Privacy Policy

This Privacy Policy explains what information PrepCat collects, why we collect it, and the choices you have. We collect what we need to run your study plan, keep your account and payments secure, measure our advertising, and improve the product, and we do not sell your information.

When you sign up and use PrepCat, you provide information such as your email address and name, your target score and test date, your study days and hours, your diagnostic scores, the mistakes you log, your practice answers, and any notes or messages you send to the advisor.

This information is what lets PrepCat build a plan around you, measure your readiness, and give you relevant guidance.

When you use the app we collect basic technical information, such as your device type, browser, and general usage of features, so we can keep the service working and improve it. We use cookies that are needed to sign you in and keep you signed in, a cookie that remembers a referral or promo code you applied, cookies that remember display choices such as a collapsed sidebar, and the advertising cookies described in Advertising and measurement.

We use privacy friendly analytics to count visits and see which pages are used. This includes a coarse location (country and city) derived from your connection, but not your precise location, and our visit counts do not store your full IP address. Our sign in and billing records do store it, for security, fraud prevention and payment disputes, as described in Security, fraud prevention and payment disputes.

We use your information to create and update your study plan, track your progress and readiness, power the advisor and practice features, keep your account and payments secure, answer payment disputes, respond to your requests, and make the product better over time.

We also use some of it to measure and improve our advertising on Meta and TikTok, as described in Advertising and measurement. We do not sell your information.

Some PrepCat features, such as your study plan, the tutor and the advisor, send a summary of your study situation, your questions, and related context to our processing providers, Anthropic and Google. They process it only to produce the response you asked for.

These providers do not use data submitted through their business APIs to train their models by default. We send only what is needed for the feature you are using.

PrepCat advertises on Meta (Facebook and Instagram) and on TikTok. To learn which ads bring people to PrepCat, our pages load the Meta Pixel and the TikTok Pixel. They tell Meta and TikTok which pages of prepcat.net you visit and steps such as signing up, opening checkout and subscribing, along with your IP address, your device and browser, and cookie identifiers, including the ad you clicked to reach us, if any. When you are signed in, they also receive a hashed (coded) copy of your email address and of your PrepCat account id, which Meta and TikTok can match to accounts they hold.

When you subscribe, our server also reports the purchase to Meta and TikTok, with details such as the amount paid, the same hashed email address and account id, your IP address and device, and those identifiers. This report comes from our server, so it is sent even if your browser blocks the pixels.

Meta and TikTok use this information to measure our ads and to decide who sees them, and they also use it under their own privacy policies. You can limit it with your browser's privacy settings or an ad blocker, and with the ad settings of your Meta and TikTok accounts.

We use a small set of trusted providers to run PrepCat. Supabase hosts our database and handles sign in. Anthropic and Google provide the technology behind features such as your study plan, the tutor and the advisor. Stripe processes payments and stores your billing details. Vercel hosts the app and provides privacy friendly traffic analytics. Meta and TikTok provide our advertising and its measurement. Apart from what Meta and TikTok do under their own policies, as described in Advertising and measurement, these providers process your information only to provide their services to us and under their own privacy and security commitments.

Paid subscriptions are handled by Stripe. When you subscribe, Stripe collects and stores your payment details and processes the charge. PrepCat never sees or stores your full card number. We keep a record of your subscription status and billing history so we can give you access and show your invoices.

To keep accounts and payments secure, prevent fraud and answer payment disputes, our server keeps a record when you sign in, the first time you open PrepCat each day, and at each billing step, such as opening checkout, subscribing, canceling or resuming a plan, switching plans, updating your card and deleting your account. Each record holds the time and, for steps you take yourself, your full IP address and your device and browser. Billing records also hold the plan, the amounts, Stripe's reference numbers, the brand and last four digits of a new card, and for a purchase, the renewal terms and the Terms of Service agreement shown at checkout.

We keep these records for at least 3 years, or for 1 year after your subscription ends if that is later, even after you delete your account, because a payment can be disputed long after it is made.

If a payment is disputed or reported as unauthorized, we may share these records, your account details and a summary of how you used PrepCat around the payment with Stripe and with your card issuer, so they can decide the dispute.

We share information only with the service providers described above, with Stripe and your card issuer when a payment is disputed (see Security, fraud prevention and payment disputes), when you ask us to, or when we are required to by law or to protect the rights and safety of our users and the public. If PrepCat is ever involved in a merger or sale, we will protect your information and let you know of any change in how it is handled.

We keep your information for as long as your account is active. You can delete your account at any time from the Settings page. Deleting it cancels any paid plan right away, erases your study plan, your logged mistakes and your study days, and removes the name on your profile.

Some records are kept after you delete your account: the sign in and billing records described in Security, fraud prevention and payment disputes, your answers to the cancellation survey if you gave any, a record of the emails we sent you and of any request to stop them, and the payment records Stripe keeps as our payment processor. Other records may also remain, such as your email address and any name in our sign in system, your flashcards and their review history, your practice sets and problems you reported. To have those removed, email support@prepcat.net. Some records may remain briefly in backups before they are overwritten.

We protect your information with encryption in transit and access controls, and we limit who can reach your data. No service can promise perfect security, so please use a strong password and keep it private.

You can view and update most of your information directly in PrepCat, including your name, target score, test date, and study schedule in Settings. Depending on where you live, you may have the right to access, correct, export, or delete your information. To make a request, contact us and we will help.

PrepCat is meant for people preparing for the MCAT and is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has given us information, contact us and we will remove it.

We may update this policy as PrepCat evolves. When we make a material change, we will update the date at the top and, where appropriate, notify you in PrepCat.

If you have questions about your privacy or this policy, reach us at support@prepcat.net.