This Privacy Policy describes how Supply Prep (the "Application," "App," "we," "us," or "our") handles information in connection with your use of the Application on iOS and Android devices.
This Application has been built on a privacy-by-design principle: we do not intentionally or directly collect, transmit, or store any personal information on our own servers. All data generated during your use of the Application is stored exclusively on your device and remains entirely under your control.
This Privacy Policy complies with:
• General Data Protection Regulation (GDPR — EU/EEA/UK)
• French Data Protection Act — Loi Informatique et Libertés (CNIL)
• California Consumer Privacy Act (CCPA — USA)
• COPPA — Children's Online Privacy Protection Act (USA)
• PIPEDA — Personal Information Protection and Electronic Documents Act (Canada)
• Privacy Act 1988 (Australia)
• Apple App Store privacy requirements
• Google Play Store privacy requirements
We do not collect, receive, or process:
• Personal identification information (name, email, phone number, date of birth)
• Account credentials — no account or registration is required
• Location data (precise or approximate)
• Device identifiers (IDFA, GAID, IMEI, or similar)
• Camera, microphone, or contact data
• Financial or payment information
• Biometric data
• Behavioral tracking or browsing history
• Crash logs or diagnostic data transmitted to our servers
We do not directly collect or have access to IP addresses. Such data may be collected by platform providers (Apple, Google) or third-party services (e.g., RevenueCat) as part of their own infrastructure, subject to their respective privacy policies.
The Application stores the following data exclusively on your local device using on-device storage (AsyncStorage). This data is never transmitted to us or any third party:
• Quiz scores and session history
• Correct / incorrect answer records
• Spaced repetition review schedule
• Flashcard progress (mastered, to review, favorites)
• Application settings and preferences
• Bookmarked questions and terms
This data is automatically deleted when you uninstall the Application or manually reset it via Application settings.
When you download, install, or make in-app purchases, Apple (App Store) and Google (Google Play) may independently collect information pursuant to their own privacy policies. We have no access to or control over that data.
Apple Privacy Policy: https://www.apple.com/legal/privacy/
Google Privacy Policy: https://policies.google.com/privacy
Because we do not intentionally or directly collect or store personal data on our own servers, we do not use, analyze, profile, or process any personal information about you.
Locally stored data is used solely by the Application on your device to:
• Display your study progress, statistics, and performance metrics
• Implement the spaced repetition algorithm (SM-2) for optimized memorization
• Resume quiz sessions and maintain study continuity
• Apply your preferences and settings across sessions
Since the Application does not transmit or process personal data on external servers, the standard GDPR legal basis framework (Art. 6 GDPR) does not directly apply to our data handling practices.
All processing occurs locally on your device and is governed by your device's operating system, not by us. To the extent applicable, processing is based on legitimate interest (Art. 6(1)(f) GDPR) — specifically, the legitimate interest of providing core Application functionality and enabling a personalized study experience, which is strictly necessary and proportionate to the Application's educational purpose.
We do not:
• Sell your personal information — to anyone, ever
• Share, rent, trade, or disclose your data to third parties
• Use your data for advertising, profiling, or marketing
• Disclose your data to data brokers or analytics companies
We have no access to data stored on your device. We cannot share what we do not hold.
The only exception would be if required by court order or applicable law, and solely to the extent strictly required.
The Application does not integrate third-party analytics tools, advertising networks, crash reporting services, or social media plugins.
RevenueCat: The Application uses RevenueCat, a third-party subscription management service, to process and manage in-app purchases. RevenueCat may collect purchase history and subscription status in order to verify and manage your premium access. RevenueCat may also process limited technical data (such as device identifiers and IP address) strictly for purchase validation and fraud prevention. RevenueCat does not have access to any study or quiz data stored on your device. Their privacy policy is available at: https://www.revenuecat.com/privacy
Platform operators: Apple (App Store) and Google (Google Play) are the only other third parties involved, as described in Section 2.
The Application offers premium content accessible through in-app purchases. All payment transactions are processed exclusively by Apple (App Store) or Google (Google Play). We do not receive, process, access, or store any payment card information, billing details, or financial data. Purchase and subscription management is handled entirely by the applicable platform operator and RevenueCat.
We do not retain personal data, as we do not collect it.
Locally stored Application data is retained on your device until:
• You manually reset or clear it within the Application settings
• You uninstall the Application from your device
• You clear the Application's data through your device's system settings
Under the GDPR and the French Loi Informatique et Libertés, you have the right of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, and the right to object.
Since we hold no personal data on our servers, there is no data held by us to access, correct, or erase upon request.
You may lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr
California residents have the right to know what personal information is collected (we collect none), to know whether it is sold (it is not), and to opt out of the sale of personal information (no sale occurs). We do not sell the personal information of California residents.
All data stored locally on your device is deleted automatically when you uninstall the Application, or can be cleared manually via the Application settings. No action from us is required.
If you wish to delete any data associated with in-app purchases (purchase history, subscription status), you may contact RevenueCat directly in accordance with their privacy policy at: https://www.revenuecat.com/privacy
We have implemented a privacy-by-design and security-by-default approach. Because we do not intentionally or directly collect or store personal data on our own servers, there is no server-side data breach risk associated with our systems. This significantly reduces the risk of server-side data breaches affecting your personal information.
Data stored on your device is protected by your device's built-in security mechanisms, including device encryption and screen lock protections. We recommend keeping your device software up to date and using a strong device passcode.
All data transmitted from the Application to RevenueCat is encrypted in transit using HTTPS (TLS).
This Application is designed for adults preparing for a professional certification. The Application is not directed at children under the age of 13 (or under the age of 16 in the European Union and France, pursuant to Art. 8 GDPR).
We do not knowingly collect personal information from children. If you believe a child has used the Application in violation of this policy, please contact us at the address below.
We do not perform international data transfers directly. However, third-party services such as Apple, Google, and RevenueCat may process data internationally under their own legal frameworks, including Standard Contractual Clauses (SCCs) pursuant to Chapter V GDPR where applicable. We encourage you to review their respective privacy policies for further information.
We reserve the right to update this Privacy Policy at any time to reflect changes in the Application or applicable law. Any changes will be effective upon posting the updated Privacy Policy within the Application or on the applicable distribution platform listing.
Your continued use of the Application following any update constitutes acceptance of the revised Privacy Policy.
For any questions, concerns, or requests relating to this Privacy Policy, please contact us at:
Email: hello@primisia.com
We will respond to your inquiry within 30 days of receipt, in compliance with applicable data protection law.