Privacy Policy | PrepKit

PrepKit ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use prepkit.study.

1. Information We Collect

Information you provide:

Email address and password (for account creation)
Display name and profile preferences
Documents and study materials you upload
Flashcard decks, quiz answers, and study activity
Messages sent to the AI tutor

Information collected automatically:

Usage data (features used, time spent, study streaks)
Device type, browser, and approximate location (country/region)
Performance and error logs to improve the service

2. How We Use Your Information

To provide, operate, and improve the PrepKit service
To generate AI-powered flashcards, quizzes, and study plans from your materials
To personalise your study experience and track your progress
To send important account and service notifications
To process subscription payments via Stripe
To enforce our Terms of Service and prevent abuse

3. AI Processing

Content you upload or type (documents, tutor messages, deck topics) is sent to OpenAI's API to generate study materials and responses. We do not use your content to train OpenAI's models. OpenAI processes data in accordance with their Privacy Policy.

4. Data Sharing

We do not sell your personal data. We share data only with:

Supabase — database and authentication infrastructure
OpenAI — AI processing of your study content
Stripe — secure payment processing

Each of these providers processes your data only as necessary to deliver the service and maintains their own security and privacy standards.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, your personal data and study content will be permanently deleted within 30 days. Anonymised usage statistics may be retained for analytics purposes.

6. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your account and data
Export your data in a portable format
Object to or restrict certain processing

To exercise any of these rights, email privacy@prepkit.study.

7. Security

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and role-based access controls. No method of transmission over the internet is 100% secure, so we cannot guarantee absolute security.

8. Cookies

PrepKit uses essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.

9. Children's Privacy

PrepKit is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or an in-app notice. The "Last updated" date at the top reflects the most recent revision.

11. Contact

Questions about your privacy or this policy? Contact us at privacy@prepkit.study.