Privacy Policy

We collect the following types of information:

Account Information: When you create an account, we collect your email address, name (if provided), and authentication credentials. If you sign up using Google OAuth, we receive your name, email address, and profile picture from Google.

Usage Data: We collect information about your interactions with the Platform, including questions answered, scores, session durations, streak data, and learning progress. This data is used to provide personalized features like readiness scores and weak area analysis.

Payment Information: Payment processing is handled entirely by Stripe. We do not store your credit card number, CVV, or full card details on our servers. We receive only a confirmation of payment and a reference identifier from Stripe.

Device Information: We may collect basic device and browser information (browser type, operating system, screen resolution) to optimize your experience and diagnose technical issues.

We use the information we collect to:

• Provide, maintain, and improve the Platform
• Track your learning progress and generate personalized study insights
• Process payments and manage your subscription
• Send important account-related communications (password resets, payment confirmations)
• Analyze usage patterns to improve our content and features
• Prevent fraud and ensure Platform security

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Your data is stored securely using Supabase, a cloud database platform built on PostgreSQL. Supabase provides enterprise-grade security including encryption at rest and in transit, and Row Level Security (RLS) policies that ensure you can only access your own data. Your data is stored on Supabase infrastructure located in Canada (ca-central-1 region).

Our infrastructure is hosted on secure cloud servers. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

All payment transactions are processed securely by Stripe, a PCI DSS Level 1 certified payment processor. When you make a purchase, you are redirected to Stripe's secure checkout page. We never have access to your full payment card details.

For more information about how Stripe handles your data, please review Stripe's Privacy Policy.

We use browser local storage to maintain your session and, for free-tier users, to store learning progress locally. We use essential cookies for authentication and session management.

We do not use third-party tracking cookies or advertising cookies. We use Plausible Analytics for cookieless web analytics. Plausible does not use cookies, track you across websites, or create personal profiles.

We use the following third-party services that may process your data:

• Supabase: Database hosting, authentication, and data storage
• Stripe: Payment processing
• Google: OAuth authentication (optional, only if you choose to sign in with Google)
• Plausible Analytics: Privacy-friendly, cookieless web analytics; no personal data collected

Each of these services has their own privacy policy governing how they handle your data. We encourage you to review their respective privacy policies.

We retain your account data and learning progress for as long as your account is active. Self-serve account deletion takes effect immediately, except where retention is required by law, such as financial transaction records held by Stripe.

Anonymized and aggregated data that cannot be used to identify you may be retained indefinitely for analytical and improvement purposes.

Your access and deletion rights under PIPEDA and Quebec Law 25 are available through these self-serve options in your Profile:

• Access and export:Use Profile → “Your data” → Download my data.
• Correction: Request correction of inaccurate personal data
• Deletion: Use Profile → Delete account to permanently delete your personal data and account. If you made a purchase, a minimal payment record (email, amount, date, purchase IP address, Stripe references) is retained for financial-compliance and payment-dispute purposes.
• Objection: Object to certain types of data processing

For anything else, email us at hello@pswleap.com.

The Platform is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a prominent notice on the Platform. Your continued use of the Platform after such changes constitutes your acceptance of the revised policy.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: hello@pswleap.com