How SecondPass handles your information

This Privacy Policy applies to the SecondPass website, application, and related services. SecondPass is a study tool that helps students log missed questions, review weak areas, and track progress over time.

By using SecondPass, you agree to the collection and use of information described in this Privacy Policy.

We collect information you provide directly to us, including:

• Account details such as your email address, password-authenticated account identifiers, and profile information you choose to add.
• Study information such as study plans, exam dates, question IDs, notes, self-assessments, review history, tags, and analytics derived from that data.
• Support communications, feedback, or messages you send to us.

We also collect limited technical and billing-related information, including:

• Device, browser, IP, and session information needed to secure and operate the service.
• Usage events needed to keep the app functioning, troubleshoot issues, and understand feature usage.
• Subscription and payment metadata from Stripe, such as customer ID, subscription status, plan, and billing timestamps. We do not store full payment card numbers on our servers.

We use the information we collect to:

• Create and secure your account.
• Provide core features such as question logging, review scheduling, analytics, trial access, and billing management.
• Send transactional emails, such as account verification, password reset, and billing-related notices.
• Maintain, debug, monitor, and improve the service.
• Detect abuse, enforce our Terms, and comply with legal obligations.

We do not sell your personal information.

We may share information with service providers that help us operate SecondPass, such as:

• Supabase for authentication and database infrastructure.
• Vercel for application hosting and delivery.
• Stripe for subscription billing and customer portal services.
• Email, analytics, and support vendors if we add them to operate the product.

We may also disclose information if required by law, to protect users and the service, or as part of a merger, acquisition, or asset transfer.

We keep your account and study data for as long as your account remains active or as needed to provide the service, resolve disputes, enforce agreements, and comply with legal requirements.

If you request deletion of your account, we will delete or anonymize your personal information unless we need to keep certain records for security, fraud prevention, accounting, or legal compliance.

• You can update profile information inside your account settings.
• You can export your study data from the settings area.
• You can manage paid subscriptions through the Stripe billing portal when applicable.
• You can contact support@secondpass.io to request account deletion or ask privacy questions.

We use commercially reasonable safeguards designed to protect your information, including secure authentication, encrypted network transport, and managed infrastructure providers. No system is completely secure, and we cannot guarantee absolute security.

SecondPass is intended for students and adult learners and is not directed to children under 13. If you believe a child has provided personal information to SecondPass, contact us and we will take appropriate action.

We may update this Privacy Policy from time to time. If we make material changes, we will update the date at the top of this page and may provide additional notice in the app or by email.

For privacy questions or requests, contact support@secondpass.io.