Certification Practice

This privacy policy ("Privacy Policy") describes the privacy practices of Certification Practice, a digital certification practice exam platform with AI explanation and study tools (collectively referred to as "Certification Practice," "we," "us," or "our"). This Privacy Policy explains how we handle personal information that we collect through our website, applications, digital certification practice platform, study tools, AI explanation features, and through other interactions and correspondence with you (collectively, the "Services"). If you are located in the European Economic Area ("EEA") or the United Kingdom ("UK"), "personal information" means any information relating to an identified or identifiable individual. By using our Services, you agree to this Privacy Policy and accept the collection, use, disclosure, and procedures described herein. If you do not agree to this Privacy Policy, you should not access or use our Services. Beyond the Privacy Policy, your use of our Services is also subject to our Terms of Use.

Personal information we collect

We may collect a variety of personal information from or about you or your devices from various sources, as described below.

If you do not provide your personal information when requested, you may not be able to use our Services if that personal information is necessary to provide you with our Services or if we are legally required to collect it.

Information you provide to us:

• Contact details, such as your first and last name, email address, and mailing address.
• Authentication credentials that let you access your account and information (for example, one-time verification codes or credentials managed by identity providers).
• Purchase information, such as the product(s) or bundle(s) you buy, pricing, and related order metadata.
• Study and exam preferences, including selected certification tracks, exam selections, and configuration choices (e.g., timing and study settings).
• AI explanation inputs, such as text and context we use to generate "Explain More with AI" outputs during your studies.
• User-Generated Content, including:
  • Answer selections, comments, and question improvement suggestions
  • Free‑form messages you send to support
  • Any other study materials or inputs you submit through the platform
• Communications that we exchange with you, including when you contact us via our website, applications, or support channels with questions, feedback, or otherwise.
• Payment information required by our payment processor, Stripe, Inc., needed to complete your transactions to use our Services, including name, payment card information, and billing information. We do not store payment card numbers.
• Marketing information, such as your preferences for receiving our marketing communications, and details about your engagement with those communications.
• Service Usage Data, including:
  • Exam attempt history and progress
  • Answer selections and scoring outcomes
  • Use of the "Explain More with AI" feature
  • Study plan interactions and feature usage patterns
  • Platform interaction data, including navigation within practice exams
• Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Automatic data collection

We and our service providers may automatically log information about you, your computer or mobile device, and your interaction over time with our Services, our communications and other online services, such as:

• Device data, such as your computer's or mobile device's operating system type and version, browser type, screen resolution, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, and general location information such as city, state or geographic area.
• Online activity data, such as:
  • Pages or screens you viewed
  • How long you spent on a page or screen and on questions
  • Browsing history and navigation paths between pages or screens
  • Information about your activity on a page or screen
  • Access times and duration of access
  • Whether you have opened our marketing emails or clicked links within them
  • Exam attempt sessions and study interactions
  • AI explanation requests and completions
  • Advertising and campaign parameters (e.g., gclid) when provided
  • Platform feature usage patterns

We use the following tools for automatic data collection:

• Cookies, which are text files that websites store on a visitor's device to uniquely identify the visitor's browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, helping us understand user activity and patterns, and facilitating online advertising. Below is an overview of the types of cookies we and third parties may use to collect information:
  • Strictly Necessary Cookies. Some cookies are strictly necessary to make our Services available to you. We cannot provide you with our Services without this type of cookies. These enable core platform functionality such as account access, practice exam delivery, and AI explanation features.
  • Functional Cookies. Functional cookies may be used to recognize you when you return to our Services. This may enable us to adapt our content for you and remember your preferences. For example, we may use functional cookies to remember your choice of language or region, saved exam and study preferences, and platform settings.
  • Analytical or Performance Cookies. We may use cookies for website analytics purposes in order to operate, maintain and improve our Services. We may use our own analytics cookies or use third-party analytics providers to understand how you use our platform, which features are most popular (e.g., exams, explanations), and how to improve our services.
• Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications (for example, caching AI explanations for a question).
• Web beacons, also known as pixel tags or clear GIFs, which may be used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.

