Privacy Policy
Last updated: 2026-05-08
We try to collect as little data as we can while still running the service. Here's what we store, why, and who we share it with.
What we collect
- Account info: name, email, hashed password (or OAuth identity from Google).
- Practice data: the scenarios you generate, your answers, and AI grading feedback. This stays linked to your account.
- Usage counters: daily session and generation counts, used to enforce free-tier limits.
- Billing: Stripe handles all card data. We store a Stripe customer ID and subscription status.
- Server logs: standard request logs (IP, user agent, route) retained briefly for security and debugging.
What we don't collect
- We don't use third-party advertising trackers.
- We don't sell your data.
- We don't store payment card numbers — Stripe does.
Who processes your data
- Anthropic — your scenarios and answers are sent to the Claude API for generation and grading. Anthropic's privacy terms apply to that processing.
- Stripe — payment processing.
- Resend — transactional email (sign-up, password reset, etc.).
Your rights
You can export or delete your data at any time by contacting us via the contact page. If you delete your account, we delete your practice history and personal data within 30 days (we may retain billing records longer where legally required).
Cookies
We use a single first-party session cookie to keep you signed in. We don't use third-party tracking cookies or analytics that fingerprint individuals.
Contact
Questions about this policy? Reach out via the contact page.