Privacy Policy
Plain-language summary followed by the formal terms. Last updated: May 27, 2026.
What we collect
Account details (name, email, mobile), payment metadata (provider transaction IDs — not card numbers), practice activity (attempts, scores, time on task), and minimal device/browser metadata required for security and analytics.
Why we collect it
To deliver the service, calculate your readiness, secure your account, process payments, and improve item quality over time.
How long we keep it
Account data while your account is active and for a reasonable retention window after closure. Practice attempts follow our SCD-Type-2 policy: only your current and previous attempt snapshots are kept; older snapshots are archived.
Who we share with
Payment processors, infrastructure providers, and analytics providers under data processing agreements. We do not sell your data and do not share practice content with marketing networks.
Your rights
You can request access, correction, export, or deletion of your data at any time by emailing privacy@certready.io. We respond within statutory timelines.
Security
Encryption in transit and at rest, principle of least privilege, audit logging on administrative actions, and regular review of access. No system is perfectly secure; we will notify affected users in case of a material breach.