Privacy Policy

1. Information We Collect

We collect information in three ways: information you give us directly, information collected automatically as you use the services, and information from the third-party providers we rely on to operate.

1.1 Information You Provide

• Contact data, such as your name and email address, when you create an account or contact support.
• Account sign-in details, managed by our authentication provider. We do not store your password.
• Study preferences, such as which exam you are preparing for and your target exam date.
• Payment information, which is collected and processed by our payment processor. We do not store full card numbers.
• Support correspondence, including the content of messages you send us.

1.2 Information Collected Automatically

• Usage data, such as the questions you attempt, your answers, and your progress through the material.
• Device data, such as your operating system, browser type, IP address, and approximate location derived from it.
• Referral and campaign data, such as the page you first landed on and any campaign parameters in the URL, which we use to understand which content brings candidates to us.
• Cookie data, described in the Cookies section below.

2. How We Use Information

• To provide the services, including selecting practice questions and tracking your progress.
• To create and secure your account, and to authenticate you when you sign in.
• To process payments and manage subscriptions.
• To send transactional messages about your account, billing, and study activity.
• To send marketing messages where you have not opted out. Every marketing email includes a one-click unsubscribe link.
• To measure and improve the services, including understanding which pages and features candidates find useful.
• To detect, investigate, and prevent abuse, fraud, and security incidents.
• To comply with legal obligations.

3. Legal Bases for Processing

Where the GDPR applies to you, we process personal data on the following bases: performance of a contract, where processing is necessary to deliver the services you have signed up for; legitimate interests, such as securing the services and understanding how they are used; consent, where you have given it, for example for marketing email; and legal obligation, where we are required to retain or disclose information.

4. How We Share Information

We do not sell your personal information. We share it only in the circumstances below.

• Service providers who operate the platform on our behalf, including hosting, authentication, database, email delivery, payment processing, and analytics providers. Each is bound to use the data only to provide their service to us.
• Legal and safety disclosures, where we reasonably believe disclosure is required by law or necessary to protect rights, property, or safety.
• Business transfers, where the business or its assets are acquired, in which case this policy continues to apply to the transferred information until it is replaced.

5. Cookies and Similar Technologies

We use first-party cookies to keep you signed in, to remember which page you first arrived on, and to record which link you used to start a signup. That last pair is how we understand which of our study content actually helps candidates find us.

We also use analytics cookies from third-party providers to measure page performance and aggregate usage. You can block or delete cookies in your browser settings, though parts of the service may not work correctly without them.

6. Data Retention

We keep account and study data for as long as your account is active. After you delete your account we remove or anonymise personal data within a reasonable period, except where we must retain records to comply with legal, tax, or accounting obligations, or to resolve disputes.

7. Your Rights

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to delete it, to object to or restrict certain processing, to receive a portable copy, and to withdraw consent where processing is based on consent.

To exercise any of these rights, email support@miloprep.com. We may need to verify your identity before acting on a request. We will not discriminate against you for exercising a privacy right.

8. Security

We use technical and organisational measures to protect your information, including encryption in transit, access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. International Transfers

We operate from the United States and our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards for transfers of personal data out of your region.

10. Children

The services are intended for adults preparing for professional examinations and are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be communicated to registered users by email or an in-product notice.

12. Contact Us

If you have questions about this policy or how we handle your information, email support@miloprep.com.