Privacy Policy

2.1 Information you provide directly:

• Full name and email address upon registration
• Profile information and study preferences
• Payment information (processed by Paddle — we never store card details)
• Communications you send to our support team

2.2 Information collected automatically:

• Practice session data: questions answered, time spent, accuracy rates, difficulty levels
• Score history and performance trends
• Earned learning points, practice dates for streaks, score goals and free test unlocks
• Course-day checklists, completed lessons, quiz results and vocabulary review progress, stored under your account and available to authorised MultiPrep administrators for support and platform monitoring.
• App reviews: only reviews you allow to be displayed publicly may be published, with your chosen display name and rating. Your email is never shown publicly. You can withdraw permission from the feedback page.
• Friend invite attribution and whether a referred new account has verified its email. Inviters see anonymous friend numbers and verification status, not their friends’ emails or practice data.
• Optional analytics, only when enabled in Settings: MultiPrep page paths and phone/desktop category. Query strings, text you type, passwords, browsing history, other tabs and activity on other websites are not collected by this feature.

2.3 Information from third parties:

• Authentication data if you sign in via third-party providers (Google OAuth)

We use collected information to:

• Provide, operate, and maintain the Service
• Generate personalized score predictions and study recommendations
• Send transactional emails (account confirmation, billing receipts, password resets)
• Send a 90-day daily study email program, streak reminders and invite progress for registered accounts. You can turn it off in Settings or Levels & Invites, or unsubscribe from any study email without signing in. Security emails remain separate.
• Analyze usage patterns to improve the platform
• Detect and prevent fraudulent or abusive activity
• Comply with legal obligations

For users in the European Economic Area, we process your data under the following legal bases:

• Contract performance: to provide the Service you have subscribed to
• Legitimate interests: to improve our platform and prevent abuse
• Consent: for marketing communications
• Legal obligation: to comply with applicable law

Your data is stored securely using Supabase (supabase.com), with servers located in the United States. We implement industry-standard security measures including:

• TLS encryption for all data in transit
• Encryption at rest for sensitive data
• Row-level security policies on all database tables
• Regular security audits and access controls

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.

We do not sell, rent, or trade your personal information. We share data only with:

• Paddle (paddle.com): payment processing
• Supabase (supabase.com): database and authentication infrastructure
• Vercel (vercel.com): hosting and deployment
• Resend (resend.com): delivery of account and study emails

All third-party processors are bound by data processing agreements and applicable privacy regulations.

Depending on your jurisdiction, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Export your practice history and account data
• Withdraw consent for marketing communications
• Lodge a complaint with your local data protection authority (EU users)

To exercise any of these rights, contact us at: multiprep.support@gmail.com. We will respond within 30 days.

For privacy-related questions or requests:

Email: multiprep.support@gmail.com
Website: multiprep.xyz