Privacy Policy

1. Who We Are

Code3Prep ("we," "us," or "our") operates the Code3Prep web application and associated website, an educational study platform for NREMT exam preparation. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

For questions about this policy, contact us at support@code3prep.com.

2. What Information We Collect

2.1 Information You Provide Directly

2.2 Information Collected Automatically

2.3 Information We Do NOT Collect

• Social Security numbers or government IDs
• Precise GPS location
• Medical records or patient information
• Full credit/debit card numbers (Stripe handles all payment data directly)

3. How We Use Your Information

We use the information we collect to:

• Provide the Service — operate your account, deliver quiz content, track your study progress
• Process payments — manage subscriptions and billing via Stripe
• Improve the Service — analyze usage patterns to add new features and improve content quality
• Communicate with you — send account notifications, billing alerts, and (if opted in) product updates
• Ensure security — detect and prevent fraud, abuse, or unauthorized access
• Comply with legal obligations — respond to lawful requests from authorities where required

We do not use your information for targeted advertising. We do not sell your personal data to third parties.

4. How We Share Information

We do not sell, rent, or trade your personal information. We share information only in the following limited circumstances:

Service Providers

We share data with trusted third-party vendors who help operate the Service, under contractual data protection obligations:

• Stripe, Inc. — payment processing. Subject to Stripe's Privacy Policy.
• Hosting provider (e.g., Netlify) — website and app hosting
• Email delivery provider — transactional emails (account notifications, receipts)

Legal Requirements

We may disclose your information if required to do so by law or in good faith belief that such action is necessary to comply with a legal obligation, protect our rights, prevent fraud, or protect the safety of users or the public.

Business Transfers

If Code3Prep is acquired, merged, or its assets are transferred to another company, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service before your data is transferred and becomes subject to a different privacy policy.

5. Local Storage & Device Data

Code3Prep uses your browser's localStorage to store your quiz progress, scores, and study streaks directly on your device. This data:

• Never leaves your device (it is not transmitted to our servers)
• Persists between sessions on the same browser and device
• Is cleared if you clear your browser's site data or use a different browser/device

We do not use advertising cookies or cross-site tracking cookies. We may use essential session cookies required for authentication and account functionality.

6. Third-Party Services

The Service integrates with the following third-party services. Their privacy practices are governed by their own policies:

• Google Fonts — We load fonts from Google's CDN. When fonts are loaded, your browser's IP address is sent to Google's servers. See Google's Privacy Policy.
• Stripe — Payment processing. See Stripe's Privacy Policy. Stripe may use your payment data subject to their own policies, including fraud prevention.
• Netlify — Hosting. Server logs may capture IP addresses for security and performance purposes. See Netlify's Privacy Policy.

We are not responsible for the privacy practices of these third parties. We encourage you to review their policies.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data — retained while your account is active and for up to 2 years after account deletion, as required for billing dispute resolution and legal compliance
• Payment records — retained for 7 years as required by applicable financial and tax regulations
• Support communications — retained for 3 years from the date of the communication
• Local storage data — stored on your device indefinitely until you clear it

When your account is deleted, we anonymize or delete your personal data within 90 days, except where retention is required by law.

8. Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• HTTPS/TLS encryption for all data in transit
• Password hashing (we never store plain-text passwords)
• Reliance on Stripe's PCI-DSS compliant infrastructure for all payment data
• Limited employee access to personal data on a need-to-know basis

9. Children's Privacy (COPPA)

Code3Prep is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child under 13 has provided personal information to us, please contact us at support@code3prep.com.

10. Your Rights & Choices

Depending on where you live, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your personal data (subject to legal retention requirements)
• Portability — request your data in a structured, machine-readable format
• Opt-out of marketing — unsubscribe from marketing emails at any time using the link in any email or by contacting us

To exercise any of these rights, email us at support@code3prep.com. We will respond within 30 days. We may need to verify your identity before fulfilling any request.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know — the categories and specific pieces of personal information we collect, use, disclose, and sell (we do not sell personal information)
• Right to Delete — request deletion of personal information we have collected from you
• Right to Opt-Out of Sale/Sharing — we do not sell or share personal information for cross-context behavioral advertising
• Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights
• Right to Correct — request correction of inaccurate personal information
• Right to Limit Use of Sensitive Personal Information — we do not collect sensitive personal information as defined by the CPRA

To submit a CCPA request, contact us at support@code3prep.com with "CCPA Request" in the subject line.

Categories of personal information collected in the past 12 months: Identifiers (email address), commercial information (subscription records), internet/network activity (usage data), and inferences drawn from usage data (study progress, weak topics).

We do not sell personal information to third parties and have not done so in the past 12 months.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, for active subscribers, notify you via email at least 14 days before the change takes effect.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: