Privacy Policy

Last updated: 2026-04-25

What we collect

• Account info: email, hashed password (or Google OAuth identity), and your chosen exam date.
• Study data: mock attempts, answers, chat messages, flashcard reviews, and computed progress. Stored to power adaptive recommendations.
• Usage events: page views and product events (e.g. mock_started) used to improve the app. Pseudonymous user IDs only.
• Payment: Our payment partner (currently Dodo Payments) handles all card / UPI / netbanking data. We never see your card number. We store an opaque customer ID issued by the processor, the processor name, and your plan status.

Third parties

• Supabase — hosts our database and authentication.
• Anthropic (Claude) and OpenAI (ChatGPT) — receive the contents of your chat messages and the context of the question you’re asking about, in order to generate replies. We do not send your email or any personal identifier in the LLM context.
• Dodo Payments — payment processing (cards, UPI, netbanking).
• PostHog — product analytics (page views, event counts).
• Sentry — error reporting (stack traces, no message bodies).
• Resend — transactional email (receipts, exam-date reminders).

Your rights

Sign in and visit /account to permanently delete your account and all associated study data. Payment processor records remain on file (legally required for invoices) but no further charges occur.

Security

Data in transit is encrypted with HTTPS. Data at rest is encrypted by Supabase’s managed Postgres. We do not store your card information; our payment processor handles PCI scope.

Children

CertCoach is intended for adults preparing for a professional certification. We do not knowingly collect data from children under 16.

Contact

Questions? Email hello@certcoach.in.