Privacy Policy
This Privacy Policy explains how Ace the Test (the “Service”) collects, uses, shares, and protects information when you use the Service. By using the Service, you acknowledge that you have read and understood this Privacy Policy.
Last Updated: 2026-02-03
1. Who We Are
The Service is operated by:
- Operator / Data Controller
- shokoma
- Contact
- Please contact us through our contact form
2. Scope
This Privacy Policy applies to information processed in connection with your use of the Service, including when you create an account, sign in, upload or input study materials, generate quizzes, and review learning history.
3. Information We Collect
3.1 Account Information
- Email address (used for account creation and sign-in).
- Authentication credentials (e.g., password). We do not display your password to you, and we implement reasonable safeguards; however, you remain responsible for protecting your credentials.
3.2 Billing and Subscription Information (Stripe)
Payments are processed by Stripe. We may store identifiers and subscription-related fields (e.g., Stripe customer ID, subscription status) to enable access control and customer support. We do not store full payment card details on our servers.
3.3 User Content (Study Materials and Learning Data)
The Service lets you input or upload study materials (text, PDFs, images, and other supported formats), create quiz sets, and record learning history.
- Materials: title, tags, categories, text you paste/type, and uploaded files.
- Quiz sets generated from your materials and any edits you make.
- Learning sessions/history and performance metrics.
3.4 Technical and Log Information
When you use the Service, we may collect technical information such as device/browser type, timestamps, IP address, and diagnostic logs (for security, stability, and troubleshooting).
3.5 Support Communications
If you contact us, we will collect the information you provide (e.g., your email address and the content of your message) to respond and provide support.
4. How We Use Information
We use information for the following purposes:
- Provide and operate the Service (account access, materials management, quiz generation, learning history).
- Process subscriptions and enforce access control based on subscription status.
- Maintain security, prevent fraud/abuse, and protect users and the Service.
- Provide customer support and respond to inquiries.
- Monitor, debug, and improve reliability and performance.
- Comply with applicable laws, regulations, and lawful requests.
Purpose limitation
We do not use personal information (such as email addresses) beyond the purposes described above, and we limit any third-party sharing to what is described in this Privacy Policy and our Terms.
5. How We Share Information
5.1 Your User Content is Your Intellectual Property
As a basic policy, we treat the contents of your study materials as your intellectual property. We do not share or secondarily use your study materials externally without your consent.
5.2 Service Providers (Processors)
We may share information with trusted service providers who process data on our behalf to provide the Service, such as:
- Stripe for subscription payments and customer billing management.
- Cloud infrastructure providers for hosting, storage, and database services.
- Security/anti-abuse providers (e.g., reCAPTCHA) to prevent automated abuse.
- AI providers (if enabled) to generate quizzes from your materials (see Section 6).
These providers are authorized to process information only as necessary to provide services to us and are expected to protect it consistent with this Privacy Policy.
5.3 Legal and Safety
We may disclose information if we believe in good faith that it is necessary to comply with law, respond to lawful requests, protect our rights and users, investigate fraud, or address security issues.
5.4 Business Transfers
If we are involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will provide notice if required by law.
6. AI Processing (If Enabled)
If AI features are enabled, the Service may send relevant portions of your materials to an AI provider to generate quizzes. AI outputs may be inaccurate or incomplete; you should review outputs before relying on them.
Minimization and server-side processing
We aim to send only what is necessary to generate quizzes, and we may perform AI requests from the server side as part of the Service’s backend workflow.
7. reCAPTCHA / Anti-Abuse
To prevent automated sign-ups and abuse, the Service may use Google reCAPTCHA during registration. Your use of reCAPTCHA is subject to the relevant provider’s privacy and terms. If you do not complete the verification, you may not be able to create an account.
8. Data Storage, Security, and Cross-Border Processing
8.1 Where Data Is Stored
We store account and learning data in databases and store uploaded files (e.g., PDFs) in object storage, using cloud infrastructure as part of our architecture.
8.2 Security
We implement reasonable administrative, technical, and organizational safeguards designed to protect information. However, no method of transmission or storage is 100% secure.
8.3 International Transfers
Our service providers may process data in countries other than your country of residence. Where required, we take steps intended to ensure appropriate protection for cross-border transfers (e.g., contractual safeguards).
9. Retention, Backups, and Deletion
9.1 Retention
We retain information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary depending on the category of data.
9.2 Backups
We may take automated backups of important databases at least once per day and maintain documented recovery procedures for critical user data (materials, quiz sets, learning history). Backups are used for recovery and are not intended for routine user access.
Backup deletion note
Due to technical constraints, deleted data may persist in backups for a limited period until backup rotation completes.
9.3 Deletion (Including “Hard Delete”)
You may delete materials, quiz sets, and other content within the Service. We may also support irreversible deletion (“Hard Delete”) to meet GDPR-aligned requirements, subject to legal obligations (e.g., fraud prevention and dispute handling).
10. Your Rights and Choices
10.1 Access and Correction
You may access and update certain account information through your account settings (where available).
10.2 Deletion Requests
You may request deletion of your account and associated data. We will respond as required by applicable law. Some information may be retained where necessary for legal compliance or security reasons.
10.3 Subscription Management
Billing and subscription changes are managed through Stripe’s customer tools (e.g., Customer Portal), which may provide additional privacy controls under Stripe’s policies.
10.4 Objections and Restrictions (Where Applicable)
Depending on your jurisdiction (e.g., GDPR), you may have rights to object to or restrict certain processing and to receive a copy of certain information. Contact us to exercise these rights.
11. Children’s Privacy
The Service is not directed to children under the age required by applicable law to consent to data processing. We do not knowingly collect personal information from children without appropriate consent. If you believe a child has provided us personal information, contact us to request deletion.
12. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by reasonable means (e.g., posting within the Service). The “Last Updated” date indicates when this policy was last revised.