Privacy Policy

This Privacy Policy explains what information ASVABIFY (operated by Daniel Antezana, "we," "us") collects, what we use it for, who we share it with, and what control you have over it. It applies to asvabify.com, asvabify.app, and any related app (the "Service"), in English and in Spanish.

If you don't agree with this policy, don't use the Service. Questions: hello@asvabify.com.

1. Information we collect

1.1 When you create an account

• Email address, always.
• If you sign in with Google or Apple: the identifier for that account and the name/email those providers share with us (we never see your Google or Apple password — it never passes through us).

1.2 When you use the course

• Lesson progress: which lessons you've completed, your answers to exercises, your score, and when you first completed each one.
• Study days: which days you logged in to study (for your streak).
• Screen time: minutes of use per day, synced across your devices.
• Study profile (if you completed the initial diagnostic): your target branch, target AFQT score, estimated exam date and timing, the time you can study (minutes per day, days per week, time of day), how you rate your English and your math, whether you've taken the exam before, your diagnostic answers and result, what you find hard, what motivates you, and how you'd like us to talk to you (direct, patient, or data-only tone).
• Practice results: your answers, scores and AFQT estimates on the practice exams and guided subtests, and the time you spent on each section.
• The name you want us to use (optional): if you type one in Profile → About you, we use it to greet you.
• Free-sample records: which of the free animated explanations you have opened, because the free sample has a limit per account.
• AI-use counts: how many times per day you use each AI feature (section 5), so we can apply a daily limit.
• Your language: the language you choose in Profile → Settings (English or Spanish) is stored on your device. See section 2.

1.3 When you purchase a plan

• Your plan history (what you bought, when, when it expires, and whether it came through Stripe, Apple, Google or us).
• Actual payment data (card number, etc.) is never received or stored by us — on the website it's processed directly by Stripe, our payment processor. We keep the identifiers Stripe gives us for your customer record and subscription. See section 4.
• In the iOS app, Apple processes the payment. We receive only the transaction details we need to verify it and activate your plan (the product, the purchase and renewal dates, and Apple's transaction identifier) — never your card or Apple Account details.
• In the Android app, which is currently in closed testing, Google Play processes the payment. We receive the purchase token and the details we need to verify it and activate your plan, and the app sends Google an identifier of your account so the purchase can be matched to you — never your card details.

1.4 When you leave your email on the blog or homepage

• The email you leave in the newsletter form, along with the language you were using and which part of the site you left it from.

1.5 Technical information

• Basic browser and device data needed for the Service to work (this is processed by Vercel, our hosting provider, as a normal part of serving the page — we don't use it for advertising and don't sell it).
• Course audio: the lesson audio is served by Cloudflare. When your device requests an audio file, Cloudflare receives that request as any web server does: your IP address and the details of the request (which file, and your device's browser or app type). The temporary link our server gives your device to fetch the audio does not contain your email.
• Aggregate usage statistics on the website version through Vercel Web Analytics (for example, how many people open a screen). It doesn't use cookies, isn't used to identify you or to show you ads, and isn't loaded inside the iOS or Android apps.
• Website analytics on asvabify.com through Google Analytics 4: pages visited, how you arrived (for example, a search engine), approximate location (country/city), device and browser, and actions such as using the AFQT calculator, leaving your email, or clicking through to the course or the App Store. We use it to understand which pages help people, not to show you ads. It is not used on asvabify.app or inside the iOS or Android apps.
• Advertising measurement on asvabify.com through the Meta Pixel: the pages you visit, and whether you leave your email or click through to the course or the App Store. The same events are also sent from our server (Meta's Conversions API, through a Cloudflare Worker that we run) with your IP address and browser type, and, if you leave your email, a scrambled (SHA-256 hashed) version of it — never the email itself. Meta uses this to measure our ads on Facebook and Instagram and to show them to people likely to find the course useful. It is not used on asvabify.app or inside the iOS or Android apps, and you can turn it off (see section 2).
• App updates in the iOS and Android apps. The apps can receive updates to their content and interface without going through the App Store or Google Play. To do this, they use an update component called Capgo (see the provider table in section 4) and ask our own update service on Supabase whether a newer version exists. With each check, the component sends the platform (iOS or Android), a device identifier, the app's identifier and version numbers, the operating system version, the component's version, whether the device is an emulator, whether this is a production build, how the app was installed, and the update channel. Our update service reads only the platform, the app version numbers and the app's identifier to decide which version to give you, and does not store anything from the request. In the iOS version currently on the App Store (1.0.3), the same component also sends usage statistics (device identifier, app version and platform) to Capgo's statistics service, plugin.capgo.app. Newer builds of the app have that turned off.