These automatic data collection methods help us:

• Improve our exam content and question explanations
• Enhance AI explanation quality
• Optimize platform performance
• Understand user preferences
• Provide better exam and study recommendations
• Improve study and progress tracking features
• Enhance overall user experience

Usage data

“Usage data” is information generated by your interaction with the Services, which can include answer selections, timing and pacing, navigation paths, feature interactions (for example, AI explanation requests and completions), error and performance metrics, and related analytics derived from your study sessions.

• Purposes: We process usage data to operate and deliver the Services (including scoring and analytics), personalize your study experience, monitor platform quality, detect and prevent fraud, abuse, and cheating, ensure security, and improve our content and AI features.
• Association and aggregation: We may associate usage data with your account to provide you with features and insights. We also de‑identify and/or aggregate usage data for analytics, research, and AI/model improvement.
• Sharing: We may share usage data with our service providers who perform services on our behalf (such as hosting, analytics, quality assurance, AI processing, security, and support) under agreements that restrict their use of the data to our documented instructions.
• Retention: Usage data is retained as described in the “Data Retention” section (for example, as required by law or for legitimate business purposes such as security, fraud prevention, and service improvement).

How we use your personal information

To operate our Services:

• Provide, operate, and improve our certification practice platform and AI explanation features
• Generate AI explanations based on your inputs and question context
• Create, store, and manage your practice exams and study preferences
• Deliver practice exams, track progress, and present results
• Track performance, scoring, and progress analytics
• Process your payments and complete transactions
• Store and manage your exam attempts and study history
• Maintain and improve our AI models and explanation capabilities
• Communicate with you about our Services, including sending account, order, and study‑related notifications
• Provide support for practice exams, AI explanations, and other features
• Respond to your requests, questions, and feedback

For research and development:

• Analyze platform usage patterns and trends
• Improve our AI explanation capabilities
• Enhance exam content quality and study experiences
• Develop new features and services
• Study user behavior and preferences
• Optimize exam delivery and progress tracking
• Improve our AI models through analysis of anonymized usage data
• Analyze and improve the Services and to develop new products and services, including by studying use of our Services

For marketing and advertising:

We and our advertising partners may collect and use your personal information for marketing and advertising purposes, including:

• Direct marketing. We or our advertising partners may from time-to-time send you direct marketing communications as permitted by law, including, but not limited to, notifying you of special promotions, offers and events via email and in-app notifications. You may opt out of our marketing communications as described in the "Opt out of marketing communications" section below.
• Interest-based advertising. We engage our advertising partners, including third party advertising companies and social media companies, to display ads around the web. These companies may use cookies and similar technologies to collect information about your interaction (including the data described in the "Automatic data collection" section above) over time across our Services, our communications and other online services, and use that information to serve online ads that they think will interest you. This is called interest-based advertising. We may also share information about our users with these companies to facilitate interest-based advertising to those or similar users on other online platforms. You can learn more about your choices for limiting interest-based advertising in the "Online tracking opt-out" section below.

Opt out of marketing communications. You may opt out of marketing-related emails or texts by following the opt-out or unsubscribe instructions at the bottom of the marketing communication we send you, or by contacting us through our contact page. Even if you opt out of marketing-related communications, you will continue to receive service-related messages about your account, purchases, practice exams, and other essential features.

