This Privacy Policy explains how PrepVo ("we", "us") collects, uses, shares, and protects your personal information when you use our exam preparation service (the "Service"). We comply with the Philippine Data Privacy Act of 2012 (RA 10173) and apply the same standards globally.
1. Information We Collect
Account information: your name, email address, and password (or Google account identifier if you sign in with Google).
Study activity: the questions you attempt, your answers, scores, time spent, session history, and weak areas. This information is used to power your dashboard and personalize practice.
Submissions: Writing essays you submit for scoring, and Speaking audio recordings you submit for scoring.
Billing information: if you upgrade to Premium, your payment details are collected and processed directly by PayMongo. We receive only a confirmation that your payment succeeded, the plan you purchased, and a transaction identifier. We never see or store your full card number or e wallet credentials.
Technical information: device type, browser, IP address, language, and basic usage analytics needed to operate and secure the Service.
2. How We Use Your Information
- Provide the Service: deliver practice content, track progress, generate instant explanations, and produce instant scoring for Writing and Speaking.
- Manage your account, subscriptions, and access tier.
- Process payments through PayMongo and prevent fraud.
- Improve the Service by analyzing aggregated, de identified usage patterns.
- Communicate with you about account activity, billing, and important Service changes.
- Comply with legal obligations and enforce our Terms of Service.
3. Service Providers We Use
We share specific information with the following processors strictly to deliver the Service:
- Supabase (database, authentication, and storage). Hosts your account, study activity, and submissions.
- PayMongo (payment processing for GCash, Maya, and cards). Handles your payment details directly.
- Google (only if you choose to sign in with Google). We receive your email and basic profile.
- Third party language model providers (Anthropic and OpenAI). We send your submitted essay text or speech transcript to generate instant explanations and instant scoring. These providers process the content on our behalf and do not use your submissions to train their models, per their enterprise terms.
We do not sell your personal information to advertisers or data brokers.
4. Audio Recordings
Speaking submissions are recorded on your device, uploaded to our storage to generate a transcript and scoring, and retained so you can review your past attempts. You can delete any recording from your account at any time. Deleting your account removes all associated recordings within 30 days.
5. Data Retention
We keep your account information and study activity for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are legally required to keep certain records (for example, payment receipts may be retained up to 10 years for tax compliance).
6. Your Rights
You have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Request deletion of your account and personal data.
- Export your data in a portable format.
- Withdraw consent for optional data uses.
- Lodge a complaint with the National Privacy Commission of the Philippines.
To exercise any of these rights, email privacy@prepvo.com. We will respond within 30 days.
7. Security
We use industry standard safeguards including encrypted connections (HTTPS), encrypted storage at rest through Supabase, and strict access controls. No system is perfectly secure, so we cannot guarantee absolute security. If we ever experience a data breach affecting your information, we will notify you and the National Privacy Commission as required by law.
8. International Data Transfers
Some of our service providers (such as Supabase and the language model providers) operate servers outside the Philippines. By using the Service, you consent to your data being transferred to and processed in these jurisdictions, which may have data protection laws different from your own. We require all providers to apply equivalent protections.
9. Children
The Service is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with information, please contact us at privacy@prepvo.com and we will delete it.
10. Cookies and Local Storage
We use cookies and browser local storage only for essential functions such as keeping you signed in and remembering your preferences. We do not use third party advertising cookies or cross site tracking.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version takes effect on the date shown at the top of this page. For material changes we will notify you by email or in app notice.
12. Contact and Data Protection Officer
For privacy questions or to exercise your rights, contact us at privacy@prepvo.com.