Skip to main content

Privacy Policy

Last updated: April 15, 2026

1. Introduction

Valenke ("we," "us," or "our") operates the Valenke adaptive exam-preparation platform (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data. By using the Service, you consent to the practices described in this policy.

2. Information We Collect

Account Information

When you create an account, we collect your email address, display name, and a hashed version of your password. We never store passwords in plain text.

Payment Information

Payments are processed by Dodo Payments, our third-party payment processor. We do not collect, store, or have access to your credit card number, debit card number, or bank account details. Dodo Payments provides us with a transaction ID, subscription status, and billing email for order management purposes. For details on how Dodo Payments handles your payment data, see their privacy policy.

Usage Data

When you use Valenke, we collect your responses to practice questions, response times, session metadata, and performance analytics (ability estimates, readiness scores, domain mastery levels). This data powers the adaptive engine and provides you with personalized study recommendations.

Technical Data

We automatically collect standard technical data: IP address, browser type and version, operating system, device type, screen resolution, referring URL, pages visited, and session duration. This data is used to maintain security, diagnose issues, and improve the Service.

Cookies

We use essential cookies for authentication (an httpOnly refresh-token cookie) and session management. We do not use third-party advertising or tracking cookies. See Section 9 for more details.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the adaptive practice experience
  • Generate readiness reports, ability estimates, and study recommendations
  • Authenticate your account and maintain session security
  • Process payments and manage subscriptions (via Dodo Payments)
  • Communicate service updates, security alerts, and support responses
  • Detect and prevent fraud, abuse, and security incidents
  • Analyze aggregate, anonymized usage patterns to improve the platform (not individual behavior tracking for advertising)
  • Comply with legal obligations

4. Information Sharing

We do not sell your personal information. We share data only in these limited circumstances:

  • Dodo Payments (payment processor): We share your email address and subscription details with Dodo Payments to process payments and manage your subscription. Dodo Payments acts as a data processor on our behalf and is bound by their own privacy policy and data-processing agreements.
  • Hosting providers: The Service is hosted on infrastructure providers who may process data on our behalf under strict confidentiality and data-processing agreements.
  • Legal requirements: We may disclose information if required to do so by law, court order, subpoena, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of the transaction. We will notify you before your data is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your account data and practice history for as long as your account is active.

If you delete your account, we will delete your personal data within 30 days. Anonymized, aggregate data (used for improving the adaptive engine and psychometric models) may be retained indefinitely, as it cannot be linked back to any individual.

Transaction records (payment history, invoices) are retained for 7 years to comply with financial record-keeping and tax obligations.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Export your practice data in a portable format (data portability)
  • Restrict or object to certain processing of your data
  • Opt out of marketing communications at any time

To exercise any of these rights, contact us at support@valenke.com. We will respond to your request within 30 days.

7. Children's Privacy

Valenke is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at support@valenke.com.

8. Security

We implement industry-standard security measures to protect your data, including:

  • Passwords hashed with bcrypt (12+ rounds)
  • JWT-based authentication with short-lived access tokens
  • Refresh tokens stored as SHA-256 hashes in the database
  • HTTPS encryption for all data in transit
  • Rate limiting on authentication and sensitive endpoints
  • Regular security reviews and dependency audits

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Cookies

Valenke uses only essential cookies required for the Service to function:

  • Authentication cookie: An httpOnly, secure cookie that stores your refresh token. This cookie is required to keep you logged in and cannot be disabled while using the Service.
  • Session cookie: Used to maintain your session state during a visit.

We do not use third-party tracking cookies or advertising cookies. If we introduce optional analytics cookies in the future, we will update this policy and provide a consent mechanism before setting them.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least 14 days before the changes take effect. The "Last updated" date at the top of this page indicates when the policy was last revised. If you do not agree with the revised policy, you must stop using the Service before the effective date.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at support@valenke.com.