Privacy Policy

1. About this policy

Alpha Test Prep LLC, an Ohio limited liability company, operates Alpha Test Prep for the United States market. This Privacy Policy explains how we handle information when you use our website, accounts, lessons, practice tests, reports, study tools, community features, and related services. Contact support@alphatestprep.com with “Privacy request” in the subject line.

This notice describes our service. External websites and providers also have their own privacy notices. Optional features have separate controls; reading this policy does not itself opt you into notifications, public sharing, microphone use, or automated writing evaluation.

2. Account, profile, and technical information

We use Supabase to authenticate email/password and supported social sign-ins, including Google when offered. We receive an authenticated account identifier, sign-in email, verification status, and the profile information made available for that sign-in. Passwords are handled by the authentication service; do not send them to support. We do not receive access to your Google email messages, contacts, or other Google files simply because you use Google sign-in.

Your student profile includes the name, email, and grade you provide. Profile edits do not change the verified sign-in identity or transfer ownership of learning records. We also process technical information needed to operate and protect the service, such as IP address, browser/device information, request times, authentication events, and error or security records.

3. Answers, learning history, and recommendations

We store the work and settings you choose to save, including test and practice answers, essays or written work, supported drawings, scores, tagged skills, lesson checks and completions, mistake review, goals, planner tasks, notes, time zone, and preferences. Saved sessions let you resume work and retain historical reports, including reports from older question editions.

We use these records to deliver lessons and tests, check answers, produce reports and downloads, recommend practice, and show learning patterns. Learning Path can also store assessment answers, confidence, reflections, question-family references, and difficulty routing. These are instructional signals, not validated diagnoses, admissions decisions, or official examination results.

Question timing estimates time while a question is selected and the test is visible and focused, including revisits. Study-time measurement uses visibility, focus, and recent interaction to estimate active intervals. Timing records may have gaps. The timers do not record your screen, typed keystrokes, pointer paths, or attention. Your submitted answers are saved separately through the learning features.

4. Optional sharing and community features

Friends profiles can include a handle, display name, sharing choice, follow requests, accepted connections, and blocks. Someone who knows your handle may locate an available profile. With sharing enabled and an approved connection, followers can see shared completion information such as lesson/test titles, exam categories, dates, and completion counts. This sharing does not provide private answers, scores, email, grade, notes, or billing information.

Daily Challenge saves your private attempt. If you opt into its leaderboard, participants can see the displayed alias, avatar, score, and rank. You can change participation and sharing choices through the available controls. Turning off sharing cannot recall screenshots or copies already received.

You can explicitly share a saved report with a named recipient for the selected access period and revoke future access. Writing-review requests share the selected response, question/source materials, review guide, and request note with the exact authenticated recipient email you choose. Human writing-review access lasts seven days unless revoked sooner; feedback remains in your account. Recipients may retain information they have already seen or downloaded. Sharing links do not make all your learning records public.

5. Optional automated writing evaluation

When automated writing evaluation is available, it runs only after you request it and confirm the evaluation. The selected response, question and relevant source materials, rubric, and instructional guide are sent to OpenAI through its API to generate practice feedback. Your account email and account identifier are not deliberately included in that evaluation payload, but information you put in your writing may be included.

We save the resulting feedback, rubric estimates, model/method information, and evaluation timestamps with your account. The integration requests that the API response not be stored as an application response object; this is not a promise that the provider keeps no operational or safety records. Provider processing and retention depend on its applicable API terms and settings. Avoid unnecessary sensitive information in submitted writing. Automated feedback can be wrong and does not replace human or official exam grading. If the feature is unavailable, requesting it does not send your response to an evaluation provider.

6. Optional microphone sound awareness

If you enable sound-awareness practice and grant browser microphone permission, the feature analyzes live sound locally to flag possible interruptions. It does not record, save, or upload microphone audio. It is not speech transcription, an official proctor, or a reliable identification of a particular device or sound.

