Privacy Policy

CertPrep is a division of Plug and Pray (Pty) Ltd, a company registered in the Republic of South Africa. We are responsible for the personal data collected through the CertPrep application and website.

We collect the following information when you use CertPrep:

• Account data: name, surname, email address, username, phone number and password (stored securely through our auth provider).
• Usage data: questions answered, scores, time spent, subnetting drill results, AI token usage and login activity.
• Access-request data: name, email, username, phone number and selected plan when you submit an access request.
• Technical data: browser type, device type, IP address and session information for security and troubleshooting.

We use your data to:

• create and manage your account;
• provide access to the question bank, drills and AI features;
• track your progress and show usage in your profile;
• enforce AI credit limits and invite-only access;
• keep the service secure and detect suspicious login activity;
• communicate with you about billing, account changes or support.

When you click Ask AI, your question text, answer options, the correct answer and your selected answer are sent to OpenAI so that the AI can generate a personalised explanation. We do not send personal identifiers such as your name or email address to OpenAI.

OpenAI processes this data under its own privacy policy and terms. We do not use your AI prompts to train models unless OpenAI's default settings include that processing. If you are concerned about this, please contact the administrator.

CertPrep uses a session cookie and local storage to keep you signed in and to remember UI preferences. The question bank and app assets may be cached by your browser or by the service worker for performance.

You can clear these at any time through your browser settings. If you disable cookies, sign-in may not work correctly.

We use industry-standard security measures, including encryption in transit, hashed passwords, and Row-Level Security in the database so that users can only read their own data. Admin access is limited to the account owner and trusted roles.

No system is 100% secure. If we become aware of a data breach that affects your personal information, we will notify you as soon as reasonably possible.

We keep your account and usage data for as long as your account is active. If your account is removed by you or the administrator, we will delete or anonymise your personal data within a reasonable time, except where we are required to keep it for legal, tax or accounting reasons.

Access requests that are declined or deleted by the administrator are removed from the system.

Under South African privacy law (Protection of Personal Information Act, where applicable), you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate information;
• request deletion of your account and data;
• object to how we process your data.

To exercise these rights, contact the administrator through the details provided when your account was approved.

CertPrep is intended for adult learners and professionals preparing for certification exams. We do not knowingly collect data from children under 18. If you believe a child has signed up, please contact us so we can remove the account.

We may update this Privacy Policy from time to time. If the changes are material, we will notify you by email or by posting a notice inside the app. Continued use of the service after changes means you accept the updated policy.

For privacy questions, data-access requests or account deletion requests, contact the administrator through the contact details provided when your account was approved.

By using CertPrep, you acknowledge that you have read and understood this Privacy Policy and our Terms and Conditions.