Privacy Policy

We collect:

• Account data — your email address, and your name if you sign in with Google.
• Usage data — your practice attempts, mock-exam results and progress, so we can show your stats and readiness.
• Billing data — your subscription status and a Stripe customer reference. We do not store your card details; all payments are handled by Stripe.
• Technical data — basic logs needed to operate and secure the Service.

To provide and personalise the Service, track your progress, process subscriptions, communicate with you about your account, and keep the Service secure and working.

We share data only with service providers that help us run RESPrep:

• Stripe — payment processing and billing.
• Supabase — database hosting (Singapore region).
• Vercel — application hosting.
• Google — optional "Sign in with Google", and Google Ads conversion measurement (see Cookies).

We do not sell your personal data.

We use a secure, essential cookie to keep you logged in. We also set first-party cookies for 60 days that remember a referral code and how you first found RESPrep (a campaign tag, or the website that linked you here, such as a search engine) and the first page you opened, so we can see which channels bring sign-ups. They hold no query strings and no IP address.

We also use the Google tag (gtag.js) for Google Ads conversion measurement. It sets advertising and measurement cookies, such as _gcl_au, that tell us whether a visit that came from one of our ads led to a sign-up or a purchase. You can block or delete these cookies in your browser settings, and manage ad personalisation in your Google settings at adssettings.google.com.

We keep your data while your account is active. If you delete your account, we delete or anonymise your personal data, except where we must retain limited records (e.g. payment records) to meet legal obligations.

Under the PDPA you may request access to, or correction of, your personal data, and may withdraw consent or ask us to delete your account. Contact us using the details below.

We use industry-standard measures (encryption in transit, hashed passwords, access controls). No system is perfectly secure, but we work to protect your data.

Privacy questions or requests: reach us through our feedback form.