Privacy Policy

a) Account information

When you create an account or sign in, we collect:

• Your email address
• A unique user identifier
• If you sign in with Google: your Google profile name and the email associated with that account

b) Study & performance data

As you use the service, we store data related to your learning progress:

• Practice, full-length test, and vocabulary results (answers, scores, time spent)
• Progress and accuracy analytics
• Your onboarding survey answers (target exam date, current score, target score)
• Free-trial and subscription status

c) Payment information

Payments are processed by our payment provider, PortOne, and its connected processors (KG Inicis for KRW card payments; PayPal for international payments). For Korean card payments we collect the buyer name and phone number required by the card processor for payment confirmation. We do not collect or store your full card numbers. We receive only confirmation of payment and your resulting plan/entitlement status.

d) Device & usage data

Our hosting provider records standard server logs — IP address, browser type, and timestamps — used for security, abuse prevention, and reliability.

e) Data we do not collect

• Location data
• Photos, camera, or media
• Contacts or phone numbers
• Microphone or audio data
• Biometric data

We do not run advertising and we do not sell your personal data.

• Provide the service: track your progress, show analytics, and sync across devices.
• Personalize your dashboard using your exam date and score goals.
• Manage your free trial and subscription.
• Keep the service secure, reliable, and free of abuse.

a) Browser storage

Some progress is cached locally in your browser (localStorage) so the app works smoothly. This stays on your device unless you’re signed in and syncing.

b) Cloud storage

When you sign in, your account, entitlement, and survey data are stored in our cloud database hosted on Supabase (PostgreSQL), enabling cross-device sync and backup.

c) Overseas transfer (국외 이전)

Our infrastructure providers — Supabase (database & authentication) and Vercel (application hosting) — store and process data on servers located outside Korea, including in the United States, for the purposes described in Section 2 and for the retention periods in Section 5. Both providers act as processors under their respective privacy policies linked in Section 4.

We rely on the following services, each governed by its own privacy policy:

We encourage you to review their policies:

• Supabase Privacy Policy
• Google Privacy Policy
• PortOne Privacy Policy
• Vercel Privacy Policy

• Account and study data: retained while your account is active, and deleted within 30 days of an account-deletion request — except the records below that we must keep by law.
• Records of contracts, payments, and the supply of services: 5 years; records of consumer complaints or dispute handling: 3 years — retained as required by the Act on the Consumer Protection in Electronic Commerce, then destroyed.
• Browser-cached data remains until you clear your browser storage.
• Server logs are retained by our hosting provider for a limited period (up to 12 months) for security and reliability.

You can delete your data at any time:

• Local data: clear your browser’s site data for this site.
• Cloud data: request full account deletion as described below.

How to request account deletion

Email support@focusonprep.com with the subject “Account Deletion Request”and include the email address associated with your account. Within 30 days we will delete your authentication account and all synced study data (practice, tests, vocabulary, and survey answers) — except payment and dispute records we are legally required to retain for the periods listed in Section 5.

Focus on Prep is designed for high-school students preparing for the SAT. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us data, contact us and we will promptly delete it.

We use only essential cookies and local storage — to keep you signed in and remember preferences. We do not use advertising or third-party tracking cookies.

• Encrypted HTTPS connections for all data transfers
• Row-Level Security on our cloud database
• Scoped authentication tokens for API access
• Card data handled only by PCI-compliant payment processors

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing

We may update this policy from time to time. Changes are posted on this page with a new “Last updated” date. Continued use of the service after changes constitutes acceptance of the updated policy.

Our designated privacy officer (개인정보보호책임자) is responsible for handling questions, complaints, and remedies related to your personal data: