Privacy Policy

This policy describes how PrepNars handles personal information. It is a practical summary of what the product actually stores and sends — not legal advice.

Who we are

PrepNars is a study app for organising materials, practice questions, and spaced repetition. Questions about this policy: email [email protected].

Account data

When you create an account we store:

• Email address (unique login identifier)
• Name (from sign-up or from Google / Apple)
• An optional password hash — omitted if you only sign in with Google or Apple
• Role and whether the account is active

Google and Apple sign-in

If you use Continue with Google or Continue with Apple, we request only openid, email, and profile. We receive your name and email from that provider. We do not request Drive, Gmail, Calendar, or other sensitive scopes.

Apple Hide My Email addresses look like [email protected]. That relay address is your login email. Password-reset and reminder mail are sent there if you use those features.

Study data

Content you create or upload is stored so the app can show it back to you:

• Materials, notes, questions, test attempts, and spaced-repetition cards
• PDF files in Cloudflare R2 object storage
• Dictionary search history (recent lookups on your account)

Sessions and device data

Signed-in sessions use an HTTP cookie. We may store IP address and user agent on the session record for security. You stay signed in until the session expires or you sign out.

Email

Transactional mail is sent through Resend. We send password-reset links and, if you leave the option on, daily spaced-repetition reminders. You can turn reminder and announcement mail off under Profile → Notification settings. We do not use open or click tracking on those messages.

Other processors

• Railway — hosts the web app and database
• Cloudflare R2 — stores uploaded PDFs
• OpenRouter — optional AI formatting and question generation from content you submit
• Resend — delivers the emails above
• Google / Apple — only if you choose that sign-in button

What we do not do

We do not sell your personal information. We do not use sign-in providers for advertising audiences.

Retention and deletion

We keep account and study data while the account exists. In-app account deletion is not available yet. To request deletion, email [email protected] from the address on the account. We will remove the account and associated study data by hand.

Your choices

• Update notification preferences on your profile
• Change your password if you signed up with email
• Request access or deletion via the support address above

Changes

We will update the date at the top of this page when the policy changes. Continued use of PrepNars after a change means you accept the updated policy.