Privacy Policy
This Privacy Policy explains how Unlocked collects, uses, and protects your personal information. By using the Service, you agree to the practices described here.
1. Information We Collect
Account information:
Name, email address, and password (stored securely via Supabase).
Study progress data:
Quiz scores, flashcard review results, practice exam attempts, module completion status, and study streaks. This data is used to personalize your experience and power your readiness score.
Carl conversation history:
Messages you send to Carl and Carl’s responses. These are used to provide the service and may be used to improve our AI system. We do not share individual conversation transcripts with third parties.
Payment information:
Payments are processed by Stripe. We do not store full payment card details. We retain the last four digits of your card and billing information as provided by Stripe.
Usage data:
Pages visited, features used, and session duration, collected to improve the Service.
2. How We Use Your Information
- To provide, maintain, and improve the Service
- To personalize Carl’s responses based on your study history and weak areas
- To track and display your study progress and readiness score
- To process payments and manage your subscription
- To send you transactional emails (account confirmation, payment receipts)
- To send you study reminders or product updates (you may opt out at any time)
- To comply with legal obligations
3. Third-Party Services
We share data with the following third parties to operate the Service:
- Supabase — database and authentication. Your account data and study progress are stored in Supabase. Supabase is SOC 2 compliant.
- Stripe — payment processing. Stripe handles all payment card data and is PCI-DSS compliant. We never see or store raw card numbers.
- Anthropic — AI infrastructure powering Carl. Messages sent to Carl are processed by Anthropic’s Claude API. See Anthropic’s privacy policy for details on how they handle API data.
We do not sell your personal information to third parties.
4. Cookies and Local Storage
We use browser localStorage to store your study progress, preferences, and session state locally on your device. We do not use third-party tracking cookies for advertising purposes.
We may use functional cookies (e.g., Supabase session tokens) that are strictly necessary to operate the Service. These cookies are not used to track you across other websites.
5. Data Retention
We retain your account data and study history for as long as your account is active. If you request deletion of your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes.
6. Your Rights
You have the right to:
- Access the personal information we hold about you
- Correct inaccurate personal information
- Request deletion of your personal information
- Export your study data in a portable format
- Opt out of non-essential communications at any time
To exercise any of these rights, email us at support@unlockedreprep.com.
7. California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how we use it, the right to request deletion of your personal information, and the right to opt out of the sale of personal information (we do not sell personal information). To submit a request, contact us at the email above.
8. European Users (GDPR)
If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, or erase your data, the right to restrict or object to processing, and the right to data portability. Our legal basis for processing your data is the performance of a contract (providing the Service) and your consent where required. To exercise your rights, contact us at the email above.
9. Children’s Privacy
The Service is not directed at individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we discover we have inadvertently collected such information, we will delete it promptly.
10. Contact
For privacy questions or requests, contact us at support@unlockedreprep.com.