How SecondPass handles your information

This Privacy Policy applies to the SecondPass website, application, and related services. SecondPass is a study tool that helps students log missed questions, review weak areas, and track progress over time.

By using SecondPass, you agree to the collection and use of information described in this Privacy Policy.

We collect information you provide directly to us, including:

• Account details such as your email address, password-authenticated account identifiers, and profile information you choose to add.
• Study information such as study plans, exam dates, question IDs, notes, self-assessments, review history, tags, and analytics derived from that data.
• Support communications, feedback, or messages you send to us.

We also collect limited technical and billing-related information, including:

• Device, browser, IP, and session information needed to secure and operate the service.
• Usage events needed to keep the app functioning, troubleshoot issues, and understand feature usage.
• Subscription and payment metadata from Stripe, such as customer ID, subscription status, plan, and billing timestamps. We do not store full payment card numbers on our servers.

We use the information we collect to:

• Create and secure your account.
• Provide core features such as question logging, review scheduling, analytics, trial access, and billing management.
• Send transactional emails, such as account verification, password reset, and billing-related notices.
• Maintain, debug, monitor, and improve the service.
• Detect abuse, enforce our Terms, and comply with legal obligations.

We do not sell your personal information.

We may share information with service providers that help us operate SecondPass, such as:

• Supabase for authentication and database infrastructure.
• Vercel for application hosting and delivery.
• Stripe for subscription billing and customer portal services.
• Email, analytics, and support vendors if we add them to operate the product.

We may also disclose information if required by law, to protect users and the service, or as part of a merger, acquisition, or asset transfer.

We keep your account and study data for as long as your account remains active or as needed to provide the service, resolve disputes, enforce agreements, and comply with legal requirements.

If you request deletion of your account, we will delete or anonymize your personal information unless we need to keep certain records for security, fraud prevention, accounting, or legal compliance.

• You can update profile information inside your account settings.
• You can export your study data from the settings area.
• You can manage paid subscriptions through the Stripe billing portal when applicable.
• You can contact support@secondpass.io to request account deletion or ask privacy questions.

We use two categories of cookies:

• Essential cookies keep you signed in, protect your session and forms against abuse, support billing, and remember your cookie choice. The service does not work without them, so they are always active.
• Analytics cookies power Vercel Analytics, which tells us which pages and features get used. Query strings are stripped before events are recorded, and no question IDs, notes, or other study content are sent. These are only set if you accept them.

When you first visit SecondPass we ask you to choose. Analytics stays off unless you select “Accept all” or enable it in the preferences panel, and you can change your choice at any time using the “Cookie preferences” link in the site footer. We do not use cookies for advertising and we do not sell your information.

We use commercially reasonable safeguards designed to protect your information, including secure authentication, encrypted network transport, and managed infrastructure providers. No system is completely secure, and we cannot guarantee absolute security.

SecondPass is intended for students and adult learners and is not directed to children under 13. If you believe a child has provided personal information to SecondPass, contact us and we will take appropriate action.

We may update this Privacy Policy from time to time. If we make material changes, we will update the date at the top of this page and may provide additional notice in the app or by email.

For privacy questions or requests, contact support@secondpass.io.