You can stop listening at any time. Analysis stops when the session ends or the page closes; browser restrictions may interrupt it. Inform nearby people before enabling the microphone. A suspected sound alone does not invalidate a result. If you explicitly confirm an interruption and end a practice attempt, we preserve its account-linked invalidation record, timestamp, and latest saved answer snapshot. The attempt receives no score; prior completed results remain unchanged.

7. Notifications

Automatic email and browser push notifications are optional and off by default. Enabling them stores the channels, categories, time zone, quiet hours, reminder lead time, consent/acceptance timestamps, and settings revisions needed to apply your choices. Email notifications use your authenticated sign-in email.

Browser push requires separate browser permission. We store its endpoint, encryption keys, device label, and registration/disable information. Encrypted messages travel through the browser vendor’s push service. Our notification service worker does not intercept page requests or cache account pages. When email sending is available, Resend processes the destination and message needed for delivery.

Notifications use generic reminders and links rather than scores, essays, answer text, or tutor notes. They can be visible on shared devices. Disable channels or devices in Notifications and manage permission in your browser. Changing preferences cancels pending messages, but messages already accepted by a provider cannot be recalled. Delivery can be delayed, duplicated, or blocked. We retain up to 31 days of completed operational delivery outcomes; provider acceptance does not establish inbox receipt or device display.

8. Group access, tutoring, and support

Group orders and invitations can include purchaser/contact details, group name and type, products, seat counts, quote requests, notes, recipient emails, redemption status, and access dates. An organizer may supply your invitation email before you sign up. Organizers can manage seats and invitation information, but a purchase does not automatically give them your private answers, scores, or learning reports.

Tutor applications can include contact details, region/time zone, qualifications, subjects, experience, availability, proposed rate, portfolio links, and a résumé. We retain review status, dates, and reviewer notes. Applications are available to the applicant and authorized reviewers; they are not automatically published as tutor profiles.

Optional tutoring requests share the topic, note, proposed time, and duration with the tutor sign-in email you select. Scheduling is separate from any tutoring payment or engagement. Support correspondence includes the contact information, messages, and attachments you send. Do not send passwords, full card details, government identification numbers, or unnecessary sensitive records.

9. Payments

When you purchase through hosted checkout, the payment provider receives the information needed to identify and process the transaction, such as contact email, product/plan, price, and internal references. Stripe and PayPal are supported where offered. Payment credentials are entered through the provider’s interface; our checkout integration does not collect or store full payment-card numbers or card security codes.

We retain transaction references, provider customer/subscription identifiers, amounts and taxes, status, paid-access dates, and cancellation/refund records as needed for access, reconciliation, support, fraud prevention, and applicable obligations. Test payments and previews on staging do not create production purchases or production access.

10. Cookies, device storage, and external tools

Essential cookies support authentication, security, and workspace preferences. Browser local/session storage can preserve unfinished tests, answer/timing backups, selected exams, pending saves, challenge progress, and dismissed reminders. Clearing site storage may remove unsaved work. Signing out ends the current browser’s authenticated session, but downloaded files and some device-stored backups can remain; take care on shared devices.

Fonts used by the platform are served with our site rather than fetched from Google Fonts. External links, social sign-in, payment pages, browser push services, and external tools you open can receive the technical information accompanying your requests and information you submit there.

The platform does not use advertising pixels or third-party behavioral-advertising analytics. We do not sell or rent learning records or use them for cross-context behavioral advertising. There is no separate application response to a Do Not Track signal. Optional product-usage telemetry follows the relevant preference; essential security and operational records are separate.

11. How information is used and disclosed

We process information to provide and secure accounts, deliver purchased or requested features, save and check work, generate reports, personalize study support, administer transactions, respond to requests, and investigate misuse or errors. We do not use an educational recommendation to make an official admissions, employment, credit, or military eligibility decision.

Cloudflare provides hosting, application/database infrastructure, and file storage. Supabase provides authentication. Supported social sign-in, payment, email, browser push, and optional writing-evaluation providers process the information described above when those features are used. Authorized operators and reviewers receive access needed for their duties. Other users receive information only through the relevant sharing, group, or community features.

