Privacy Policy

Last updated: August 8, 2026

This Privacy Policy explains what information ASVABIFY (operated by Daniel Antezana, "we," "us") collects, what we use it for, who we share it with, and what control you have over it. It applies to asvabify.com, asvabify.app, and any related app (the "Service").

If you don't agree with this policy, don't use the Service. Questions: hello@asvabify.com.

1. Information we collect

1.1 When you create an account

• Email address, always.
• If you sign in with Google or Apple: the identifier for that account and the name/email those providers share with us (we never see your Google or Apple password — it never passes through us).

1.2 When you use the course

• Lesson progress: which lessons you've completed, your answers to exercises, your score, and when you first completed each one.
• Study days: which days you logged in to study (for your streak).
• Screen time: minutes of use per day, synced across your devices.
• Study profile (if you completed the initial diagnostic): your target branch, estimated exam date, daily available time, and how you'd like us to talk to you (direct, patient, or data-only tone).

1.3 When you purchase a plan

• Your plan history (what you bought, when, when it expires).
• Actual payment data (card number, etc.) is never received or stored by us — it's processed directly by Stripe, our payment processor. See section 4.

1.4 When you leave your email on the blog or homepage

• The email you leave in the newsletter form, along with the language you were using and which part of the site you left it from.

1.5 Technical information

• Basic browser and device data needed for the Service to work (this is processed by Vercel, our hosting provider, as a normal part of serving the page — we don't use it for advertising and don't sell it).

We don't collect your precise location, biometric data, or scan your contacts or photos.

2. Cookies and local storage

The Service does not use third-party cookies for advertising or tracking. We use browser localStorage (not a cookie in the traditional sense) to store your session and your language/theme preferences, directly on your device. If you clear site data in your browser, you'll need to sign in again.

Typefaces (Google Fonts) load from Google's own servers; that means your browser requests those files directly, which shares your IP address with Google as a normal part of how the internet works — we don't use this to identify you.

3. What we use your information for

• Giving you access to the course and syncing your progress across devices.
• Manually approving academy access (section 3 of our Terms).
• Processing your payments and activating your plan.
• Computing and showing you your personalized study plan — including, if you used that feature, sending a summary of your profile to an AI provider to write up the text (section 5).
• Sending you free educational content if you left your email (you can unsubscribe any time).
• Detecting and preventing abuse: for example, stopping a free account from bypassing the free-sample limit, or someone from trying to download paid content without an active subscription.
• Complying with legal obligations.

We never sell your personal information, and never share it with third parties so they can advertise to you.

4. Who we share information with

We use the following providers to run the Service. Each one only receives what it needs for its specific job:

We don't share your information with any other third party unless required by law (for example, a court order), or when necessary to protect our legal rights.

5. AI-powered features

If you complete the initial diagnostic and request your personalized study plan, we send your study profile (target branch, available time, exam date, preferred communication tone) to Anthropic (our AI model provider), which returns a paragraph written from that data. This profile is sent without your name or email — Anthropic can't identify you from that specific call. This use is also subject to Anthropic's privacy policy.

6. Security

• All communication between your device and our servers is encrypted (HTTPS).
• Your data in our database is protected with row-level security (RLS): technically, even the app's public key can't read another user's information — every query is scoped to your own account.
• We never store credit card numbers at any point; that's handled by Stripe, which is PCI-DSS compliant.
• Administrative access to your account is limited to a single admin email, and admin actions are logged in an audit trail.

No system is 100% secure, and we can't guarantee absolute security — but we take reasonable measures to protect your information.

7. How long we keep your information

We keep your information while your account is active. If you buy a plan and it expires, your progress and profile stay saved (in case you come back), but your access to paid content stops. If you delete your account (section 10), we delete everything.

8. Children

The Service is not directed at children under 13, and we don't knowingly collect information from that age group. Users 13-17 need permission from a parent or guardian to use the Service — see section 2 of our Terms. If you're a parent or guardian and believe your child under 13 gave us information without your permission, contact us and we'll delete it.

9. Your rights

Regardless of where you live, you have the right to:

• Access the information we have about you.
• Correct inaccurate information.
• Delete your account and your information (section 10).
• Unsubscribe from newsletter emails, using the link in every email.

If you live in California

The California Consumer Privacy Act (CCPA/CPRA) gives you the right to know what categories of information we collect (section 1), to request deletion, to not be discriminated against for exercising these rights, and to confirm that we do not sell or share your personal information for targeted advertising, because we don't. To exercise any of these rights, write to hello@asvabify.com.

10. How to delete your account

You can delete your account yourself, at any time, from Profile → Delete account, inside the app. When you confirm:

• Your user is permanently deleted.
• The following are automatically deleted in cascade: your progress, study days, onboarding profile, and access status.
• This action cannot be undone.

If you'd rather request it by email instead of doing it yourself, write to hello@asvabify.com from the email associated with your account and we'll handle it within a reasonable timeframe.

11. Where your data is processed

Our providers (Supabase, Stripe, Vercel) run infrastructure in the United States. If you write to us from outside the US, your information will be transferred to and processed in the United States.

12. Changes to this policy

We may update this policy from time to time. If a change is material, we'll announce it in the Service before it takes effect. The "Last updated" date above always reflects the current version.

13. Contact

For any question about this policy or your information: hello@asvabify.com.