Privacy Policy
Last updated: 21 June 2026
This policy explains what personal data Prepfy ("we", "us") collects, why, and your rights. Prepfy (prepfy.co) is operated by an independent trader and is the data controller for your personal data. Contact: hello@prepfy.co.
What we collect
- Account data: your email address, display name, and password (stored hashed — we never see it).
- Exam interest: which exam you're preparing for, so we can tailor your experience.
- Usage data: the questions you attempt, answers, scores, sessions, and activity in the app — used to run the product and show you your progress.
- Payment data: handled by Paddle as Merchant of Record and seller of record. We do not receive or store your full card details; we receive confirmation of your purchase and limited billing information.
- Communications: emails you send us (e.g. replies to hello@prepfy.co).
- Technical data: basic logs needed to run and secure the service.
Why we use it, and our legal basis
- To provide the service (your account, access, progress) — performance of a contract.
- To send service emails (welcome, account and access information) — contract / legitimate interests.
- To take payment and meet tax/accounting obligations — contract / legal obligation (via Paddle).
- To secure and improve the service — legitimate interests.
- For marketing emails (study tips, offers, new exams) — only with your consent, which you can withdraw at any time. We are not sending these at launch.
Service providers
We use third-party service providers that help us operate the service and that process personal data on our behalf, each bound to protect your data. Paddle (Paddle.com Market Ltd) acts as our Merchant of Record and seller of record for payments. A list of the specific service providers we use is available on request to hello@prepfy.co. Some service providers may process data in countries other than your own; where they do, we rely on appropriate safeguards for international transfers.
How long we keep it
We keep account and usage data while your account is active and for a reasonable period afterwards, and payment/transaction records for as long as the law requires. You can ask us to delete your account and personal data.
Your rights
Depending on where you live, you can ask us to: access your data, correct it, delete it, restrict or object to processing, and (where applicable) receive it in portable form. To exercise any right, email hello@prepfy.co. We handle personal data in line with applicable data protection law and will honour the rights it gives you. You can complain to your local data protection authority.
Cookies
We use only the cookies needed to run the site and keep you signed in. We don't use advertising cookies. (If we ever add analytics or marketing cookies, we'll ask for consent first.)
Children
Prepfy is for qualified or training dental professionals and is not directed at children.
Changes
We may update this policy and will note the date above. Material changes will be communicated where appropriate.