1. Information We Collect

When you create an account, we collect:

• Name and email address
• Username
• Date of birth
• City and state
• Target exam date (optional)
• Password (stored securely as a hash, never in plain text)

As you use the app, we also collect:

• Quiz answers and progress
• Bookmarked questions and flashcards
• Study session history
• XP and level progression

2. How We Use Your Information

We use your information to:

• Create and manage your account
• Track your study progress and personalize your experience
• Send email verification and password reset emails
• Send newsletter communications (if you opted in)
• Improve the app and study materials

3. Third-Party Services

We use the following third-party services to operate SparkyPass:

• Resend — for sending transactional emails (verification, password reset, newsletter)
• Google, Facebook, Apple — for optional OAuth sign-in (we receive your name and email from these providers)
• Turso — for secure database hosting
• Vercel — for application hosting
• Sentry — for error and crash reporting to identify and fix bugs

We use first-party analytics to understand how features are used and to improve the platform. This data is stored in our own database and is never shared with third-party analytics or advertising services. We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Cookies

SparkyPass uses only essential cookies required for the app to function:

• Session cookie — keeps you logged in
• CSRF token — protects against cross-site request forgery

We do not use any tracking cookies, advertising cookies, or third-party cookies.

5. Data Retention

We retain your account data and study progress for as long as your account is active. If you wish to delete your account and all associated data, please contact us and we will process your request within 30 days.

6. Children's Privacy

SparkyPass is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a user under 18, we will delete that information promptly.

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and data
• Opt out of newsletter communications at any time

8. Security

We take reasonable measures to protect your information, including password hashing, encrypted connections (HTTPS), and secure database access. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or an in-app notice. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at noreply@sparkypass.com.