For AI Model Improvement:

• Train and enhance our AI models using anonymized data
• Analyze explanation request patterns and preferences
• Improve prompt understanding and response
• Enhance explanation quality and relevance
• Develop new AI features and capabilities

Note: All data used for AI model improvement is anonymized and stripped of personal identifiers

For Platform Security and Quality:

• Monitor and prevent misuse of our AI features and platform
• Detect and deter cheating, scraping, and unauthorized access
• Protect against unauthorized use of our platform
• Maintain exam delivery quality
• Secure account, purchase, and study information
• Prevent spam and abuse

Concurrency and device management. To protect accounts and enforce reasonable concurrent‑session limits, we process limited device and session data (for example, user agent, session identifiers, and login timestamps) to detect account sharing or abuse and to prevent unauthorized access. Normal use across your own devices is permitted; simultaneous access by multiple individuals from the same account is prohibited and may be blocked, may trigger re‑authentication, or result in suspension consistent with our Terms of Use. We may share related security signals with service providers acting on our behalf solely for security and fraud/abuse prevention. Retention is as described in the "Data Retention" section.

To comply with law:

As we believe necessary or appropriate to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.

For compliance, fraud prevention, and safety:

To:

• protect our, your or others' rights, privacy, safety or property (including by making and defending legal claims);
• enforce the terms and conditions that govern our Services; and
• protect, investigate and deter against fraudulent, harmful, unauthorized, unethical or illegal activity.

To create anonymous data:

To create anonymous data from your personal information and other individuals whose personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve our Services, conduct research, and promote our business.

How we share your personal information

Service providers:

We may share your personal information with third party companies and individuals that provide services on our behalf or help us operate our Services (such as customer support, hosting, analytics, email delivery, marketing, payment processing, and database management services). These include:

• Email service providers to deliver account verification, support, and transactional communications
• Analytics providers to track platform usage and performance
• Cloud infrastructure and AI service providers for explanations and processing
• Payment processors for handling transactions (e.g., Stripe)
• Authentication and user management providers (e.g., Supabase)
• Customer support and ticketing platforms
• Database and hosting service providers
• Marketing and advertising partners
• Security and fraud prevention services
• Content moderation services

AI Processing Partners:

• Cloud computing and AI service providers for explanation generation
• Model training partners (using anonymized data only)
• Quality assurance and monitoring services
• Content moderation services

For compliance, fraud prevention and safety:

We may share your personal information for the compliance, fraud prevention and safety purposes described above, including:

• Protecting our rights and property
• Enforcing our Terms of Use
• Preventing unauthorized platform use
• Monitoring for content policy violations
• Ensuring appropriate use of AI generation tools
• Protecting guest data and privacy
• Complying with legal obligations
• Responding to legal requests and subpoenas
• Preventing fraudulent activities
• Maintaining platform security

Professional advisors:

We may disclose your personal information to professional advisors, such as lawyers, bankers, auditors and insurers, where necessary in the course of the professional services that they render to us.

AI-Generated Content and Data

Our Services include AI explanation capabilities. Regarding this feature:

• You may use AI explanations generated for your study purposes within your account
• We may use anonymized generation data to improve our AI models
• We maintain logs of explanation requests for security and quality purposes
• We may review generated content to ensure compliance with our policies
• We may retain AI‑generated explanations according to our data retention schedules
• You are responsible for ensuring you have the right to use any inputs you provide for AI generation

How you share personal information

Public Sharing

You may choose to:

• Share your practice exam result scores, pass/fail outcomes, progress percentages, completion times, badges, or other personal achievements.
• Share aggregate study stats (e.g., total time studied, number of attempts) that do not include platform content.
• Post screenshots or images only if they do not display any Certification Practice content or materials. Cropped or redacted score summaries that exclude any prohibited proprietary or copyrighted content (as described in our Terms of Use) are acceptable.
• Share personal reflections or study notes that do not reproduce, paraphrase, or reveal Certification Practice content.

You may not publicly share, post, or distribute any Certification Practice proprietary or copyrighted content or materials (Service Content, as defined in our Terms of Use), in whole or in part, or any derivative, paraphrased, summarized, re‑constituted, or re‑authored version, without our prior written permission, except as expressly permitted in this Policy (e.g., cropped or redacted score summaries that exclude prohibited proprietary or copyrighted content). See our Terms of Use for details.

