Privacy Policy

• Account: your email address, and your name and photo if you sign in with Google. You can set a display name, avatar and short bio.
• Study settings: exam date, goal, experience level, time zone, and your exam result if you choose to log it.
• Study activity: your answers, scores, flashcard reviews, mock exams, session notes, mastery per exam task, streaks, XP and badges.
• AI features: what you type or say to the AI coach and in Explain This, the replies, and short notes the coach keeps about how you study.
• Voice: when you use the microphone, the recording is sent for transcription and then discarded; we keep the text.
• Community: posts, replies, reactions, images you upload and reports you file.
• Credentials: the badge link or credential ID you submit if you ask us to verify a passed exam.
• Payments: your plan, and the IDs Stripe gives us for your purchase. We never see or store your card number.
• Technical: cookies and browser storage described below, basic logs from our hosting provider (such as IP address and browser type), and a count of AI usage per account to apply fair-use limits.

• To run the service: sign you in, save your progress across devices, and compute your mastery and readiness scores.
• To personalize study: the Daily Session, the Mistake Journal and the AI coach use your history to choose what you practice next.
• To keep the community safe: posts are checked automatically for spam and abuse, and moderators review reports.
• To process payments and apply your plan.
• To understand and improve the product: which pages are visited, where visitors come from and where they drop off, measured without advertising cookies.
• To contact you about your account, such as sign-in codes. We do not send marketing email without your consent.

We do not sell your personal information, and we do not use it for advertising.

When you use the AI coach, Explain This grading, generated scenarios or session summaries, the text needed for that request is sent to Anthropic, which runs the Claude models that write the reply. Under Anthropic's commercial terms, that content is not used to train its models.

Voice input is transcribed by OpenAI. Under OpenAI's API terms, that audio is not used to train its models by default.

AI replies can be wrong. They are study aids, not official answers about the exam.

These providers process data for us, only to provide their service:

• Supabase: database, sign-in, file storage and live updates.
• Vercel: hosting, and cookie-free page-view statistics.
• PostHog: cookie-free product analytics (pages visited, referrers, funnels).
• Anthropic: AI replies and grading.
• OpenAI: voice transcription.
• Stripe: payments.
• Resend: sign-in emails.
• Google: sign-in, if you choose Sign in with Google.

We may also disclose information if the law requires it, to protect the safety of people or the service, or as part of a merger or sale of the business, in which case this policy continues to apply.

• Community: your display name, avatar, bio, posts, replies and reactions are public, including to visitors who are not signed in.
• Leagues and leaderboards: other signed-in learners see your display name, avatar and level, unless you turn on anonymous mode, which shows a handle instead.
• Shared badges: when you share a badge, anyone with the link sees your display name, the badge and the date you earned it.

Your answers, scores, AI conversations, exam date and payment details are never shown to other learners.

We use only what the service needs. There are no advertising or cross-site tracking cookies, so we do not show a cookie banner.

• Sign-in cookies from Supabase keep you signed in.
• A first-party ID cookie (cca_uid) applies fair-use limits on AI features. It lasts one year.
• Browser storage keeps your theme, a copy of your progress for offline use and fast loading, your place in a session, and notification settings.
• Analytics run without cookies.

We keep your account and study history while your account is open. When you ask us to delete your account, we delete your personal data within 30 days. Records we must keep for tax or legal reasons, such as payment records, are kept as long as the law requires. Anonymous usage statistics may be kept after deletion because they no longer identify you.

You can ask us to access, correct, export or delete your personal data by emailing apollo@novalinqsai.com from the address on your account. We reply within 30 days. Depending on where you live, including the EU, the UK and US states such as California, you may have further rights, such as objecting to certain processing or complaining to a data protection authority. We honor these requests wherever you live.

You can edit your display name, avatar, bio and exam details in Settings, delete your community posts, and turn on anonymous mode for leagues at any time.

Data travels over encrypted connections, access to it is limited by database rules so each account sees only its own data, and secret keys are never sent to the browser. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

We are based in the United States, and our providers may process data in the United States and other countries. When data leaves your country, we rely on our providers' standard safeguards, such as the EU Standard Contractual Clauses.

CCA Prep Studio is for adults preparing for a professional certification. It is not directed to anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

If we change this policy, we will update the date at the top. If the change is significant, we will tell signed-in learners in the app or by email before it takes effect.

NovaLinQs AI, LLC, Miami, Florida, USA. Email apollo@novalinqsai.com.