be a separate, clearly disclosed, opt-in arrangement.

10. Security

We use reasonable administrative, technical, and physical safeguards, including encryption in transit, hashed passwords, access controls limiting staff access to what is necessary, and regular backups.

No system is perfectly secure, and we cannot guarantee absolute security. Protect your password, use a unique one, and tell us at legal@mypreppro.com if you believe your account has been accessed without permission.

If a breach affecting your personal information occurs, we will notify you and any required authorities as required by applicable law.

11. Your Choices

• Access and correction: view and update most account details in your account settings, or email us.
• Export: request a copy of your account data and study history.
• Deletion: request deletion of your account and associated data. Some records must be retained for legal, tax, or fraud-prevention purposes as described in Section 8.
• Marketing: unsubscribe using the link in any promotional email.
• Cancellation: cancel automatic renewal in Account Settings at any time. Cancellation and deletion are different: cancelling stops future charges; deletion removes your data and ends access.

To exercise any of these, email legal@mypreppro.com. We will respond within 30 days. We may need to verify your identity before acting, and we will not discriminate against you for exercising these rights.

12. State Privacy Rights

Several U.S. states give residents rights over their personal information, including the rights to know what is collected, to access and correct it, to request deletion, to obtain a portable copy, and to opt out of targeted advertising or the sale or sharing of personal information.

We extend the rights described in Section 11 to all our users, regardless of where you live, rather than tracking which state thresholds we meet. Because we do not sell or share personal information for advertising, there is no opt-out link for you to use, there is nothing to opt out of.

California residents may also request information about categories of personal information disclosed in the past 12 months, and may designate an authorized agent to make requests on their behalf.

If you believe we have not resolved your request adequately, you may have the right to appeal or to contact your state attorney general.

13. Children

The Service is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it. If you believe a minor has provided us information, contact legal@mypreppro.com.

14. International Users

The Service is intended for users in the United States, is hosted in the United States, and is not offered to individuals in the European Economic Area or the United Kingdom. If you access the Service from outside the United States, you do so on your own initiative and are responsible for compliance with local law.

15. Changes to This Policy

We may update this policy. We will post the revised version with a new "Last updated" date and, for material changes, notify you by email or in-product notice before it takes effect.

16. Contact

MyPrepPro LLC

New Providence, New Jersey

Email: support@mypreppro.com

Privacy: legal@mypreppro.com