We may disclose information in response to valid legal process, to protect rights or safety, or as part of a business transfer with appropriate safeguards and legally required notice. These circumstances do not authorize unrestricted disclosure of student records.

12. Retention, account closure, and deletion

Learning records remain associated with your account to support continued study, historical reports, and correction or support requests. Cancelling a subscription, signing out, receiving a refund, or closing a browser does not itself delete your records. Most learning and account records do not have a scheduled automatic expiry.

You may request account closure or deletion at support@alphatestprep.com. After appropriate verification, we review the records covered by the request and any information that must be retained for transaction, security, dispute, or legal purposes. Retention depends on the record’s purpose and applicable obligations; we do not promise one automatic deletion period for every record.

Provider logs and backups may follow separate retention cycles. We cannot remove copies already exported to your device or retained by an independent recipient. A website report download is not a complete export of all account information. Account-wide requests are handled through support rather than a self-service deletion or full-account export button.

13. Your choices and privacy requests

Use the available controls to edit your profile, manage sharing/connections, opt into or out of leaderboards and notifications, manage microphone permission, and download reports. You may also contact support@alphatestprep.com to request access, a copy, correction, deletion, or account closure, and to exercise applicable objection, restriction, portability, or authorized-agent rights.

Identify the account and request without sending passwords or unsolicited identity documents. We may ask for proportionate verification or evidence that you may act for someone else. We respond within periods required by applicable law, explain applicable exceptions or denials where required, and provide a way to ask us to review a decision. You may also contact the relevant privacy authority.

We do not unlawfully discriminate for exercising applicable privacy rights. Removing information needed for a feature can make that feature unavailable. Account closure does not itself cancel a recurring payment arrangement; cancel through Account & Billing or contact support about both requests.

14. Children and institutional use

The service is intended for people aged 13 and older. Students below the age of legal adulthood must have parent or legal guardian permission, and purchases must be made or authorized by an adult. We do not offer an under-13 account service or claim that ordinary account registration is verifiable parental consent.

If you believe we hold personal information about a child under 13, contact support@alphatestprep.com so we can review the account and take appropriate protective action, including deletion where required. Avoid sending additional sensitive child information in your initial message.

A school, parent, tutor, or organization buying seats does not automatically obtain a right to private student records. Institutional use may require separate agreements and permissions. We do not claim that a group purchase establishes FERPA compliance or that the service is certified under a privacy law.

15. Security, international processing, and changes

We use safeguards such as authenticated access, account-linked records, and restricted reviewer permissions. No service can guarantee absolute security. Protect your credentials and devices and report suspected unauthorized access to support@alphatestprep.com.

Our providers may process information outside your state or country. Applicable international-transfer requirements and rights depend on the circumstances and law. We do not promise that all information stays in one location.

The date above identifies the current version. We will provide additional notice or obtain permission for material changes where required. A revised policy does not by itself supply consent where a separate choice or agreement is necessary.

16. Optional TOEFL speaking evaluation · October 29, 2026

TOEFL speaking tasks let you record or upload audio and save it with your response. This is separate from local sound-awareness monitoring. Recording or saving a response does not itself request automated grading. After saving a report, you may explicitly request an unofficial speaking evaluation.

When you request speaking evaluation, your browser converts a copy of the selected saved recording to a supported audio format. We send that copy, the question, relevant stimulus text and the prompt-specific review guide to OpenAI through its API. Your account name, email and identifier are not deliberately included, but information spoken in your recording may be included. Avoid unnecessary sensitive information and obtain appropriate permission before submitting anyone else’s voice.

We keep the original saved recording and save the resulting practice feedback, estimated transcript, rubric ratings, model/method and capture information with your account. The integration requests that the API response not be stored as an application response object; provider operational or safety retention follows its applicable API terms and settings. Delivery feedback uses the audio, and the transcript can contain errors. These optional estimates can be wrong, remain separate from objective accuracy and are not official ETS scores, TOEFL band predictions or certification. Unassessable audio or service failures receive no invented score. Saved records and feedback are covered by the account privacy-request process.