Privacy Policy

Account information — When you create an account, we collect your email address and a unique user identifier through our authentication provider, Clerk. You may optionally provide your name. We do not collect your Social Security number, immigration case number, or any information about your immigration status.

Study data — We store your study progress: which questions you have practiced, your correct/incorrect history, your streak count, and spaced-repetition scheduling data. This data is used exclusively to personalize your study experience.

State or territory selection — If you tell us your state of residence, we use it to customize answers to dynamic questions (e.g., your current governor or senators). This information is stored in our database.

Payment information — If you purchase a subscription, payment is processed by Stripe. We never see or store your full card number. Stripe may store tokenized payment information according to its own privacy policy.

Usage data — We collect information about how you use the app, including which features you use and error logs, to improve the Service. This data is associated with your account but is used for operational purposes only.

AI interactions — When you use answer grading, hints, or language translation features, your answers and questions are sent to our AI providers (Anthropic and OpenAI) for processing. We cache grading results to reduce unnecessary data transmission. These providers process data under their own privacy policies and data processing agreements.

• To provide, maintain, and improve the Service
• To personalize your study experience using spaced-repetition scheduling
• To process payments and manage your subscription
• To send you account-related notifications (subscription updates, security alerts)
• To enforce our Terms of Service and prevent abuse
• To comply with legal obligations

We do not sell your personal information. We do not share your data with USCIS, immigration authorities, employers, or any government entity. We do not use your data for advertising or marketing profiling.

We share data with the following processors only to the extent necessary to operate the Service:

• Clerk — Authentication and user identity management
• Neon — Database hosting (PostgreSQL)
• Vercel — Application hosting and edge delivery
• Stripe — Payment processing and subscription management
• Anthropic — AI-powered answer grading and hints
• OpenAI — Text-to-speech for voice interview mode

Each of these providers is bound by data processing agreements and their own privacy policies. We select providers that maintain strong security standards.

We retain your account and study data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., billing records for up to 7 years).

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your personal data ("right to be forgotten")
• Portability — request your data in a portable format
• Objection — object to certain processing of your data
• Opt-out of sale — we do not sell data, so this right is satisfied by default

To exercise any of these rights, email us at privacy@getredy.ai. We will respond within 30 days. You may also delete your account directly from your account settings, which will initiate data deletion.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to non-discrimination for exercising your privacy rights. We do not sell personal information, so the right to opt out of sale does not apply. To submit a CCPA request, email privacy@getredy.ai with "CCPA Request" in the subject line.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR). Our legal basis for processing your data is: (a) performance of our contract with you (providing the Service); (b) our legitimate interests (security, fraud prevention, service improvement); and (c) your consent where required.

Data we collect is processed in the United States. By using the Service, you acknowledge that your data will be transferred to and processed in the US. We implement appropriate safeguards for such transfers. You have the right to lodge a complaint with your local data protection authority.

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at privacy@getredy.ai and we will delete it promptly.

We implement industry-standard technical and organizational security measures to protect your data, including encrypted database connections, HTTPS-only access, authentication via Clerk, and strict access controls. No method of transmission over the internet is 100% secure — we cannot guarantee absolute security, but we take reasonable precautions and will notify you of any breach as required by applicable law.

We use browser local storage to save your study preferences and progress client-side. We use session cookies for authentication (managed by Clerk). We do not use third-party advertising cookies or behavioral tracking cookies.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy with an updated effective date and, where appropriate, by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

For privacy questions, data requests, or concerns, contact our privacy team at: privacy@getredy.ai