Privacy Policy

BCBA Exam Prep ("we," "us") provides TCO-weighted mock exams, fluency drills, and an ethics study module for BCBA exam candidates. This policy explains what data we collect through the app, why we collect it, and the choices you have over it.

Account information. When you create an account we store your email address, an optional display name, and your authentication credentials via Supabase Auth (we never see or store your raw password). If you subscribe to a paid plan, we store your subscription tier, status, exam credit balance, and Stripe customer/subscription identifiers — Stripe itself handles and stores your card details; we never see your full card number.

Study activity.We store your exam and drill attempt history, composite and per-domain scores, spaced-repetition review state for the fluency library, and a record of which questions you've already seen so we can avoid repeating them.

Anonymous sample usage. If you try a sample exam before creating an account, we may record a hashed version of your IP address (never the raw address) to apply a fair-use cooldown, and — if Cloudflare Turnstile is enabled — a bot-check verification, to keep the free sample usable for real candidates.

Product analytics.We may mirror a small set of product events (for example: a sample exam was completed, a drill was completed, a signup was attributed to a referral, or a rate limit was hit) to PostHog and/or Plausible, tied to an anonymous session identifier or your user ID. This is optional infrastructure — it is only active where we've configured it — and is used to understand product usage in aggregate, not to build an advertising profile.

Email.If you opt in to spaced-repetition due-review reminders from your account settings, or if you're invited to an agency organization, we send transactional email via Resend using the address on file.

• Generate and serve mock exams, drills, and study content
• Score your attempts and build your progress history and study roadmap
• Personalize adaptive quizzes and avoid re-serving questions you've already seen
• Process subscription payments and manage exam credits
• Send account-related and opted-in transactional email
• Detect and prevent abuse of free-tier usage
• Understand aggregate product usage to improve the app

Practice questions and explanations may be generated using third-party AI providers (OpenAI and/or Anthropic). When we generate content, we send the provider the study domain, topic, and difficulty parameters needed to write a question — not your name, email, or account identifiers. AI-generated questions pass through an automated fact-checking gate before being served, but as with any AI-generated study material, occasional inaccuracies are possible; it is a study aid, not a substitute for official BACB materials.

We don't sell your personal information. We share data with the following service providers only as needed to run the product:

• Supabase — database hosting and authentication
• Stripe — subscription and payment processing
• OpenAI and/or Anthropic — AI-generated practice questions
• Cloudflare Turnstile — bot detection on the free sample exam
• Resend — transactional and opted-in reminder email
• PostHog and/or Plausible — optional aggregate product analytics
• Vercel — application hosting

The pool of AI-generated practice questions is purged automatically on a rolling basis (90 days by default) and is separate from your personal study history, which we keep until you delete it or your account.

From your account page, you can export a copy of everything we hold about you (profile, exam and drill history, and review state), or permanently delete your account. Deletion cancels any active subscription and removes your study history and profile; it requires typing your account email to confirm and cannot be undone. Agency organization admins are asked to transfer ownership first, since deleting an admin account would otherwise remove access for every seat member.

BCBA Exam Prep is intended for adult BCBA exam candidates and is not directed to, and should not be used by, anyone under 18.

We may update this policy as the product changes. We'll update the "last updated" date above when we do; for material changes, we'll make a reasonable effort to notify account holders by email.

Questions about this policy or your data? Email team@bcbaexamprep.com.