Privacy Policy — CSECReady

Welcome to CSECReady (“we”, “our”, or “us”). We are committed to protecting the privacy of students, parents, and educators who use our platform. This Privacy Policy explains how we collect, use, and safeguard your information when you use CSECReady.

1. Information We Collect

Information You Provide

Account details: Your name, email address, school, and target grade when you sign up.
Profile information: Display name and other optional profile fields you choose to fill in.
Payment information: Processed securely by our payment provider (Stripe). We never store your card details on our servers.

Information Collected Automatically

Usage data: Questions answered, exam sessions completed, subjects studied, time spent on the platform.
Device & browser data: IP address, browser type, operating system, and referring URLs for security and performance purposes.
Cookies: We use session cookies to keep you logged in and analytics cookies to improve the platform. You can control cookies through your browser settings.

2. How We Use Your Information

To provide and improve the CSECReady learning platform.
To personalise your study experience — track progress, calculate streaks, and recommend content.
To communicate with you: account notifications, study reminders (if you opt in), and product updates.
To process subscription payments and manage billing.
To comply with legal obligations and protect the safety of our users.

3. Sharing Your Information

We do not sell your personal data. We may share information with:

Service providers: Supabase (database), Stripe (payments), Vercel (hosting) — only to the extent needed to operate the platform.
Parents/Guardians: If you are linked to a parent account, your progress summary is visible to them.
Legal authorities: When required by applicable law or to protect the rights and safety of our users.

4. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where required by law to retain it longer.

5. Children's Privacy

CSECReady is designed for students aged 14 and over. If a user is under 18, we encourage parental oversight. We do not knowingly collect personal data from children under 13 without verifiable parental consent. If you believe a child under 13 has registered, please contact us immediately.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data (“right to be forgotten”).
Object to or restrict certain processing activities.
Receive a copy of your data in a portable format.

To exercise any of these rights, email us at privacy@csecready.com.

7. Security

We use industry-standard security measures including HTTPS encryption, hashed passwords, and row-level security on our database. However, no system is 100% secure — please use a strong, unique password and keep it safe.

8. Third-Party Links

CSECReady may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend you review their policies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of CSECReady after changes constitutes acceptance of the updated policy.

10. Contact Us

Questions about this policy? Reach us at privacy@csecready.com. We aim to respond within 5 business days.