Privacy Policy
Updated September 10, 2026. How we manage and secure your study data.
1. Information We Collect
PrepPilot collects only the necessary details to provide practice metrics:
- Authentication Data: We use Google OAuth to identify users. We store your email address and profile identifiers provided by Google to secure your account.
- Study Activity: We log your test submissions, choice selections, accuracy ratings, streaks, and response durations to construct performance charts.
- Spaced Flashcards: We save spacing parameters (repetitions, intervals) to schedule your card deck reviews.
2. Security & Hosting
Your data is stored securely using Supabase PostgreSQL database nodes, encrypted at rest. Authenticated sessions are managed via signed JSON Web Tokens (JWT) to verify that only you can access your statistics, test sessions, and AI summaries.
3. AI Evaluation Data
When you request AI analysis, PrepPilot sends test totals, question text, answer choices, selected and correct answers, and time spent to OpenRouter and the NVIDIA Nemotron provider. Flashcard generation uses Google Gemini and sends the topics and number of cards needed to Google. We do not include your name, email address, or account identifier in these prompts. The free NVIDIA endpoint may log prompts and responses for security and service improvement.
4. Cookies & Local Storage
We utilize browser cookies and session storage solely to maintain your authentication state and cache UI preferences (such as dark mode and Focus Mode toggles). We do not run third-party tracking scripts or advertising cookies.