Privacy Policy

1. Information we collect

Account information. When you create an account, we collect your name and email address. If you sign up or sign in with Google instead, we receive the basic profile information (such as name and email) that Google shares with us. We use Supabase as our authentication and database provider to store and manage this information.

Content you create. Notes you write on simulation pages are saved so you can return to them later. If you are signed in, note content is synced to our database, tied to your account and the page it was written on. You can download a copy of any note as a text file at any time from the notes editor.

Study and usage data. While you use the Service, we record how much time you spend on each simulation page, how many separate sessions you've had on that page, and when you last visited it, along with a day-by-day total of your active study time. This powers features like your dashboard and study streaks. If you are signed in, this data is tied to your account so it stays in sync across your devices; if you are not signed in, it stays on your device only.

Subscription and billing information. If you purchase a paid plan, our payment processor, Stripe, handles your payment details directly — we never see or store your full card number. We do store your plan tier, subscription status, and the Stripe identifiers needed to manage your subscription (for example, to show your current plan or let you open the billing portal).

Feedback you submit. When you submit a feature suggestion or a bug report from the Suggest page, it is sent to us and stored in our database, tied to your account (you must be signed in to submit). After review, the content of a suggestion or bug report may appear on the public community board, where other users can read and vote on it; the board does not display your name.

Information stored only on your device. A number of features — practice-question history, mock-exam scores, flashcard progress, your mistake tracker and journal, your bookmarked simulations, and your light/dark theme preference — are stored locally in your browser's storage. This data is not sent to us and is not synced between your devices; clearing your browser data or switching browsers/devices will remove it.

2. How we use your information

• To provide, maintain, and sync the Service across your devices.
• To show you your own study data back (dashboards, streaks, time-on-topic breakdowns).
• To process payments and manage your subscription.
• To respond when you contact us for support, or when you submit feedback or a bug report.
• To maintain the security and integrity of the Service.

We do not sell your personal information, and we do not use advertising trackers or build advertising profiles about you. We do use two analytics and performance services to understand aggregate usage and page performance: Google Analytics, which sets its own cookies in your browser as described in Section 4, and Vercel's cookieless analytics and Web Vitals monitoring. Neither is used for advertising. Aside from these, the only outside services that receive your data are the ones needed to run Simistry itself, listed below.

3. Who we share information with

• Supabase — our database and authentication provider. It stores your account, notes, and study-analytics data on our behalf.
• Stripe — our payment processor for paid plans. Stripe handles and stores your payment card details under its own privacy policy; we never receive your full card number.
• Google — in two separate roles. Google Analytics receives aggregate usage data from every visit (the pages you view, your approximate location derived from your IP address, and your browser and device type), and sets the cookies described in Section 4. Separately, and only if you choose to sign in with Google, Google shares basic profile information (such as name and email) with us as part of that sign-in.
• Vercel — our hosting provider, which also supplies privacy-focused, cookieless analytics and performance monitoring (aggregate page views and Web Vitals). It does not set advertising cookies or build cross-site profiles.
• Cloudflare — our content delivery network. Requests to Simistry pass through Cloudflare's network on the way to our servers, so it processes connection data such as your IP address and browser user agent in order to route traffic and protect the Service.

We may also disclose information if required to do so by law, or to protect the rights, property, or safety of Simistry, our users, or others.

4. Cookies and local storage

We don't use advertising cookies, and nothing we set is used to track you across other websites. Google Analytics does set its own first-party cookies (named "_ga" and similar) so that repeat visits can be told apart and aggregate traffic measured; blocking them with your browser's cookie controls or an ad blocker does not affect how the Service works. Signing in relies on a session token that Supabase stores in your browser so you stay logged in. Beyond that, the Service uses your browser's local storage (not cookies) to remember your theme preference and the on-device data described in Section 1. Web fonts are self-hosted and served directly by Simistry, so rendering them does not send any request to a third-party font provider.

5. Data retention and deletion

We keep your account data for as long as your account is active. You can sign out or cancel a paid subscription at any time from your account settings. To request deletion of your account and associated data, contact us at the email below — we'll process deletion requests promptly, except where we're required to retain certain records (for example, billing records) for legal or accounting purposes.

6. Children's privacy

7. Security

We use reasonable technical safeguards to protect your information, including database access controls that restrict each account to its own data. That said, no method of transmission or storage over the internet is 100% secure, and we can't guarantee absolute security.

8. International users

Our service providers may process and store data on servers located outside your country of residence, including in the United States. By using the Service, you understand that your information may be transferred to and processed in such locations.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, or delete your personal information, or to object to certain uses of it. You can exercise these rights by contacting us directly — see below. We'll respond to verified requests within a reasonable time.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "last updated" date above. Continued use of the Service after a change means you accept the revised policy.

11. Contact us