Privacy Policy

1. Information we collect

Account information: your email address and authentication identifiers when you sign up with email/password or Google.

Study data: your per-card progress, ratings, and review schedule, which we use to power spaced repetition and your dashboard.

Billing information: when you subscribe, our payment processor (Stripe) collects and processes your payment details. We do not store full card numbers; we receive limited data such as subscription status and the last four digits.

Usage and device data: basic, privacy-respecting analytics about how the Service is used, to improve it.

Analytics and session replay: we use analytics tools (Vercel Analytics, PostHog) to understand how visitors use the site, including session replays of page interactions such as scrolling and navigation. Replays from visitors who aren't signed in are pseudonymous; if you're signed in, replays and analytics may be associated with your account. Session replays mask everything you type — passwords, emails, and other input contents are never recorded. Campaign parameters (such as utm_source) from the link you arrived through may be associated with your visit and, if you create an account, with it.

Daily-question email (optional): if you subscribe to the daily question email, we store your address and send you one question each morning after you confirm via a double opt-in link. Every email includes a one-click unsubscribe, which takes effect immediately. The 5-Day Rep Program (optional): if you separately opt in to this free five-email course, we store your address and send you one short email a day for five days after you confirm via a double opt-in link; the course then ends and no further course emails are sent. Every course email includes a one-click unsubscribe, which takes effect immediately. These two are the only recurring email lists we operate; each is always a separate, explicit choice, and unsubscribing from one never affects the other. Free-guide requests: if you request a free guide (for example, the Top 50 IB Interview Questions), we collect the email address you provide and which guide you requested, and we send that address a single transactional email containing the guide. We do not add it to a marketing list. Guide-request emails are retained until you ask us to delete them.

2. How we use information

To provide and personalize the Service (including scheduling your reviews), to process payments, to communicate with you about your account, to maintain security, and to improve the product.

We do not sell your personal information.

3. Service providers

We share data with vendors who process it on our behalf: Supabase (authentication and database), Stripe (payments), Vercel (hosting and analytics), PostHog (product analytics and session replay), Resend (transactional email), and Google (optional Google sign-in). Each processes data under its own terms and only as needed to provide its service.

4. Cookies

We use cookies that are necessary to keep you signed in and to operate the Service, plus limited analytics. You can control cookies through your browser settings; disabling necessary cookies may break sign-in.

5. Data retention

We keep your account and study data while your account is active. You can delete your account at any time by emailing hello@waccbuddy.com from the email address on the account; we then delete or anonymize your personal data within a reasonable period, except where we must retain records (for example, for tax or legal reasons).

6. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at hello@waccbuddy.com.

7. Security

We use industry-standard measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. International users & children

Your data may be processed in countries other than your own. The Service is not directed to children under 16, and we do not knowingly collect their data.

9. Changes and contact

We may update this policy; material changes will be notified through the Service or by email. Questions or requests: hello@waccbuddy.com.