Privacy Policy

This Privacy Policy explains how Drilled collects, uses, and shares information when you use our website and application.

1. Information we collect

• Account data: email address and authentication identifiers (via Supabase Auth, including magic link or Google sign-in).
• Profile & settings: optional display name, test date, baseline score.
• Practice data: sessions, answers, timing, error classifications, and related analytics.
• Billing: payment is handled by Stripe. We store subscription status and Stripe customer IDs; we do not store full card numbers.
• AI tutor: messages you send and context about the current question may be sent to our AI provider to generate replies. Usage may be capped per day.
• Technical data: cookies for authentication and session security; standard server logs.

2. How we use information

• Provide and improve the Service (practice, scoring, plans, analytics).
• Authenticate you and manage subscriptions.
• Operate the AI tutor and enforce usage limits.
• Respond to support requests and comply with law.

3. Sharing

We share data with processors who help run the Service:

• Supabase (auth and database)
• Vercel (hosting)
• Stripe (payments)
• AI model providers (tutor messages)

We do not sell your personal information.

4. Retention

We retain account and practice data while your account is active. You may request deletion by emailing support; we will delete or anonymize data except where we must retain records for legal or billing reasons.

5. Security

We use industry-standard measures (HTTPS, access controls, row-level security where applicable). No method of transmission is 100% secure.

6. Children

The Service is not directed at children under 13. If you believe we collected data from a child under 13, contact us to delete it.

7. Contact

Privacy questions: veritasvisioai@gmail.com.