Privacy Policy

PrepFriend collects as little personal information as it can. This policy explains what we collect on www.prepfriend.com and app.prepfriend.com, why, how long we keep it, and what rights you have. We do not sell personal information or share it for advertising, and we do not show ads. PrepFriend is the controller of the personal information described here; see the Legal Disclosure for who we are.

What we collect

Your email address. You sign in with a Google (Gmail) account, and that email address is the only personal detail your account holds. We do not ask for your name, phone number, date of birth, school, home address or payment details, and we never see your Google password.

Your practice. The tests and questions you take, your answers, scores, time taken, goals and the reports built from them, so PrepFriend can show what to study next.

Links between accounts. If a parent links to a student, or a teacher adds a student to a class, we record that link so they can assign practice and see that student's progress. When a parent links a student, we record that the parent accepted the Terms of Use for that student. When you create an account, we record that you confirmed you are 13 or older.

Sign-in and security records. For each sign-in session we keep the IP address and browser type, and we log account actions such as sign-ins and changes, to keep accounts secure and investigate misuse.

Copilot use. Each time you ask the Copilot something, we keep a short record that you asked: your account, when, how it ended (answered, declined or failed), how many tools it used and how long it took. We use these counts to see whether the feature works and is used. We never store what you asked or what the Copilot answered.

Messages you send us. The contact form sends us your email address, the topic you chose, your message and your IP address (to stop spam).

How we use it, and why

Only to run PrepFriend: to sign you in, save your practice, build your reports and recommendations, let linked parents and teachers see the students they are responsible for, keep the service secure, meet legal obligations, and reply to your messages. We rely on these grounds: providing the service you ask for, our legitimate interest in security and in improving the product, and consent (yours, or your parent's) where the law requires it.

AI features

PrepFriend Copilot and AI Recommendation run on PrepFriend's own servers; your questions and data are not sent to an outside AI company. Copilot reads only your account's data to answer you. Your questions are sent to our servers and processed there in real time to produce each answer, but the conversation is kept in your browser's memory rather than permanently stored by us.

Who can see it

You; any parent or teacher linked to your student account; and PrepFriend administrators when needed to support you or keep the service secure. We use a small number of service providers who process data for us: Cloudflare runs our network, sign-in protection and email delivery, and Google provides sign-in and our email inbox. They may process data in the United States and other countries. We share information otherwise only if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the service, in which case this policy will continue to apply to your data and we will tell you.

Cookies

We use only the cookies needed to sign you in and keep you signed in, plus security cookies Cloudflare may set to protect the site. We do not use advertising or tracking cookies. See the Cookie Statement.

Children and age restrictions

PrepFriend is strictly intended for users who are at least 13 years old. We do not target our services to children under 13, and we do not knowingly collect, solicit or maintain personal information (including email addresses) from anyone under the age of 13. Everyone who creates an account confirms that they are 13 or older, and a parent or teacher who adds a student confirms the same for that student.

If you are under 13, please do not attempt to register for PrepFriend or send any personal information to us. If we learn or have reason to suspect that an account belongs to a child under 13, we will terminate the account and permanently delete all associated data (including practice history and email records) from our systems within 24 hours. If you believe a child under 13 has created an account, please contact us immediately at contact@prepfriend.com so we can remove it.

Keeping and deleting your data

We keep your account and practice history while your account is open. You can ask us to delete your account at any time and we will remove your email address and practice history within 30 days. Other records are kept for these periods and then deleted:

• Security logs (sign-in sessions with IP addresses and browser type, and account-action logs): deleted automatically after 12 months.
• Contact-form messages (held in our email inbox): deleted within 12 months after we have dealt with them.
• Copilot use records (that a question was asked, how it ended and how long it took; never the question or the answer): deleted automatically after 12 months, or with your account.
• Records of Terms acceptance and age confirmation: kept while the account is open, and deleted with it.

We may keep information longer where the law requires it or where it is needed to resolve a dispute or prevent abuse.

Your rights

Wherever you live, including California and other U.S. states with privacy laws, you can use these rights by emailing contact@prepfriend.com or sending us a message (to delete your account yourself, sign in and choose Account, then Delete Account, as described in the FAQ):

• to know what we hold about you and receive a copy;
• to correct it;
• to delete it;
• to object to or limit how we use it; and
• to not be treated worse for using these rights.

We do not sell personal information or share it for cross-context behavioural advertising, so there is nothing to opt out of, and we do not use sensitive personal information to infer characteristics about you. We will respond within 45 days (sooner where the law says so) and may need to verify your identity first. You may use an authorised agent, and you may appeal a refusal by replying to our message. If you are in the European Economic Area or the United Kingdom, you may also complain to your data protection authority.

Security

All connections use HTTPS, and our servers are reachable only through Cloudflare. No system is perfectly secure, but we limit what we collect so there is less to protect. If a breach affects your information, we will tell you and the authorities as the law requires.

Changes

If this policy changes, we will update the date at the top. For a significant change, we will tell account holders by email.

Questions or requests

To ask what we hold about you, correct it, or have it deleted, email contact@prepfriend.com or send us a message. See also our Terms of Use.