Privacy Policy

Last updated October 17, 2026

PrepPath is a free SAT and ACT practice app. This policy explains what data the app collects, why, who processes it, and how to delete it. Questions: rro@theomalleyfamily.net.

What we collect

• Account identifier. When you open the app we create an account with a random ID (Firebase Anonymous Authentication). If you choose Sign in with Apple, we receive an Apple user identifier and, the first time, your first name (used only to suggest a display name). We do not request your email address.
• Profile you enter. Display name, avatar emoji, which tests you are studying, target and current scores, test dates, daily XP goal, and your time-zone offset (for streaks and daily goals).
• Learning activity. The questions you answer, your answers, whether they were correct, how long each took, skill estimates, lessons completed, XP, gems, streaks, quests, bookmarks, diagnostic results and league standings.
• Reports and blocks. If you report or block another player, we store that action and your account ID.

We do not collect your location, contacts, photos, advertising identifier or browsing history. The app has no ads and no third-party analytics or tracking, and we do not sell or share personal data for advertising.

How we use it

• To run the app: save your progress, choose questions at the right difficulty, estimate your score, and run streaks, quests and leagues.
• To show your display name, avatar and weekly XP to the other players in your league.
• To keep the service safe, including reviewing reported names.

Who processes it

• Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Hosting) stores and processes the data above on our behalf in the United States. Google's terms require it to protect this data. See Firebase privacy.
• Apple, if you use Sign in with Apple, under Apple's privacy policy.
• jsDelivr, a public content network, serves the math-typesetting library the app downloads to display equations. Like any web server it receives your IP address with that request. No account data is sent.

We share data with no one else, except where required by law.

Keeping and deleting your data

We keep your data while your account exists. You can delete your account at any time in the app: Profile → Delete account. This immediately and permanently deletes your profile, progress, answers and league entries, and revokes Sign in with Apple. You can also email rro@theomalleyfamily.net to ask for deletion or for a copy of your data.

Children

PrepPath is meant for students preparing for college admissions tests and is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it.

Security

Data is sent over encrypted connections and protected by Firebase security rules. Only you can read your own profile and progress. Scores, XP and streaks can only be changed by our server.

Changes

If this policy changes we will update this page and the date above. Significant changes will also be shown in the app.