Privacy Policy

Account information. When you create an account, we collect your name, email address, and password. If you sign up via OAuth (Google, Microsoft), we receive your name and email from the provider.

Usage data. We collect information about how you use RepDrills, including drill types attempted, scores, session duration, and feature interactions. This helps us improve the product and personalize your experience.

Device and browser data. We automatically collect your IP address, browser type, operating system, and device identifiers for security, analytics, and troubleshooting purposes.

Payment information. If you upgrade to a paid plan, payment is processed by our third-party payment processor (Stripe). We do not store your full credit card number on our servers.

Provide, maintain, and improve RepDrills and its features.

Personalize your drill recommendations and difficulty levels.

Process transactions and send related billing communications.

Send product updates, feature announcements, and optional marketing emails (you can opt out at any time).

Monitor and analyze trends, usage, and activity to improve user experience.

Detect, prevent, and address fraud, abuse, and technical issues.

Service providers. We share data with third-party vendors who assist us in operating the platform (hosting, analytics, payment processing, email delivery). These providers are contractually obligated to protect your data.

Legal requirements. We may disclose information if required by law, regulation, legal process, or governmental request.

Business transfers. In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.

With your consent. We may share information for other purposes with your explicit consent.

We do not sell your personal information to third parties.

We retain your account data for as long as your account is active or as needed to provide services. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

Anonymized and aggregated data (which cannot identify you) may be retained indefinitely for analytics and product improvement.

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL), encryption at rest, secure authentication, and regular security audits.

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

Access and portability. You can request a copy of your personal data at any time.

Correction. You can update your account information through your dashboard settings.

Deletion. You can request deletion of your account and personal data by contacting us.

Opt-out. You can unsubscribe from marketing emails at any time using the link in the email footer.

If you are in the EU/EEA, you have additional rights under GDPR, including the right to restrict processing, object to processing, and lodge a complaint with a supervisory authority.

We use essential cookies to keep you logged in and maintain your session. We also use analytics cookies (such as Google Analytics) to understand how visitors use our site. You can manage cookie preferences in your browser settings.

RepDrills is not intended for children under 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of RepDrills after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or your personal data, contact us at privacy@repdrills.com.