Privacy Policy

Last updated: October 25th, 2026

1. What we collect

Account information: your email address, used to send a one-time sign-in code and account-related messages. We do not require or store a password.

Payment information: processed entirely by Stripe. We receive confirmation that a payment succeeded and basic transaction details; we never see or store your card number.

Study activity: your practice-exam answers, scores, time spent, and flashcard progress, used to show you your own results and to improve the Service.

Contact form submissions: your name, email, and message, sent to us via Resend when you use the contact form.

Usage and device information: collected automatically through Google Analytics, such as the pages you visit, how long you stay, how you arrived at the site, your approximate location (city or region), and your browser, device, and operating system. See section 4.

2. How we use it

To provide the Service (sign-in, access to purchased content, showing your results), to respond to support requests, to understand how the Service is used so we can improve it, and to keep it secure. We do not sell your personal information.

3. Who we share it with

We use third-party service providers to operate the Service: Supabase (accounts and data storage), Stripe (payments), Resend (email delivery), and Google (analytics). Each processes your information only as needed to provide their service to us. We may also disclose information when required by law.

4. Google Analytics

We use Google Analytics, a web analytics service provided by Google, to help us gather and analyze information about how visitors use NPPE Ready. This helps us understand which pages and features are used, how people find the site, and where we can improve the Service.

Google Analytics uses cookies and similar technologies to collect usage and device information (described in section 1) and to recognize your browser across visits. The information is transmitted to and stored on Google's servers, which may be located outside Canada. We use this information in aggregate to analyze trends; we do not use Google Analytics to identify you personally or to collect your payment details, and we do not send it your practice-exam answers.

Google's use of the information is governed by its own Privacy Policy. You can opt out of Google Analytics by blocking cookies in your browser settings, by enabling a browser "Do Not Track" or content-blocking feature, or by installing the Google Analytics opt-out browser add-on. Opting out will not affect your ability to use the Service.

5. Cookies and local storage

We use cookies that are necessary to keep you signed in (set by our authentication provider, Supabase), and your browser's local storage to remember your light or dark theme choice. Google Analytics cookies are described in section 4. Most browsers let you block or delete cookies, but blocking the sign-in cookies will prevent you from signing in.

6. Data retention

We retain account and study-activity data for as long as your account is active, or as needed to comply with legal obligations (for example, tax and accounting records of payments). Contact form messages are kept only as long as needed to respond to you. Analytics data is retained according to the retention settings we choose in Google Analytics. If you ask us to delete your account, we will delete your personal information, except where we are required to keep it.

7. Where your information is stored

Our service providers may store and process information on servers outside your province or outside Canada, where it may be subject to the laws of those jurisdictions.

8. Your rights

You can request a copy of your personal information, ask us to correct it, withdraw your consent to our use of it, or ask us to delete your account and associated data, by contacting us. .

9. Security

We rely on our service providers' security practices (Supabase, Stripe, Resend, Google) and apply access controls (such as row-level security on our database) to limit who can see your information. No method of transmission or storage is 100% secure.

10. Changes to this policy

We may update this policy from time to time and will post the updated version here, with a new "Last updated" date.

11. Contact

Questions about this policy, or a request about your data? Contact us.