Privacy Policy

Who we are

Cadet College Prep (“we”, “us”) is a non-profit community initiative helping students prepare for cadet and military college entry tests across Pakistan. This policy explains what we collect, why, and the choices you have — including deletion of your entire account.

Questions about this policy can go to the founder directly on WhatsApp at 0319-3051175 (this is the same number printed across the site), or through the feedback button on any page.

Data you give us

Account and application data. When you sign up we store your full name, email address, phone number and chosen exam target (for example “CCH”) in our database (hosted with Supabase). These details are used to run the enrollment and approval process, to personalise your dashboard and study plan, and so we can contact you about your application. Passwords are stored by Supabase Auth in hashed form — we never see or store your plain password.

Practice data. Your answers, scores, accuracy, streaks, mistakes and time spent are stored on your account so the analytics dashboard, mistake notebook and leaderboard can work. This is the core product data — it is yours, and it is deleted when you delete your account.

Content you create. Study notes you upload are stored and shown to other students once approved; if you delete your account, published notes remain but lose the link to your name.

Feedback. Messages sent through the feedback button are stored with the page you were on, and (if you were signed in) your account id so we can reply. Anonymous visitors send feedback without any identifier.

Data we collect automatically

Usage and error telemetry. We record page views and technical error reports (the error message and a technical stack trace, plus the page it happened on) in order to fix bugs and understand which features are used. Signed-in visits are linked to your account id so we can investigate an error you hit; anonymous visits are not linked to anyone. This is the web equivalent of crash reporting — it never includes your answers, inputs or private messages.

You can opt out at any time from Profile → Privacy & preferences, which stops new page views and error reports immediately. Practice and analytics (your own account data) are unaffected.

Notification subscriptions. If you allow push notifications we store the technical subscription endpoint so we can send you reminders. It is removed when your account is deleted.

What stays on your device

When you download the question bank for offline use, a copy of those questions is stored on your own device (in your browser’s IndexedDB and service-worker cache) so you can practise without internet. That offline copy never leaves your device on its own; only your answers are sent to us when you answer online. Clearing your browser’s site data removes the offline copy.

We also use your browser’s local storage for small preferences (for example your telemetry opt-out choice and UI state) and standard session cookies for keeping you signed in. We do not use third-party advertising cookies or tracking pixels, and we never sell personal data to anyone.

Where data lives and how it is protected

Our database and authentication are managed by Supabase, which stores data in secure data centres and encrypts it in transit and at rest. Only the site administrators can access account data. You are never asked for more information than the service needs, and the student-facing dashboard shows you your own numbers at all times.

The WhatsApp group and chats are separate: anything you send to our WhatsApp number or group is governed by WhatsApp/Meta’s privacy terms and is not part of this site’s database.

Sharing

We share only aggregate, non-identifying numbers publicly — for example total questions answered by the community or leaderboard summaries. Your name may appear on the practice leaderboard if you choose to take part; on any public (signed-out) page the leaderboard shows only your first name and last initial, together with your streak, accuracy and earned cadet rank.

We never publish or sell individual students’ data, and we do not share data with advertisers (we have none).

Children

Most of our users are minors — this platform is built for school students preparing for cadet college entry tests, typically aged 10–15. That fact shapes the whole policy: we collect the minimum the service needs (a name, an email and the practice records the platform runs on), we never publish a minor's full name on any public page (leaderboards show first name + last initial), and there are no advertising trackers to profile anyone.

Accounts are created through an enrollment process run directly with the founder, and we ask that a parent or guardian be involved in signing up, paying any applicable enrollment dues, and in deciding to delete the account. A parent can also request a read-only progress link for their own child from the student's dashboard, which can be revoked at any time.

Retention and deletion

We keep your data for as long as your account is active. To delete your account permanently: Profile → Delete account (you will be asked to type DELETE to confirm). This removes your auth account, profile and, through database cascades, your answers, analytics, streaks, mistakes, quiz sessions and push subscriptions. Some published content (approved notes) stays up but no longer shows your name. Deletion is immediate and cannot be undone.

If you ever have trouble deleting through the app, message the founder on WhatsApp at 0319-3051175 and we will delete the account manually. Backups may retain encrypted copies for a short period before they are purged.

Changes to this policy

If we change how we handle data we will update this page and note the change date below. Continued use of the service after a change means you accept the updated policy.