Privacy Policy

Parent account. When you sign up, we collect your email address and name through our authentication provider (Clerk). If you sign in with Google, we receive your basic profile (name, email).

Child profiles. You create a profile for each child. We collect only a first name or nickname, grade, and target exam, plus an optional test date. We do not collect a child’s last name, address, phone number, photo, or any contact information, and children do not have their own logins.

Practice data. As a child practices, we record their answers, accuracy, time spent, and progress, so we can target the right topics and show you a clear picture.

Payment. Subscriptions are processed by Stripe. We do not see or store your full card number — Stripe handles payment data directly.

Technical data. Like most sites, we collect basic log and device data (e.g., IP address, browser type) and use essential cookies to keep you signed in. We do not use advertising or cross-site tracking cookies.

PopPrep is designed for a parent or guardian to set up and manage. By creating a child profile, you provide consent for us to collect the limited child information above for the sole purpose of providing the practice service to your family.

• We collect the minimum child data described above — nothing more.
• We never show behavioral or third-party advertising to children.
• We never sell or rent any child information.
• You can review, edit, or delete your child’s profile and data at any time from your account, or by emailing us.

• To run the practice loop — diagnose gaps and target the right topics.
• To show parents progress and send the weekly digest email you opt into.
• To provide, maintain, secure, and improve the service.
• To process subscriptions and send service and billing notices.

We do not sell your or your child’s personal information. We share data only with service providers who help us run PopPrep, under contracts that limit their use of it:

• Clerk (authentication), Supabase (database), Vercel (hosting)
• Stripe (payments), Resend (the parent digest email)

We may disclose information if required by law, or to protect the rights and safety of our users and the public.

We keep your information while your account is active. You can delete your account, a child profile, or your data at any time — when you do, we delete the associated personal data, except where we must retain limited records for legal or billing purposes. To request deletion, email support@popprep.ai.

We use industry-standard measures (encryption in transit, access controls, reputable infrastructure providers) to protect your information. No system is perfectly secure, but we work to keep your family’s data safe.

You can access and update your information in your account, opt out of the digest email, and request deletion. Depending on where you live, you may have additional rights (such as under California’s CCPA/CPRA) — contact us to exercise them.

We may update this policy as the product evolves. We’ll change the “last updated” date above and, for material changes, notify you.

Questions about privacy? Email support@popprep.ai.