Privacy Policy

What we collect

Account info. Your email, your name, and your password. The password is stored hashed by Supabase, our login provider. We never see it.

How you found us. Your answer to “how did you hear about us,” referral codes, and the campaign tags on the link you clicked to get here. We also note whether you signed up on a phone or a computer.

Study data. Practice exam history, question attempts, quiz scores, study progress, the topics you say you are interested in, your language preference, and any custom audio lessons you generate. This is study-progress data about you as a test taker. It is not health data.

Usage. Which pages you visit inside the app and when you were last active, so we can see what is useful and what is broken.

How we use it

To run your account, save your progress, personalize your lessons and audio, fix bugs, see which marketing actually works, and send you emails that matter. When you sign up, we also get a small internal notification (your name, email, and signup date) so a human knows you joined. That is it.

What we never do

We never sell your data. We never hand it to data brokers. Ad platforms never see your study data, your name, or your plain email address; the only thing they receive is described in the ads section below.

We never store patient or client information. This product helps psychologists pass the EPPP. It holds no therapy records, no client names, no clinical documentation, nothing covered by HIPAA. There is no patient data here because there are no patients here.

Payments

Stripe handles all payments. Your card number never touches our servers. We keep your subscription status and Stripe’s reference ID for your account, nothing more.

Analytics, cookies, and ads

We use Google Analytics 4 to count visits and see which pages people use. It sets cookies and records the pages you view and roughly where traffic comes from. When you are signed in, we connect that activity to a random account ID (never your name or email) so we can see the path from a first visit to signing up or subscribing. We also tell Google when someone starts checkout or buys a subscription, including the amount paid, so we can measure how well the site works. We never send Google your name, email, or card details. We also use cookies to keep you logged in.

We also use the Meta (Facebook) Pixel and Conversions API to measure whether our ads work and to reach people similar to our users. Meta receives events like page visits, sign-ups, and purchases from this site. We may also share hashed versions of email addresses with Meta for ad matching. Hashing scrambles the address into a code before it leaves our systems; Meta can only check that code against its own accounts and deletes it after matching. Meta never receives your study data.

You can opt out of interest-based ads at aboutads.info/choices or youronlinechoices.eu, and control how Meta uses this data in your Facebook ad preferences.

Emails

We send account emails (password resets, receipts) and occasional study nudges, delivered through Resend. Want fewer emails? You can turn off marketing communications in your in-app consent settings, or email us and we will stop. Account emails like password resets still arrive because you need them.

Research, only if you opt in

You can choose to contribute your study data to research on how people prepare for licensure exams. If you do, your data is exported under an anonymized research ID that is never linked to your name or email. You can change this choice in your consent settings at any time.

Retention and deletion

We keep your data while your account is active. Want it gone? Email DrChan@thepsychology.ai and we will delete your account and study data.

Third-party services

These are the only services that touch your data:

• Supabase: database and login.
• Stripe: payments.
• Google Analytics: usage and conversion measurement (receives a random account ID, never your name or email).
• Meta: ad measurement and audiences (receives site events and hashed emails for matching, never your study data).
• Resend: email delivery.
• Vercel: hosting.
• Cloudflare R2: stores the audio lesson files you generate.
• OpenAI and Anthropic: power the AI lessons, practice questions, audio, and study plans. They receive the study content needed to generate those, never your name, email, or payment details.

Changes to this policy

If we change how we handle your data, we will update this page and the date at the top.

Questions?

Email DrChan@thepsychology.ai.