1.6 Notifications

• If you allow notifications in the iOS app, we store your device's push token so we can send you study reminders and important updates through Apple Push Notification service. We also keep a record of which day and which type of reminder we sent you. You can turn them off at any time in Settings → Notifications → ASVABIFY; the token stops working when you do, or when you delete the app.

1.7 Emails we send you

• We keep a record of the emails we send: the address, which email it was, its delivery status, and the data filled into it.

We don't collect your precise location, biometric data, or scan your contacts or photos.

2. Cookies and local storage

Apart from Google Analytics and the Meta Pixel on asvabify.com described below, the Service does not use cookies for advertising or tracking. We use browser localStorage (not a cookie in the traditional sense) to store, directly on your device: your session; your language (the one you choose in Profile → Settings, English or Spanish) and theme preferences; a copy of your progress; where you left off in a lesson; your answer to the AI permission prompt (section 5); and which one-time messages you've already seen (so we don't show them twice). The language setting lives on your device; when the app asks us for lessons, audio or an AI-written text, it tells us which language to use. The app also keeps the course content it has downloaded in your device's cache, one copy per language. If you clear site data in your browser, or delete the app, you'll need to sign in again.

On asvabify.com only, Google Analytics sets first-party cookies (_ga, _ga_*) to count visits and tell new visitors from returning ones. They are not used for advertising. You can block them in your browser settings or with Google's opt-out add-on: https://tools.google.com/dlpage/gaoptout

On asvabify.com only, the Meta Pixel sets a first-party cookie (_fbp) and sends the visit data described in 1.5 to Meta, which uses it for ad measurement and targeting under its own privacy policy (facebook.com/privacy/policy). To turn it off on your browser, open asvabify.com/privacy?no-rastrear=1 — the Pixel will no longer load on this browser (to turn it back on: asvabify.com/privacy?no-rastrear=0). If your browser sends a Global Privacy Control signal, the Pixel never loads. You can also manage how Meta uses your activity for ads in your Facebook or Instagram ad settings.

Typefaces (Google Fonts) load from Google's own servers; that means your browser requests those files directly, which shares your IP address with Google as a normal part of how the internet works — we don't use this to identify you.

3. What we use your information for

• Giving you access to the course, in the language you choose, and syncing your progress across devices.
• Delivering the lessons and the course audio.
• Processing your payments and activating your plan.
• Computing and showing you your personalized study plan — including, if you allow it, sending your study information to an AI provider to calculate and write up the plan (section 5).
• Writing feedback on your guided-subtest results (section 5).
• Sending you service emails and announcements about ASVABIFY (for example, a price change or a new feature), and, in the iOS app, study reminders if you allow notifications.
• Sending you free educational content if you left your email (you can unsubscribe any time).
• Updating the apps' content and interface without a new App Store or Google Play release.
• Detecting and preventing abuse: for example, stopping a free account from bypassing the free-sample limit, or someone from trying to download paid content without an active subscription.
• Complying with legal obligations.

We never sell your personal information. Apart from the Meta Pixel on asvabify.com (sections 1.5 and 2), which you can turn off, we do not share it with anyone so that they can advertise to you.

4. Who we share information with

We use the following providers to run the Service. Each one only receives what it needs for its specific job:

We don't share your information with any other third party unless required by law (for example, a court order), or when necessary to protect our legal rights.

5. AI-powered features

We use Anthropic, our AI model provider, in two features. Both answer in the language the app is set to. These uses are also subject to Anthropic's privacy policy.

Before sending anything to Anthropic, in either feature, the app asks for your permission. You can change your answer any time in Profile → Settings; it is stored on your device.

