Privacy Policy

1 Who we are

OpenPrep is a free, open-source exam preparation platform built by Pakistani university students and available at openprep.me. This privacy policy explains what data we collect when you use OpenPrep and how we use it.

2 What data we collect

Here is a plain summary of everything OpenPrep collects:

We do not collect your phone number, location, payment details, or any other personal information.

3 How we collect data

• Google Sign-In — if you sign in with Google, we receive your name, email, and profile photo from Google. We only request basic profile permissions.
• Email signup — if you sign up with email, we collect the email address and name you provide.
• Quiz activity — when you submit a quiz, we save your score, correct answers, and wrong answers linked to your account.

4 How we use your data

We use your data only to:

• Create and manage your account.
• Show your quiz progress and performance on your profile dashboard.
• Display your name and avatar in the interface.
• Send account-related emails such as email confirmation or password reset.

We do not use your data for advertising, profiling, or any commercial purpose.

5 Who we share data with

We do not sell or share your personal data with third parties. Your data passes through the following services only to make OpenPrep work:

• Supabase — our database and authentication provider. Your account and quiz data is stored securely on Supabase servers. Supabase Privacy Policy.
• Netlify — our website hosting provider. They serve the OpenPrep website but do not access your account data. Netlify Privacy Policy.
• Google — only if you choose to sign in with Google. Google Privacy Policy.

6 Data storage and security

Your data is stored securely using Supabase with row-level security enabled — meaning your quiz data is only accessible by you and cannot be read by other users. We use HTTPS across the entire platform to protect data in transit.

While we take reasonable steps to protect your data, no system is completely secure. Please use a strong password and do not share your account credentials.

7 Your rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of any inaccurate data.
• Request deletion of your account and all associated data.
• Stop using OpenPrep at any time — your data is not held hostage.

To exercise any of these rights, contact us via GitHub or the email listed at the bottom of this page.

8 Cookies

OpenPrep uses only the cookies necessary to keep you logged in (session cookies from Supabase Auth). We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

9 Children's privacy

OpenPrep is intended for students aged 16 and above. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it promptly.

10 Changes to this policy

If we make any significant changes to this privacy policy we will update the date at the top of this page. Continued use of OpenPrep after changes means you accept the updated policy.