Privacy policy

Information you give us. Your name and email address when you create an account or contact us; and any information you choose to include in a message to support or in a report about a question.

Information created by your use of the Service. Study activity — the questions served to you, the answers you selected, how long you spent on each, and your resulting scores. This is what produces your score, your pace, and your per-domain breakdown; without it the Service cannot do its job. Also onboarding answers such as whether you have booked an examination and approximately when.

Information collected automatically. Standard technical information such as IP address, browser type and version, device type, and pages visited, together with the date and time of access. This is used to operate and secure the Service.

Payment information. Payments are processed by Stripe, Inc. We do not collect, see, or store your payment card number. We store only a record of the purchase and the resulting access entitlement.

We use personal information to:

• create and administer your account and authenticate you;
• provide the Service, including scoring, progress, and readiness reporting;
• process payments and manage your access entitlement;
• respond to support requests and question reports;
• maintain, secure, troubleshoot, and improve the Service, including identifying questions that are wrong or unclear;
• send transactional messages such as receipts, access expiry notices, and important service notices;
• comply with legal obligations and enforce our terms.

We rely on your consent, and on the performance of our contract with you, as the basis for these uses. You may withdraw consent at any time, subject to legal and contractual restrictions and reasonable notice — but withdrawing consent to the processing necessary to run the Service will mean we can no longer provide it.

We do not sell, rent, or trade your personal information. We do not share your study performance with employers, brokerages, regulators, or examination bodies.

We share information only with:

• Service providers who process information on our behalf and only on our instructions: Clerk (authentication), Convex (application database and backend), Stripe (payment processing), and Vercel (hosting and content delivery);
• Legal and safety recipients, where we are required by law, court order, or lawful request, or where disclosure is necessary to protect our rights, our users, or the public;
• A successor entity, in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy continuing to apply.

We use cookies and similar technologies that are necessary for the Service to function — in particular, to keep you signed in and to maintain your session securely. We do not use third-party advertising cookies and we do not run cross-site advertising trackers.

Most browsers let you refuse or delete cookies. Blocking necessary cookies will prevent you from signing in.

Our service providers may store and process information in Canada, the United States, and other countries. Information stored outside Canada may be accessible to courts, law enforcement, and national security authorities of that jurisdiction under its laws.

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information only as long as necessary for the purposes described in this Policy, or as required by law. Study history is retained while your account is active so that your progress remains available to you. Records required for tax and accounting purposes are retained for the period required by law. When information is no longer needed we delete it or render it anonymous.

Subject to applicable law, you may:

• request access to the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your account and associated personal information;
• withdraw consent to our processing, subject to section 2;
• ask a question or make a complaint about how we handle your information.

Contact onyxexamprep@gmail.com and we will respond within the time required by applicable law, normally within 30 days. Deleting your account permanently removes your study history and cannot be undone.

If you are not satisfied with our response you may contact the Office of the Privacy Commissioner of Canada, or the privacy regulator in your province.

The Service is intended for adults preparing for professional licensing examinations and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us and we will delete it.

We may update this Policy from time to time. If a change is material we will update the date at the top of this page and, where reasonable, give additional notice. We encourage you to review this page periodically.

Questions, access requests, and privacy complaints can be directed to our privacy contact at onyxexamprep@gmail.com.