Privacy Policy

What we collect

• Account details: name, email address, and account role (student, parent, or admin).
• For students: year level, and practice activity — questions attempted, answers, accuracy, time taken, XP and streaks.
• For parents: the invite code used to link to a student's account, and read-only access to that student's progress.
• For diagnostic tests saved to an account: the answers given, how long each question took, whether an answer was changed or marked as a guess, the child's first name if you chose to give one, and, for practice papers built from a result, the answers given on screen and any marks entered. Before a result is saved, it is kept only in your browser.
• For purchases: which plan or paper you purchased, when, and Stripe's reference for the payment. Card details go to Stripe, never to us.
• Standard technical data collected by our hosting provider (Vercel) and database provider (Supabase), such as IP address and request logs, for security and reliability.
• Anonymous usage statistics (Vercel Web Analytics): which pages are visited and roughly where from. It uses no cookies and does not identify you.
• The advertising campaign you first arrived from, if any (for example a link from one of our Instagram ads), kept in a first-party cookie for 90 days and recorded with a purchase.
• Errors that happen in your browser while using the site (the error message, the page and the browser type), so we can fix them.

Why we collect it

Solely to run the product: authenticate accounts, personalise practice content to year level, track progress and streaks, power the leaderboard, and let a linked parent see their child's accuracy by topic. We do not sell personal data, and we never use a child's information, answers or results for advertising.

Advertising cookies

We advertise on Meta (Facebook and Instagram) and TikTok. If you choose Allow on our cookie notice, their tracking pixels load on this site so we can see which ads bring parents to PrepNest. They record that something happened (a page was visited, the free test was started or finished, a parent or teacher account was created, a checkout started or a purchase was made), never what a child answered or scored, and a student's sign-up is never reported. For a purchase, we also send Meta the purchase amount with the account's email address in hashed (scrambled) form so it can match the purchase to the ad. Meta and TikTok handle this under their own privacy policies. If you choose No thanks, none of this loads or is sent. To change your mind, clear this site's cookies in your browser and the notice will appear again.

Payments

Payments are processed by Stripe, which receives your card details and email address to take the payment and send your receipt, under Stripe's privacy policy. We keep a record of the purchase so the papers stay unlocked on your account.

Children's accounts

PrepNest is designed for use by school-age students. Where a student is a child, we rely on a parent or guardian to review this policy and to use the parent-linking feature to oversee their child's account. We collect the minimum information needed to run the practice and progress-tracking features described above.

Who can see your data

• You can always see and manage your own account data.
• A parent can see a linked student's progress once that student redeems the parent's invite code — never the reverse, and never before linking.
• The leaderboard shows a student's first name, last initial, year level, and weekly XP to other signed-in users. It never shows accuracy, answers, or email address.
• Admins can manage the question bank but do not see individual student answers as part of normal operation.

Where it's stored

Data is stored with Supabase (PostgreSQL, hosted in Australia where available) and the app is hosted on Vercel. Both are reputable infrastructure providers used widely by production applications; access is protected by database-level row security so that, for example, one student can never read another student's answers.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete your account and associated data at any time by contacting us (see below). We'll action deletion requests within a reasonable time, except where we're required to retain something by law.

Contact

Questions about this policy or your data: support@prepnest.com.au.