Privacy Policy
TabiPrep.com ("the site," "we," "us") is a flashcard study site for the MCAT. This policy explains what information we collect, how we use it, and the choices you have. It applies to everyone who uses the site, including California residents.
Information we collect
- Account information: your first name, email address and password when you sign up. Your password is stored only in encrypted (hashed) form by our account provider; we never see it. We also record when you agreed to these terms and that you confirmed you're 18 or older.
- Study progress: your card ratings and review schedule, your written answers in study exercises, card notes, bookmarks, test date, study sessions and settings (such as display mode and background).
- Usage activity: the date and time you last used the site (while the site is open, it checks in about once a minute, so the owner can see who is currently online), how many cards you reviewed each day, and how much time you spent actively studying each day.
- Card reports: if you use "Report this card," we receive the card, any note you write, and your name and email address so we can follow up with you.
- Technical information: like most websites, our hosting providers automatically process basic technical data (such as IP address and browser type) to deliver the site and keep it secure.
We don't use advertising, tracking cookies or third-party analytics. The site stores a copy of your progress in your browser so it works on a weak connection; that copy is removed when you log out.
How we use it
- To create and secure your account, verify your email and let you reset your password.
- To save your progress and sync it across the devices you log in on.
- To understand how the site is used (for example, whether people come back and how much they study) so we can improve it.
- To fix problems with cards you report, and to contact you about your account when necessary.
Who can see your information
- You can see all of your own progress and notes.
- The site owner can see each account's name, email address, sign-up date, last activity (including whether you are online now), the number of days studied, the number of cards reviewed and study time. The owner cannot see your answers, ratings, scores, notes or bookmarks; the database is set up so that only you can read your study progress.
- Service providers that run the site for us: Supabase (accounts and database), Vercel (website hosting), FormSubmit (delivers card reports by email) and our email provider (sends verification and password-reset emails). They process information only to provide these services.
We do not sell your personal information, and we do not share it for advertising.
Your choices and rights
- See and correct: your study progress is always available to you on the site, and you can change your first name on the Account page.
- Download: use Export Progress to download a copy of your study data.
- Delete: use "Delete my account" on the Account page to permanently delete your account and all of its data. You can also email us to ask.
- California residents may request to know what personal information we have about them and how it's used, to correct it, and to delete it. We won't treat you differently for making a request. Email us at the address below.
Do Not Track
The site doesn't track you across other websites or allow third parties to do so, so it treats all visitors the same whether or not their browser sends a Do Not Track signal.
How long we keep it
We keep your account information, progress and activity while your account exists. When you delete your account, it's removed from our database right away; copies in our providers' routine backups are overwritten on their regular schedule.
Security
We use reasonable safeguards: encrypted connections (HTTPS), hashed passwords and database rules that limit each account to its own data. No system is perfectly secure; if a breach affecting your personal information occurs, we'll notify you as required by law.
Children
The site is intended for adults. You must be 18 or older to create an account, and we don't knowingly collect information from children under 13. If you believe a child has created an account, contact us and we'll delete it.
Changes to this policy
If we change this policy, we'll update the effective date above. If the changes are significant, we'll let you know on the site or by email before they take effect.
Contact
Questions or requests: aaron@sunsweeper.com