Privacy policy

This policy applies to the Get EPA 608 website, accounts, study tools and related support communications.

Information we collect

• Account information: email address, first name where you give one, authentication identifiers and account status.
• Learning activity: answers, scores, practice sessions, mock-exam attempts, flashcard and lesson progress, bookmarks and readiness data.
• Purchase and access information: product entitlement and transaction status. When checkout becomes available, a payment provider will process card details directly — we do not receive or store full card numbers.
• Technical information: IP address, browser and device information, request logs and security events, together with the cookies, browser storage and analytics identifiers described in our cookie policy.
• Communications: information you provide when you contact us.

How we use information

We use information to create and secure accounts; to save and personalise your study progress; to provide access you have purchased; to operate, troubleshoot and improve the service; to measure how the site is used so we can improve it; to respond to support and privacy requests; to prevent abuse; and to meet legal obligations.

Legal grounds and choices

Depending on where you live, we rely on performing our agreement with you, our legitimate interests in operating and securing the service, legal obligations, or your consent where consent is required. The free practice tests, study guide and flashcards can be used without an account, so you can assess the material before giving us anything at all. Analytics cookies can be blocked or deleted at any time using the methods in our cookie policy, without affecting your use of the service.

How information is shared

We share only what is needed with the providers that run the platform: Supabase for authentication and database hosting, Vercel for application hosting and delivery, and Google Analytics for usage measurement. A payment provider will be added when checkout opens. We may also disclose information to comply with the law, to protect rights and safety, or as part of a business reorganisation.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

International processing

Our providers may process information in countries other than your own. Where required, we rely on appropriate safeguards for those international transfers.

Retention and security

We keep information only as long as it is needed for the purposes above — maintaining an active account, meeting legal or accounting duties, resolving disputes and preventing abuse. Retention periods vary by record type. Access to your own data is enforced at the database level, so one account cannot read another's progress. We use reasonable technical and organisational safeguards, but no online service can promise absolute security.

Your privacy rights

Depending on your location you may have rights to access, correct, delete, restrict or receive a copy of your information; to object to certain processing; to withdraw consent; or to complain to a data-protection authority. These rights carry legal exceptions.

To make a request, email anthony@certcrush.app. We may need to verify your identity before we act.

Children

Get EPA 608 is not directed to children under 13 and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can investigate.

Changes and contact

We may update this policy as the service or the law changes; the date above shows the latest revision. Questions and requests can be sent to anthony@certcrush.app.