Please note that any information you choose to share publicly is your responsibility, and you should carefully consider what information to make available to others.

Data Retention

We retain your personal information for as long as your account is active, as needed to provide you with our Services, and as necessary to comply with legal obligations and for legitimate business purposes (including security, fraud prevention, financial, accounting, and tax purposes). If you wish to have your personal information deleted, please submit a specific request for account and data deletion through our contact page. Upon receiving your request, we will delete your personal information at least 30 days after receipt, except where we are required by law to maintain certain records or where we need to preserve data for legal, security, fraud prevention, financial, accounting, or tax purposes. This includes:

• Account Information: Maintained while your account is active, deleted at least 30 days after we receive your data deletion request
• Exam Attempts and Study History: Accessible while your account is active, deleted at least 30 days after we receive your data deletion request
• AI‑Generated Explanations: Retained while your account is active, deleted at least 30 days after we receive your data deletion request
• Purchase Records: Maintained as needed to fulfill your order and provide access, and then retained as required by law
• Usage Data: Retained as required by law or for legitimate business purposes
• Payment Records: Retained as required by applicable tax and accounting laws
• Security Logs: Retained as necessary for security, fraud prevention, and legal compliance purposes

Please note that ceasing use of your account or requesting account closure without submitting a specific data deletion request will not automatically result in the deletion of your personal information.

We may retain certain anonymized or aggregated data derived from your personal information after account deletion and/or data deletion request, but this data will not be personally identifiable to you.

In cases where we are required by law to maintain records, such as for tax purposes, fraud prevention, or legal compliance, we will retain the minimum necessary information for the period required by law. Additionally, if there are any pending legal issues, investigations, or disputes related to your account, we may retain the relevant information until such matters are fully resolved.

Security practices

We use reasonable organizational, technical and administrative measures designed to protect against unauthorized access, misuse, loss, disclosure, alteration and destruction of personal information we maintain. Our security measures include:

• Encryption of personal information in transit and at rest
• Secure storage of account, exam, and purchase information
• Protected AI processing systems
• Regular security assessments and updates
• Monitored access to our systems and data
• Employee training on data protection
• Incident response procedures

Your data security is a priority. We use industry-standard protections and appropriate technical and organizational measures to protect personal information. Although absolute security cannot be guaranteed on any online service, we continuously strengthen our safeguards to help protect your information.

Children

Our Services are not intended for use by children under 13 years of age. If we learn that we have collected personal information through the Services from a child under 13 without the consent of the child's parent or guardian as required by law, we will delete it. This includes:

• Account information
• Exam attempt data and study history
• Generated AI explanations
• Support messages

International Visitors

Our Services are hosted in the United States ("U.S."), and we welcome users from around the world. If you access the Services from the EEA, the UK, or other regions with laws governing data collection and use that differ from U.S. law, your personal information will be transferred to, stored in, and processed in the U.S., and may also be transferred to other countries where we or our service providers operate. These countries may have data protection laws that are different from those in your jurisdiction.

Where required by law, we implement appropriate safeguards for such cross-border transfers consistent with applicable data protection laws. These transfers are necessary to provide the Services, fulfill your requests, and operate our business.

By providing any information, including personal information, on or through our Services, you acknowledge and consent to the transfer, processing, and storage of your personal information as described in this Policy.

Changes to this Privacy Policy

Certification Practice reserves the right to amend this Privacy Policy at its sole discretion, and any modifications will be effective immediately upon posting.

We will announce changes by posting the updated version of this Privacy Policy on the Services and updating the "Last Updated" legend at the top of this page. Posting constitutes notice of changes, and we have no obligation to provide additional, separate notice.

It is your responsibility to review this Privacy Policy periodically for updates posted to the Services. By continuing to access or use the Services after such changes, you agree to the updated Privacy Policy. If you do not agree with this Privacy Policy or any changes thereto, please do not continue using the Services.

How to contact us

For questions about this Privacy Policy or our data practices, please reach out via our contact page.