Privacy Policy

What we collect

• Account details: name, email address, and account role (student, parent, or admin).
• For students: year level, and practice activity — questions attempted, answers, accuracy, time taken, XP and streaks.
• For parents: the invite code used to link to a student's account, and read-only access to that student's progress.
• Standard technical data collected by our hosting provider (Vercel) and database provider (Supabase), such as IP address and request logs, for security and reliability.

Why we collect it

Solely to run the product: authenticate accounts, personalise practice content to year level, track progress and streaks, power the leaderboard, and let a linked parent see their child's accuracy by topic. We do not sell personal data, and we do not use it for advertising.

Children's accounts

PrepNest is designed for use by school-age students. Where a student is a child, we rely on a parent or guardian to review this policy and to use the parent-linking feature to oversee their child's account. We collect the minimum information needed to run the practice and progress-tracking features described above.

Who can see your data

• You can always see and manage your own account data.
• A parent can see a linked student's progress once that student redeems the parent's invite code — never the reverse, and never before linking.
• The leaderboard shows a student's first name, last initial, year level, and weekly XP to other signed-in users. It never shows accuracy, answers, or email address.
• Admins can manage the question bank but do not see individual student answers as part of normal operation.

Where it's stored

Data is stored with Supabase (PostgreSQL, hosted in Australia where available) and the app is hosted on Vercel. Both are reputable infrastructure providers used widely by production applications; access is protected by database-level row security so that, for example, one student can never read another student's answers.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete your account and associated data at any time by contacting us (see below). We'll action deletion requests within a reasonable time, except where we're required to retain something by law.

Contact

Questions about this policy or your data: privacy@prepnest.com.au.