Your personalized study plan. If you say no, you get a plan built from fixed rules and nothing is sent to Anthropic. If you say yes, the plan uses two calls:

• The plan calculation sends: your diagnostic result (how many you got right, out of how many, the percentage, and the breakdown by area); how you describe your English and your math; your pace (minutes per day and days per week); whether you have already taken the exam; what you find hard; when you study; why you are studying; when your exam is and its date; your target AFQT score; and, if you entered it, your last exam (its date, format, and percentile and level on each subtest).
• The paragraph that explains the plan sends your whole study profile (everything listed under "Study profile" in 1.2, plus the plan the app computed from it), without the name you typed in About you, up to a size limit.

In both calls we do not send your name, email or account details.

Feedback on a guided subtest. When you finish a guided subtest, the app sends Anthropic that result: which subtest it was, how many questions you answered and got right out of the total, and up to 8 of the topics you did worst on and up to 6 of the topics you did best on (as topic codes such as "M3.S15"). We do not send your name or email. If you said no to the permission, nothing is sent and you see your result without the feedback.

6. Security

• All communication between your device and our servers is encrypted (HTTPS).
• Your data in our database is protected with row-level security (RLS): technically, even the app's public key can't read another user's information — every query is scoped to your own account.
• We never store credit card numbers at any point; that's handled by Stripe, which is PCI-DSS compliant.
• Administrative access to accounts is limited to the owner and the team members we authorize for each area, and admin actions are logged in an audit trail.

No system is 100% secure, and we can't guarantee absolute security — but we take reasonable measures to protect your information.

7. How long we keep your information

We keep your information while your account is active. If you buy a plan and it expires, your progress and profile stay saved (in case you come back), but your access to paid content stops. If you delete your account (section 10), we delete what is listed there; section 10 also lists what stays.

8. Children

The Service is not directed at children under 13, and we don't knowingly collect information from that age group. Users 13-17 need permission from a parent or guardian to use the Service — see section 2 of our Terms. If you're a parent or guardian and believe your child under 13 gave us information without your permission, contact us and we'll delete it.

9. Your rights

Regardless of where you live, you have the right to:

• Access the information we have about you.
• Correct inaccurate information.
• Delete your account and your information (section 10).
• Unsubscribe from newsletter emails, using the link in every email.

If you live in California

The California Consumer Privacy Act (CCPA/CPRA) gives you the right to know what categories of information we collect (section 1), to request deletion, and to not be discriminated against for exercising these rights. We do not sell your personal information. On asvabify.com only, the Meta Pixel sends visit data to Meta, which uses it for ad measurement and targeting (sections 1.5 and 2); California law may treat that as "sharing" for advertising. To opt out, use the link in section 2 or send a Global Privacy Control signal from your browser, which the Pixel honors by not loading. To exercise any of these rights, write to hello@asvabify.com.

10. How to delete your account

You can delete your account yourself, at any time, from Profile → Delete account, inside the app. When you confirm:

• Your user is permanently deleted.
• The following are automatically deleted in cascade: your progress, study days, study profile, access status, plan and purchase records, push token, record of reminders sent, AI-use counts, and record of free explanations opened.
• This action cannot be undone.

Some things are not deleted with your account: the email you left in the newsletter form; the record of the emails we sent you (section 1.7); records of the administrative actions taken on your account; the transaction identifiers from the payment events that Stripe and Apple have sent us; the record of promotional banners shown; and the record of a promotional code's use, which stays without a link to you. What Stripe, Apple and Google keep on their side is governed by their own policies. If you want any of these deleted, write to hello@asvabify.com from the email associated with your account.

Deleting your account does not cancel a subscription bought through the App Store or Google Play — cancel it there. If you subscribed on the website, cancel it first from your profile before deleting the account.

If you'd rather request deletion by email instead of doing it yourself, write to hello@asvabify.com from the email associated with your account and we'll handle it within a reasonable timeframe.

11. Where your data is processed

Our providers (Supabase, Stripe, Vercel, Cloudflare, Resend, Anthropic) run infrastructure in the United States. If you write to us from outside the US, your information will be transferred to and processed in the United States.

12. Changes to this policy

We may update this policy from time to time. If a change is material, we'll announce it in the Service before it takes effect. The "Last updated" date above always reflects the current version.

13. Contact

For any question about this policy or your information: hello@asvabify.com.