Privacy Policy

What we collect

Account info. Your email, your name, and your password. The password is stored hashed by Supabase, our login provider. We never see it.

How you found us. Your answer to “how did you hear about us,” referral codes, and the campaign tags on the link you clicked to get here. We also note whether you signed up on a phone or a computer.

Study data. Practice exam history, question attempts, quiz scores, study progress, the topics you say you are interested in, your language preference, and any custom audio lessons you generate. This is study-progress data about you as a test taker. It is not health data.

Usage. Which pages you visit inside the app and when you were last active, so we can see what is useful and what is broken.

Guarantee claims. If you file a pass-guarantee claim we collect your legal name as registered with ASPPB, your ASPPB candidate ID, your exam date, a photo of your score report, and your debrief answers. We use them only to decide your claim, and we delete the score report after the decision is final and no later than 12 months after it.

How we use it

To run your account, save your progress, personalize your lessons and audio, fix bugs, see which marketing actually works, and send you emails that matter. When you sign up, we also get a small internal notification (your name, email, and signup date) so a human knows you joined. That is it.

What we never do

We never sell your data. We never hand it to data brokers. Ad platforms never see your study data, your name, or your plain email address; the only thing they receive is described in the ads section below.

We never store patient or client information. This product helps psychologists pass the EPPP. It holds no therapy records, no client names, no clinical documentation, nothing covered by HIPAA. There is no patient data here because there are no patients here.

Payments

Stripe handles all payments. Your card number never touches our servers. We keep your subscription status and Stripe’s reference ID for your account, nothing more.

Analytics, cookies, and ads

We use Google Analytics 4 to count visits and see which pages people use. It sets cookies and records the pages you view and roughly where traffic comes from. When you are signed in, we connect that activity to a random account ID (never your name or email) so we can see the path from a first visit to signing up or subscribing. We also tell Google when someone starts checkout or buys a subscription, including the amount paid, so we can measure how well the site works. We never send Google your name, email, or card details. We also use cookies to keep you logged in.

We also use the Meta (Facebook) Pixel and Conversions API to measure whether our ads work and to reach people similar to our users. Meta receives events like page visits, sign-ups, and purchases from this site. We may also share hashed versions of email addresses with Meta for ad matching. Hashing scrambles the address into a code before it leaves our systems; Meta can only check that code against its own accounts and deletes it after matching. Meta never receives your study data.

You can opt out of interest-based ads at aboutads.info/choices or youronlinechoices.eu, and control how Meta uses this data in your Facebook ad preferences.

Emails

We send account emails (password resets, receipts) and occasional study nudges, delivered through Resend. Want fewer emails? You can turn off marketing communications in your in-app consent settings, or email us and we will stop. Account emails like password resets still arrive because you need them.

Research, only if you opt in

You can choose to contribute your study data to research on how people prepare for licensure exams. If you do, your data is exported under an anonymized research ID that is never linked to your name or email. You can change this choice in your consent settings at any time.

Your data, your choice

Your study data belongs to you. If you ask us to delete it or not use it for model training, we will respect that choice. Email DrChan@thepsychology.ai to make a request. We will not restore deleted study data to include it in a success-story analysis.

Retention and deletion

We keep your data while your account is active. Want it gone? Go to Delete your account to remove your account and study data yourself, or to request deletion if you cannot sign in. You can also email DrChan@thepsychology.ai and we will do it for you.

Third-party services

These are the only services that touch your data:

• Supabase: database and login.
• Stripe: payments.
• Google Analytics: usage and conversion measurement (receives a random account ID, never your name or email).
• Meta: ad measurement and audiences (receives site events and hashed emails for matching, never your study data).
• Resend: email delivery.
• Vercel: hosting.
• Slack: where our small team sees new claims, feedback, and alerts. It never receives your name, your email, or your score report.
• Cloudflare R2: stores the audio lesson files you generate.
• OpenAI and Anthropic: power the AI lessons, practice questions, audio, and study plans. For EPPP study features they receive the study content needed to generate those, never your name, email, or payment details. In Recover, the messages you type are also sent to OpenAI to find related study material.
• DeepSeek: writes the replies in our AI chat features (such as Session Zero, Recover, and the question tutor) and helps personalize and translate lessons. The messages you type in a chat are sent to DeepSeek to write the reply and are stored with your account. DeepSeek is a company based in China.
• TypeSafe: reads the one line you can type before a Take 5 break and picks the break that fits. We don't store that line. If it mentions hurting yourself, we show crisis resources and alert our team, without your words.

Changes to this policy

If we change how we handle your data, we will update this page and the date at the top.

Questions?

Email DrChan@thepsychology.ai.