DHPrep

Privacy Policy

Last updated: September 29, 2026

This is a plain-language summary of how DHPrep handles personal information. If you need detail beyond this page, email us — we would rather explain than surprise you.

1. What we collect

  • Account information: your email address and an encrypted password (handled by our authentication provider — we never see your raw password).
  • Practice data: the questions you answer, your results, bookmarks, private notes, and progress — used to run the product (for example, your review queue and progress page).
  • Billing information: if you buy a pass, payments are processed by Stripe. We receive confirmation and receipt details; we do not store your card number.
  • Basic technical data: essential cookies that keep you signed in, standard server logs used to operate and secure the service, and privacy-respecting first-party usage counts (pages viewed and errors) that help us keep the service working. These counts are aggregate: they set no cookies, identify no one, and build no advertising profiles.

2. What we don't collect

  • No clinical or health records about you or anyone else.
  • No selling of personal information to anyone, ever.
  • No advertising trackers from third-party ad networks.

3. Who processes data for us

We use a small set of established providers so the service can exist: Supabase (database and authentication), Netlify (web hosting), Stripe (payments), and our email provider for account emails and support replies. Each processes only what its role requires.

4. How long we keep it

Account and practice data are kept while your account is open. If you ask us to delete your account, we delete your account and associated practice data; limited billing or transactional records may be retained where needed for accounting and legal obligations.

5. Your choices

  • Access and correction: your practice data is visible in the app; for anything else, email us.
  • Deletion: delete your account content at any time from your profile, or email us to request full deletion.
  • Account emails: we send service emails (for example, account and billing notices). Notification preferences are managed in your profile.

6. Security

Data is transmitted over HTTPS and protected by access controls, including row-level security that keeps each learner's records private to their own account. No system is perfect; if we ever experience a breach affecting your information, we will tell you.

7. Cookies

We use only essential cookies: they keep you signed in and secure your session. We do not use advertising cookies, cross-site tracking cookies, or third-party ad networks — so there is no consent banner to click. Our aggregate usage counts are cookie-less by design. If our use of cookies ever changes, this page will say so first.

8. Contact

Privacy questions or requests: email support@dhprep.com or use the contact page. See also our Terms of Service.