Privacy policy

1. Introduction

Zuprep ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and the choices you have. It applies to all users of the Zuprep website and application (the "Service").

By using the Service, you agree to the collection and use of information described in this policy. If you do not agree, please do not use the Service.

2. Information we collect

We collect information in the following ways:

• Account information — your name, email address, and password when you register.
• Content you provide — study materials, notes, prompts, and other inputs you submit to the Service.
• Payment information — billing details processed securely by our third-party payment provider. We do not store full card numbers.
• Usage data — pages visited, features used, session duration, and interaction events.
• Device and log data — IP address, browser type, operating system, and crash reports.
• Referral data — your referral link usage and the accounts attributed to your referrals.
• Communications — messages you send us, including support requests and feedback.

3. How we use your information

We use the information we collect to:

• Provide, operate, and improve the Service.
• Personalise your learning experience and generate study materials.
• Process payments and manage your subscription.
• Send transactional emails such as receipts, password resets, and account alerts.
• Send product updates and promotional communications (you can opt out at any time).
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.
• Analyse usage trends to improve product quality and reliability.

4. AI and your content

Content you submit to generate flashcards, quizzes, or other study materials is processed by AI models to deliver the Service. We do not use your personal study content to train AI models without your explicit, separate consent.

Aggregated, de-identified usage signals — such as which types of prompts produce useful outputs — may be used to improve Service quality. These signals cannot be traced back to individual users.

5. Sharing your information

We do not sell your personal information. We may share it only in the following circumstances:

• Service providers — trusted third parties who help us operate the Service (e.g., payment processors, hosting providers, analytics tools), bound by confidentiality agreements.
• Legal requirements — when required by law, court order, or to protect the rights and safety of Zuprep, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice provided to affected users.
• With your consent — for any other purpose you have explicitly agreed to.

6. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings, though disabling them may affect Service functionality.

We use analytics tools to collect aggregated usage data. These tools may set their own cookies subject to their own privacy policies. We do not use advertising networks or cross-site tracking for ad targeting.

7. Data retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal data within 90 days, except where retention is required by law or legitimate business purposes (such as resolving disputes or fraud prevention).

Backups may retain data for a further period before being purged on a rolling schedule.

8. Your rights and choices

Depending on your location, you may have the right to access, correct, delete, or export your personal data, or to restrict or object to certain processing. To exercise these rights, contact us at legal@zuprep.com. We will respond within 30 days.

You may also update your account details and notification preferences at any time from your account settings, and unsubscribe from marketing emails via the link in any such email.

9. Children's privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Users between 13 and 18 must have a parent or guardian's consent, as described in our Terms of Service.

10. Data security

We use industry-standard measures to protect your personal information, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

In the event of a data breach that affects your rights, we will notify you and relevant authorities as required by applicable law.

11. International data transfers

Zuprep is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States or other countries where our service providers operate. We take steps to ensure such transfers comply with applicable data protection laws.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice in the Service at least 7 days before they take effect. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.

13. Contact

Questions or concerns about this Privacy Policy should be directed to legal@zuprep.com.