Privacy Policy

We collect:

• Account data — your email address, and your name if you sign in with Google.
• Usage data — your practice attempts, mock-exam results and progress, so we can show your stats and readiness.
• Billing data — your purchase history, the access pass you hold and a Stripe customer reference. We do not store your card details; all payments are handled by Stripe.
• Technical data — basic logs needed to operate and secure the Service.

To provide and personalise the Service, track your progress, process your purchases, communicate with you about your account, measure how people find us, and keep the Service secure and working.

We share data only with service providers that help us run CMFASPrep:

• Stripe — payment processing and billing.
• Supabase — database hosting (Tokyo, Japan region).
• Vercel — application hosting, and anonymous page-view statistics that do not use cookies.
• Resend — sending account and service emails.
• Google— optional "Sign in with Google", and Google Ads conversion measurement (see Cookies).

We do not sell your personal data.

We use a secure, essential cookie to keep you logged in, and a cookie that remembers which CMFAS exam you are studying.

We also use the Google tag (gtag.js) for Google Ads conversion measurement. It sets cookies that tell us whether a visit that came from one of our ads led to a sign-up or a purchase. You can block these cookies in your browser settings, or manage ad personalisation at adssettings.google.com.

We keep your data while your account is active. If you delete your account, we delete or anonymise your personal data, except where we must retain limited records (e.g. payment records) to meet legal obligations.

Under the PDPA you may request access to, or correction of, your personal data, and may withdraw consent or ask us to delete your account. Contact us using the details below.

We use industry-standard measures (encryption in transit, hashed passwords, access controls). No system is perfectly secure, but we work to protect your data.

Privacy questions or requests: reach us through our feedback form.