Privacy Policy
Last updated: 2026-05-08.1
1. Who we are
PrepQuickly LLC (“PrepQuickly,” “we,” “us,” or “our”) is a Texas limited liability company that operates the PrepQuickly website, web application, and related services (collectively, the “Service”).
This Privacy Policy explains what personal information we collect, how we use and share it, and the rights you have. By using the Service you agree to the practices described here. If you do not agree, please do not use the Service.
2. Audience and age
The Service is offered only to residents of the United States who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us at support@prepquickly.com and we will delete it.
3. Information we collect
3.1 Information you give us
- Account information: first and last name, email address, password (handled and stored by AWS Cognito; we never see plaintext passwords), and an optional phone number used for multi-factor authentication.
- Pipeline (team) information: if you are a pipeline manager you provide a team name; if you join a pipeline as a member we record your association with that pipeline.
- Communications: the contents of emails you send to us (for example, support requests).
- Legal acceptances: the version of the Terms of Service and Privacy Policy you accepted at signup, plus the date and time of acceptance.
3.2 Information we collect when you use the Service
- Study activity: practice-test sessions, including the test taken, questions presented, your answers, whether each answer was correct, response times, study-mode flag, session duration, and pass/fail outcome.
- Subscription state: your tier (free, individual, team), free-trial expiry, and cancellation status. Card numbers are handled by Stripe; we store only a Stripe customer identifier and subscription metadata.
- Device and log data: IP address, user agent, browser, operating system, request timestamps, and pages visited. These are recorded by our hosting infrastructure (AWS CloudFront, ALB, ECS) for security, abuse prevention, and debugging.
- Cookies and similar technologies: see our Cookie Policy.
3.3 Information from third parties
- OAuth sign-in: if you sign in with Google or Facebook through AWS Cognito, the provider gives us your email address, name, and profile picture URL. We request only the minimum scopes needed.
- Stripe: when you subscribe, Stripe sends us status events (subscription created, renewed, canceled, payment failed) tied to your Stripe customer ID.
4. How we use your information
We use the information described above to:
- create and maintain your account, authenticate you, and enable multi-factor authentication;
- deliver practice tests, score sessions, and present per-domain progress and history;
- enforce trial periods, free-tier caps, and paid entitlements;
- process payments, send receipts, and manage subscriptions through Stripe;
- send transactional email through AWS SES (account verification, password resets, billing notices, important service updates);
- respond to support requests;
- monitor for fraud, abuse, security incidents, and bugs, and to maintain the integrity of the Service;
- comply with legal obligations and enforce our Terms of Service and Acceptable Use Policy.
We do not use the content of your study sessions to train machine-learning models for third parties. We do compute aggregate analytics on study activity to operate and improve the Service.
5. How we share your information
We do not sell your personal information. We share it only with the following categories of recipients, and only as needed:
| Recipient | Purpose | Data shared |
|---|---|---|
| Amazon Web Services (US) | Hosting, database, file storage, email delivery (SES), authentication (Cognito) | All Service data; processed under AWS's data-processing terms |
| Stripe, Inc. | Payment processing, subscription billing, tax handling | Name, email, billing details, Stripe customer/subscription IDs |
| Google (OAuth) | Federated sign-in (only if you choose Google) | OAuth tokens; Google receives the fact that you used Google to sign in to PrepQuickly |
| Meta / Facebook (OAuth) | Federated sign-in (only if you choose Facebook) | OAuth tokens; Meta receives the fact that you used Facebook to sign in to PrepQuickly |
We may also share information:
- With pipeline managers: if you join a pipeline (team) using a referral code, the manager of that pipeline can see that you are a member and your basic membership status. They cannot see your individual study answers or response times.
- For legal reasons: in response to a subpoena, court order, or other valid legal process; to protect our rights, safety, or property; or to investigate fraud or abuse.
- In a business transfer: if PrepQuickly is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred. We will notify you (for example, by email and a prominent notice on the site) before your information becomes subject to a different privacy policy.
- With your consent: for any other purpose you explicitly agree to.
6. How long we keep your information
We keep account and study-activity data for as long as your account is active. If you delete your account, we delete or anonymize personal information within 30 days, except where we are required to retain it for legal, tax, accounting, or fraud-prevention reasons (typically up to seven years for billing records).
Server and security logs are retained for up to 90 days. Backups containing personal data may persist for up to 35 days after deletion before being overwritten.
7. How we protect your information
We use commercially reasonable technical and organizational measures, including: TLS/HTTPS for data in transit; encryption at rest for the database and backups; password hashing handled by AWS Cognito; private-isolated subnets for our database and application servers; least-privilege IAM; and access logging. No system is perfectly secure; if you discover a vulnerability, please report it to support@prepquickly.com.
8. Your choices and rights
All users can:
- access, correct, or update most account information from your account settings;
- delete your account, which deletes the associated personal data subject to the retention rules in Section 6;
- opt out of non-essential cookies via the cookie banner or the “Cookie Preferences” link in the site footer;
- unsubscribe from non-transactional email using the link in the email footer.
8.1 California residents (CCPA / CPRA)
If you are a California resident you have the right to:
- Know what personal information we have collected about you, the sources, the purposes, and the categories of recipients.
- Access a copy of your personal information.
- Correct inaccurate personal information.
- Delete your personal information, subject to legal exceptions.
- Opt out of sale or sharing of personal information. PrepQuickly does not sell or share personal information for cross-context behavioral advertising.
- Limit the use of sensitive personal information. We use sensitive personal information (for example, account credentials) only as necessary to provide the Service and as permitted by Cal. Civ. Code § 1798.121.
- Non-discrimination: we will not deny service, charge different prices, or provide a different level of quality because you exercised these rights.
How to exercise California rights: email support@prepquickly.com with the subject line “CCPA Request.” We will verify your identity using information already on file (typically a confirmation email to the address associated with your account). You may use an authorized agent; we will require written authorization. We respond within 45 days; if more time is needed we will tell you and may take up to an additional 45 days.
Categories of personal information collected in the past 12 months: identifiers (name, email, phone, IP address, account ID); commercial information (subscription history); internet activity (study session and request logs); and inferences (per-domain accuracy and pass-probability metrics computed from your activity). Sources: directly from you, automatically from your use of the Service, and from OAuth providers if you use them. Recipients: see the table in Section 5.
9. Communications
We send transactional emails (account verification, password resets, billing notices, security alerts, and material changes to this policy or the Terms of Service) for as long as you have an account; you cannot opt out of these and continue to use the Service. We will only send marketing email if you have opted in, and you can opt out at any time using the unsubscribe link in those messages.
10. Third-party links and integrations
The Service may link to third-party websites we do not control. This Privacy Policy does not apply to those sites; review their own policies before sharing information.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes we will update the “Last updated” date above, post the new policy on this page, and notify registered users by email. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
12. Contact us
PrepQuickly LLC (Texas)
Email: support@prepquickly.com
Mailing address: available on request.