Privacy Policy
This Privacy Policy describes how Pharos Prep ("we," "us," or "our") collects, uses, and shares information when you use pharosprep.io (the "Service"). We are committed to protecting your privacy and handling your data transparently.
1. Information We Collect
| Category | What | How collected |
|---|---|---|
| Account data | Email address, password (hashed), exam date, CRD number (optional), firm name (optional) | You provide it at signup or in Settings |
| Study data | Questions answered, accuracy by topic, session history, study streak, progress percentage | Generated as you use the app |
| Referral data | Referral code, referring user (if you signed up via a referral link) | Captured automatically from referral link |
| Feedback | Issue type, comments, flagged question content | You submit it via the feedback form |
| Usage data | Browser type, device type (via Cloudflare logs) | Automatically collected |
We do not collect payment information. We do not sell your data.
2. How We Use Your Information
- To operate and provide the Service (authentication, progress tracking, study scheduling)
- To send transactional emails (account confirmation, password reset)
- To respond to feedback you submit
- To monitor platform health and improve content quality
- To display aggregate, anonymized user statistics to administrators
3. How We Share Your Information
We do not sell, rent, or trade your personal information. We share data only with the following service providers, solely to operate the Service:
- Supabase — database and authentication (supabase.com). Data is stored in US-based infrastructure.
- Cloudflare — hosting, DNS, and serverless functions (cloudflare.com)
- Resend — transactional email delivery (resend.com)
We may disclose information if required by law or to protect our legal rights.
4. Data Retention
We retain your account and study data for as long as your account is active. If you delete your account, your personal data is permanently removed from our systems within 30 days. Anonymized aggregate data may be retained indefinitely.
5. Your Rights
You have the right to:
- Access — request a copy of your personal data
- Correction — update your email or account details in Settings
- Deletion — delete your account at any time from the Settings screen
- Portability — export your progress data as JSON from Settings
To exercise any of these rights or make a data request, email contact@pharosprep.io.
6. Security
We use industry-standard security practices: passwords are hashed, all data in transit is encrypted via TLS, and database access is controlled by row-level security policies. No system is perfectly secure — please use a strong, unique password and keep it confidential.
7. Children's Privacy
The Service is intended for users 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, please contact us and we will delete it promptly.
8. Cookies and Local Storage
The Service uses browser localStorage to cache your study state for fast loading. We use Supabase session cookies for authentication. We do not use third-party advertising or tracking cookies.
9. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by updating the effective date above. Continued use of the Service constitutes acceptance of the revised policy.
10. Contact
Questions or concerns about privacy? Email us at contact@pharosprep.io.