Privacy

What is collected, and what is not.

The honest summary: your studying stays on your device, your money is handled by Stripe, and this site runs no ads, no analytics, and no trackers. The rest of this page is the detail behind that sentence.

Your study data never leaves your device

Drill history, answers, scores, streaks, planner sessions, focus ratings and settings are stored in your own browser, on your own device, using local storage. They are not uploaded, not backed up to a server, and not visible to us or anyone else. Clearing your browser's data for this site erases them permanently — there is no copy anywhere to restore from, which is the price of them being genuinely private.

The AI tutor runs on your device

The tutor downloads a language model once — a large file, fetched from the model host's content delivery network — and then runs it entirely on your hardware. What you type to it and what it answers are processed locally and never transmitted. We could not read your tutor conversations if we wanted to; they do not exist anywhere but your device.

Speaking a definition uses your browser's speech recognition

The optional "Say it first" feature in the flashcard drill listens through your microphone only while you hold it on, and only after you grant microphone permission. The transcription is performed by your browser's built-in speech recognition, which in browsers such as Chrome and Edge may send the audio to the browser maker's servers for processing under their privacy policy. We never receive, store, or transmit the audio or the transcript — what you said is compared to the definition on your device and discarded when you move to the next card.

If you create an account

Accounts exist so purchases can follow you between devices. Creating one stores your email address and a securely hashed password with Supabase, our authentication and database provider. Signing in on a device keeps a session token in that browser's local storage. We use your email to sign you in, to send account emails such as confirmation links, and to attach what you have bought to you. It is not used for marketing and is not sold or shared for anyone else's purposes.

If you buy something

Payment happens on Stripe's checkout pages. Your card number is entered on Stripe's systems and never touches ours — we cannot see it and do not store it. What we receive and keep is what is needed to honour the purchase: your email, a Stripe customer reference, which plan or book you bought, and whether the subscription is active. Stripe processes your payment data under its own privacy policy and its own legal obligations as a payment processor.

Purchased books carry your name

Every ebook you download is stamped, at the moment of download, with the email address of the account that bought it. That mark is in the file you receive. It exists so that a copy of a book can be traced to the purchase it came from; it is the only place your details travel inside a product.

If you use the contact form

The form sends the name, email address and message you type. Submissions are collected by Netlify Forms, our hosting provider's form service, and used only to reply to you. They are not added to any mailing list.

What the infrastructure sees

Like almost every website, the services this site runs on keep short-lived technical logs. Netlify (hosting) and Supabase (accounts, database, and the functions that serve paid content) see standard request data such as IP addresses in their server logs. The pages also load fonts from Google Fonts and a small number of code libraries from public CDNs — your browser makes those requests directly, which discloses your IP address to those services, as it does to any server your browser contacts. None of these are used by us to track you.

No ads, no analytics, no tracking

This site runs no advertising, no analytics scripts, and no third-party trackers, and sets no tracking cookies. We do not know how long you studied, what you got wrong, or which pages you read — by design, that information stays with you.

We do look at visitor counts, and we want to be exact about how. Netlify, which hosts the site, offers a summary built from the server logs described above — how many times a page was requested, which pages were most requested, and which sites linked here. It runs entirely on Netlify's side: nothing is added to the pages, nothing runs in your browser, no cookie is set, and no profile of you is built or shared. What we see is a count, never a person.

Your rights and choices

Your study data you control directly: clear the site's data in your browser and it is gone. For anything we hold — your account, your purchase records, contact-form messages — you can ask for a copy, a correction, or deletion through the contact form, and it will be actioned. Deleting your account removes your email and profile from our systems; records of payments already made are retained by Stripe as financial regulations require. Depending on where you live, these rights may also be backed by law (such as the GDPR in Europe or the CCPA in California); we honour the requests either way.

Children

These are professional licensing exam study tools, not services directed at children under 13, and we do not knowingly collect personal information from them.

Changes

If how this site handles data changes, this page changes with it, and the date below moves. A change that matters — a new category of data collected, a new party it is shared with — is the kind of thing the page will say plainly rather than bury.

Who operates this

BIGHEAVYINK, operated from the United States. The fastest way to reach us about anything on this page is the contact form.

Last updated: September 17, 2026