Privacy Policy

This Privacy Policy explains how KPATH ARE ("KPATH," "we," "us," or "our") collects, uses, and shares information about you when you use our website, applications, and services (the "Service"). If you have questions or concerns, contact us at support@kpathare.com. If you do not agree with this policy, please discontinue use of the Service.

1. What Information Do We Collect?

In short: we collect information you provide directly, and limited technical information collected automatically.

1.1 Information you provide:

• Account information: email address, display name, and — if you sign in with Google — your Google profile name and avatar, when you create an account;
• Payment information: when you subscribe to a paid plan, payment is processed by Stripe, Inc. We do not store your full credit card number; we receive limited billing information such as the last four digits of your card, card brand, and billing status;
• Communications: information you provide when you contact us for support or feedback.

All personal information you provide must be true, complete, and accurate, and you should notify us of any changes.

1.2 Information collected automatically:

• Study activity: the exam divisions, domains, and topics you practice, the questions you answer, whether your answers are correct, your selected language, credit balance and transaction history, and timestamps of your activity. We use this to track your progress and personalize your study experience;
• Usage and device data: IP address, browser type, device type, operating system, language preferences, referring URLs, pages visited, and general usage patterns. This information is primarily needed to maintain the security and operation of the Service and for internal analytics.

2. How Do We Use Your Information?

In short: to operate the Service, process payments, personalize your study experience, and communicate with you.

We use your information to:

• Provide, maintain, and improve the Service;
• Create and manage your account and authenticate your access;
• Process subscriptions, payments, and credit usage;
• Track your study progress and personalize question selection;
• Respond to your support requests;
• Send transactional emails (e.g., account confirmations, billing notices) and, with your consent where required, marketing and product updates;
• Monitor for fraud, abuse, and violations of our Terms of Service;
• Comply with legal obligations.

3. What Are Our Legal Bases for Processing?

In short: we process your data with your consent, to perform our contract with you, to pursue legitimate interests, or to comply with the law.

Where applicable law (such as the EU/UK GDPR) requires a legal basis, we process your personal information on the following bases:

• Performance of a contract: to provide the Service you signed up for, including managing your account, delivering study content, and processing payments;
• Legitimate interests: to secure and improve the Service, prevent fraud and abuse, and perform internal analytics, where these interests are not overridden by your rights;
• Consent: for optional communications such as marketing emails. You may withdraw consent at any time;
• Legal obligations: to comply with applicable law, such as tax and accounting requirements or lawful government requests.

4. Will Your Information Be Shared with Anyone?

In short: only with service providers that help us operate the Service, when required by law, or in a business transfer. We do not sell your personal information.

We share information only with:

• Service providers that help us operate the Service. These providers process data on our behalf under their own contractual and security obligations;
• Legal authorities, when required by law, subpoena, court order, or legal process, or to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, threats to the safety of any person, or illegal activities;
• A successor entity, in connection with, or during negotiations of, any merger, acquisition, financing, or sale of all or a portion of our business, in which case we will notify you before your information becomes subject to a different privacy policy.

Our current service providers:

Provider	Purpose
Supabase	Authentication, database, and backend hosting for your account and practice data.
Anthropic (Claude API)	Generates practice questions and explanations in real time. Your prompts (question topics, not your personal identity) are sent to Anthropic to generate this content.
Google	Optional "Sign in with Google" authentication.
Stripe	Payment processing for paid subscriptions.
Vercel	Hosts the KPATH ARE website.

5. Do We Use Cookies?

In short: yes, essential cookies and local storage to keep you logged in and operate the Service.

We use essential cookies, browser local storage, and similar technologies to keep you signed in and operate core features of the Service — such as remembering your interface language and quiz settings. You can control cookies through your browser settings; most browsers accept cookies by default and allow you to remove or reject them. Disabling essential cookies may prevent the Service from functioning properly.

6. Do-Not-Track Signals

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature you can activate to signal your preference not to have your online browsing activities tracked. No uniform technology standard for recognizing and implementing DNT signals has been finalized, and we do not currently respond to DNT browser signals. If a standard we must follow is adopted in the future, we will describe our practice in a revised version of this policy.

7. How Long Do We Keep Your Information?

In short: for as long as your account is active, plus any period required by law.

We retain your account information and study history for as long as your account is active. Question history is additionally capped at your most recent 500 questions (100 for starred questions) per our product design — older entries are automatically pruned. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where retention is required for legal, tax, accounting, or fraud-prevention purposes. Where deletion from backup archives is not immediately possible, we will securely store and isolate the information from further processing until deletion is possible. Payment records are retained as required by law.

8. How Do We Protect Your Information?

In short: industry-standard technical measures, though no system is perfectly secure.

We use industry-standard measures to protect your information, including encrypted connections (HTTPS), hashed passwords, and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights and Choices

In short: you can access, correct, or delete your data, and opt out of marketing at any time.

Depending on where you live, you may have the right to:

• Access a copy of the personal information we hold about you;
• Correct inaccurate information;
• Delete your personal information;
• Object to or restrict certain processing;
• Withdraw consent where processing is based on consent.

Account information: you can review and update your account information at any time in your account settings, or request account deletion by contacting us. After deletion, we may retain limited information to prevent fraud, troubleshoot problems, enforce our Terms of Service, and comply with legal requirements.

Marketing emails: you can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting us. You will continue to receive essential service-related emails (such as billing notices) necessary for the administration of your account.

EEA/UK/Switzerland residents: if you believe we are unlawfully processing your personal information, you have the right to lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us at support@kpathare.com. We will respond within the timeframe required by applicable law.

10. California Privacy Rights

In short: California residents have additional rights under the CCPA/CPRA and "Shine the Light" law.

CCPA/CPRA: if you are a California resident, you have the right to know what personal information we collect, request deletion or correction, and not be discriminated against for exercising your rights. We do not sell or share personal information as defined by the CCPA/CPRA.

"Shine the Light" (Civil Code § 1798.83): California residents may request, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

To make a request, contact us at support@kpathare.com.

11. International Users

In short: your data is processed in the United States.

The Service is operated from the United States, and our service providers store data in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S., where data protection laws may differ from those in your jurisdiction. We take measures to protect your personal information in accordance with this policy and applicable law.

12. Children's Privacy

In short: the Service is for adults only.

The Service is intended for adults preparing for a professional licensing examination. It is not directed to children under 18, and we do not knowingly collect personal information from children. If we learn that we have collected personal information from a user under 18, we will deactivate the account and promptly delete the data. If you believe a child has provided us personal information, contact us at support@kpathare.com.

13. Changes to This Policy

In short: we'll notify you of material changes.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect. The "Last updated" date at the top indicates when this policy was last revised.

14. Contact Us

Questions about this Privacy Policy or our data practices? Contact us at:

Kpath
support@kpathare.com