The short version
We store your email, a hashed password, and your practice history so you can resume on any device. We never store voice recordings or transcripts. We do not sell data, run advertising, or send your answers to analytics.
What we collect
| Data | Why | Kept |
|---|---|---|
| Email address | Your account and sign-in | Until you delete your account |
| Password | Sign-in. Stored only as a salted PBKDF2 hash | Until you delete your account |
| Session records | Keeping you signed in. The cookie holds a random token; we store only its hash | 60 days at most, 14 days idle |
| One-time codes | Email verification and password reset. Stored only as a hash | 10-minute validity; removed with your account |
| Onboarding answers | Exam date, experience and goal, to shape your plan | Until you change or delete them |
| Attempts and answers | Scores, review queue, resume across devices | Until you delete your account |
| Voice and typed scenario results | Which checklist points you covered, the score, the model used, the date. No audio, no transcript | Until you delete your account |
| Purchase records | Access period and refunds, once paid access opens | As long as tax law requires |
| Consent record | Which policy version you accepted, and when | Until you delete your account |
Voice recordings
When you record an answer, your browser asks for the microphone only when you press record. The audio is sent to our server and passed to Cloudflare Workers AI for transcription, then discarded. It is not written to a database, file storage, logs or analytics. The transcript is shown to you so you can correct it, sent once for checklist matching, and then discarded too.
Who processes data for us
- Cloudflare hosts the site, the database and the AI models used for transcription and checklist matching.
- Stripe will process payments once paid access opens. Card details go to Stripe's hosted checkout and never reach us.
- Aggregate, cookie-free page analytics (Cloudflare Web Analytics) may count page views. It does not receive your answers, email or transcripts.
Export and deletion
From the account page you can download everything we hold about you as a JSON file, and delete your account. Deletion removes your learning history and signs out every session immediately. We keep a record that a deletion happened and when, with no personal details.
Operational logs
Server logs record a request ID, the route, the status, the duration and an error type. They do not contain your answers, email, questions or transcripts.
Changes
If this policy changes in a way that affects what we store, we will ask you to accept the new version.