Privacy Policy

Vorentoe LLC (“we,” “us,” or “our”) operates Certly Prep and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information about you when you use our Service.

1. Information We Collect

Account Information

When you sign in via Google OAuth (Firebase Authentication), we receive your name and email address from Google. We store this information in Firebase Firestore to identify your account and personalize your experience.

Usage Data

We collect information about how you use the Service, including:

• Exam scores and quiz results
• Quiz and lesson progress
• Flashcard and study session activity
• Uploaded study materials (processed to generate quizzes)

Payment Information

Payments are processed by Stripe. We do not store your credit or debit card numbers. We receive limited billing details from Stripe (such as the last four digits of your card and billing country) for subscription management purposes.

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To personalize your study experience and track your progress
• To process subscription payments and send billing communications
• To respond to your support requests and inquiries
• To send important notices about the Service (e.g., policy updates)
• To detect and prevent fraud or abuse

We do not sell your personal information to third parties.

3. AI Interactions

Certly Prep uses the Google Gemini API to generate AI-powered explanations and coaching content. When you request an AI explanation or interact with our AI coach, the relevant question or prompt is sent to Google's Gemini API for processing. This data handling is subject to Google's privacy policy and terms of service. We encourage you to review Google's policies for details on how they handle data submitted to their AI APIs.

We do not intentionally transmit sensitive personal information to the Gemini API. Avoid including personal details in prompts submitted to AI features.

4. Cookies & Local Storage

We use browser local storage and session cookies to maintain your authentication state and store preferences (such as your selected certification). Firebase Authentication uses cookies to keep you signed in across sessions. We do not use third-party advertising cookies.

5. Third-Party Services

We use the following third-party services to operate Certly Prep. Each has its own privacy policy governing data they process:

6. Data Sharing

We do not sell, rent, or trade your personal information. We may share information in the following limited circumstances:

• Service Providers: With third-party vendors (Stripe, Firebase, Google) solely to operate the Service, under confidentiality obligations.
• Legal Requirements: If required by law, court order, or to protect the rights and safety of Vorentoe LLC or others.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you.

7. Data Security

We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These include using Firebase's security rules for database access and Stripe's PCI-compliant infrastructure for payment data.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Children's Privacy

Certly Prep is not directed at children under 13 years of age, and we do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If you believe we have inadvertently collected information from a child under 13, please contact us immediately at shannon@govorentoe.com so we can delete it.

9. Your Rights

California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your personal information, and opt out of any sale of personal information (we do not sell personal information). To exercise these rights, contact us at shannon@govorentoe.com.

EU/EEA Residents (GDPR)

If you are located in the European Union or European Economic Area, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data (“right to be forgotten”)
• Request portability of your data in a structured, machine-readable format
• Object to or restrict processing of your data

To exercise any of these rights, please contact us at shannon@govorentoe.com. We will respond within 30 days.

10. Data Retention

We retain your account and usage data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving billing disputes).

You may request account deletion at any time by contacting shannon@govorentoe.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date at the top of this page and, where appropriate, by email. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: