Privacy Policy

1. Who We Are

AhaPrep ("we," "us," or "our") operates the exam preparation service at ahaprep.com. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

Questions? Contact us at info@ahaprep.com.

2. Information We Collect

Account information: When you create an account, we collect your email address and a hashed password. We do not store your password in plain text.

Payment information: When you make a purchase, payment is processed by Stripe. We do not store your credit card number, CVV, or full card details. We receive and store a Stripe customer ID and the plan you purchased.

Usage data: We collect data about your activity within the Service, including questions answered, scores, topics practiced, and session history. This data is used to power features like weak spot drilling and progress tracking.

Technical data: We may collect standard technical information such as your browser type, device type, and IP address for security and service improvement purposes.

3. How We Use Your Information

• To create and manage your account
• To provide the Service and its features (practice questions, progress tracking, etc.)
• To process payments and manage your subscription status
• To send transactional emails (account confirmation, password reset, purchase receipts)
• To improve the Service and fix issues
• To comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

4. Third-Party Services

We use the following third-party services to operate the Service:

• Supabase — database and authentication. Your account data and usage data are stored on Supabase infrastructure.
• Stripe — payment processing. Stripe handles all payment transactions and is subject to its own privacy policy at stripe.com/privacy.
• Resend — transactional email delivery. Used to send account and purchase-related emails.
• Vercel — hosting and infrastructure. Our application is hosted on Vercel servers.

Each of these providers has their own privacy policy and data handling practices. We share only the minimum information necessary for each service to function.

5. Cookies

We use essential cookies only. These are required for the Service to function and include:

• Authentication cookies — to keep you signed in between sessions (managed by Supabase)
• Payment cookies — set by Stripe during the checkout process

We do not use advertising cookies, tracking pixels, or analytics cookies. We do not use Google Analytics or similar services.

6. Data Retention

We retain your account and usage data for as long as your account is active. If you request account deletion, we will delete your personal information within 30 days, except where we are required to retain it by law (such as payment records for tax purposes).

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at info@ahaprep.com.

8. Children's Privacy

The Service is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we become aware that a minor has provided us with personal information, we will delete it promptly.

9. Security

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse. Passwords are hashed and never stored in plain text. Payment data is handled exclusively by Stripe and never touches our servers.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page when changes are made. Continued use of the Service after any changes constitutes your acceptance of the updated policy.

11. Governing Law

This Privacy Policy is governed by the laws of the State of Florida.

12. Contact

For any privacy-related questions or requests, contact us at info@ahaprep.com.