Privacy Policy

1) Scope & Who We Are

MasteryExamPrep.com and the Mastery™ exam-prep apps are operated by Tokenizer Inc. (“we”, “us”, “our”). This Policy explains what we collect, how we use it, and the choices you have. It applies globally and includes jurisdiction-specific notes below.

2) Data We Collect

3) How We Use Data

• Provide and improve features (practice, analytics, syncing, error recovery).
• Operate subscriptions (receipt validation, restore purchases).
• Personalize study plans and recommendations.
• Security, fraud/abuse prevention, and performance.
• Aggregate, privacy-friendly metrics to improve content and UX.
• Legal, accounting, and tax compliance.

Legal bases (where applicable): consent, performance of a contract, legitimate interests (security, product improvement), and legal obligations.

4) Sharing & Processors

• Service providers: Firebase/Google Cloud (auth, database, functions), hosting/CDN, email, privacy-preserving analytics (if enabled). They process data under our instructions.
• App stores: Apple App Store / Google Play for billing and distribution.
• Enterprise customers (if applicable): for managed deployments, we may share usage/progress with your organization’s admins per agreement.
• Legal & safety: to comply with law, enforce terms, or protect rights, property, or safety.
• Business transfers: in a merger, acquisition, or asset sale, data may transfer as permitted by law.

5) Retention

• Account & learning data: kept while your account is active; deleted upon verified request or in-app deletion (subject to brief backup cycles).
• Purchase records: retained as required for fraud prevention and tax/audit obligations.
• Website logs: ~30 days (longer if investigating incidents).
• Support emails: typically retained while the conversation is active or as required by law; deleted on request where feasible.

6) Security

We use administrative, technical, and physical safeguards appropriate to the data and risks (e.g., encrypted transport, access controls, environment segmentation, monitoring). No system is perfectly secure; please notify us promptly if you suspect unauthorized activity.

7) Cookies & Tracking

We use a small number of first-party cookies/technologies to operate our sites and understand usage. We do not run third-party ad networks or cross-site advertising.

Our mobile apps do not use third-party advertising SDKs. App diagnostics/analytics are used to improve stability and features.

8) Your Privacy Rights

9) International Data Transfers

We may process and store data in Canada, the United States, and other countries where our providers operate. When transferring personal data from the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses, as applicable.

10) Enterprise (B2B) Disclosures

For enterprise deployments, we typically act as a processor for end-user learning/assessment data and as a controller for account, billing, and platform operations data. A Data Processing Addendum (DPA) is available upon request.

11) Changes & Contact

We may update this Policy to reflect product, legal, or operational changes. We will revise the “Last updated” date and, where required, provide additional notice.

If you have an unresolved privacy concern, you may have the right to contact your local data protection authority.