Privacy Policy

1. Who We Are

This Privacy Policy explains how Stonebridge Digital Studios LLC, a Florida limited liability company doing business as PrepLabs ("PrepLabs," "we," "us," or "our"), collects, uses, and protects information when you use the PrepLabs website, web application, and mobile applications (together, the "Service"). The Service is offered only to residents of the United States.

2. Information We Collect

Account information. If you create an account, we collect your email address and password (managed through our authentication provider, Supabase) so you can sign in and sync your progress across devices. When you create an account you also choose a display name, shown to you within the Service. You may also use the Service without creating an account; in that case your study progress is still stored under an anonymous identifier that is not linked to your name or email.

Age range. When you create an account we ask you to select your age range (for example, 25–34); you must be at least 18 to use PrepLabs. We store this with your account and use it to understand our community's age mix and improve the Service. We do not use it for advertising or profiling, we never sell or share it, and it is deleted when you delete your account.

Device and security information. To limit sharing of paid access, once you buy a paid unlock we keep a short list of the devices signed in to your account. For each device we store a random identifier (not a fingerprint or any hardware details), a label you can recognize (for example, “Chrome on Mac”), and the dates it was added and last used. Your first device is added automatically; if your account is later used on another device, we email you a link to approve it. This device list is deleted when you delete your account.

Sign-in and security logs. When you sign in, our authentication provider (Supabase) automatically records technical details of the session — including your IP address and your browser and device type (user-agent) — as a standard security measure to operate sign-in, protect your account, and detect and prevent automated abuse and fraud. We do not use any of this to track you, build an advertising or behavioral profile, or determine your precise location, and we never sell it or share it with advertisers or data brokers. These session records are kept only as long as needed to operate sign-in and protect your account, and are removed when they are no longer needed for that purpose.

Study data. We collect your study progress and per-question performance so the Service can track what you've studied and schedule review at the right intervals.

Purchase and tax information. If you buy a paid unlock, we (or our payment processors) record transaction details — transaction ID, amount, date, and applicable tax information. We do not retain your email address as part of this purchase record. Purchases made in our mobile apps are processed by the Apple App Store or Google Play, which handle your payment information directly; we never see your card details. On our website, depending on the payment method you choose (for example, a card, a digital wallet, or a buy-now, pay-later service), your payment may also be handled by that provider under its own privacy policy.

Usage analytics. We use Vercel Analytics to understand aggregate traffic and performance on our website. This data is not tied to your individual identity.

Diagnostic and error data. We use Sentry to detect and fix technical errors. This is limited to server-side diagnostic information and does not include your personal content.

3. How We Use Your Information

We use the information above to: provide and maintain the Service; process your purchases; sync your progress across your devices; understand and improve how the Service performs; and communicate with you about your account or purchases. We do not use your information for advertising, and we do not build advertising profiles about you.

4. Sharing Your Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only with service providers who process it on our behalf and under our instructions:

• Supabase — authentication and database hosting
• Stripe — payment processing for web purchases
• Apple App Store / Google Play — payment processing for mobile purchases
• Vercel — website hosting and analytics
• Sentry — error and diagnostic tracking
• Resend — transactional email delivery (e.g. sign-in and device-approval emails)

We may also disclose information if required by law or to protect the rights, safety, or property of PrepLabs or others.

5. Data Retention and Deletion

We retain your account information for as long as your account is active. You may delete your account at any time from within the Service. When you do, we permanently remove your account credentials, study progress, and preferences.

Purchase records are handled differently: because we have a legal obligation to keep basic transaction and tax records, a purchase's transaction ID, amount, date, and tax information are retained even after account deletion. This retained record does not include your email address, name, or any other information that identifies you personally — it is an anonymous accounting record, kept only as long as required by applicable tax and recordkeeping laws.

When you delete your account, we keep one further minimal record: your internal account identifier — a random ID we assigned, not your name or email — together with the deletion date. Its only purpose is to make sure your deleted data is not brought back if we ever have to restore a database backup, and we remove it once it is no longer needed for that.

Because the retained purchase record no longer carries any identifier that ties it to you, we have no way to link it back to you afterward. For purchases made on the web, this means deletion is permanent — they cannot be restored to a new account. Purchases made through the Apple App Store or Google Play belong to your store account, and may be restorable through that store's own restore mechanism.

6. Your Privacy Rights

Depending on where you live, you may have the right to know what personal information we hold about you, request a copy of it, correct it, or request its deletion. We do not sell personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of in that respect. To exercise any of these rights, delete your account directly in the Service or contact us at support@bypreplabs.com.

7. Children's Privacy

PrepLabs is intended only for adults; you must be at least 18 years old to create an account, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from anyone under 18, we will delete it. Consistent with the Children's Online Privacy Protection Act (COPPA), the Service is not directed to children under 13, and a parent or guardian who believes a child under 13 has provided us personal information should contact us at support@bypreplabs.com so we can delete it.

8. Security

We use reasonable technical and organizational measures to protect your information, including database-level access controls and encryption in transit and at rest through our service providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. United States Only

The Service is offered only to residents of the United States and is not intended for use from other countries. We do not knowingly collect personal information from individuals outside the United States.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and provide notice within the Service. Your continued use of the Service after changes take effect means you accept the updated policy.

11. Contact Us

Stonebridge Digital Studios LLC d/b/a PrepLabs
support@bypreplabs.com
P.O. Box 120001
Melbourne, FL 32912