Valenke — Privacy Policy

1. Information We Collect

1.1 Information you provide directly:

• Account registration: email address, display name, password (stored as a cryptographic hash — we never store your actual password)
• Profile information: optional fields such as your exam goal, study timeline, and other preferences you choose to provide
• Support communications: any messages you send to our support team

1.2 Information collected automatically:

• Usage data: practice sessions completed, questions answered, response times, scores, and readiness estimates
• Device information: browser type, operating system, device type
• Log data: IP address, access times, pages visited
• Cookies and similar technologies: session cookies required for authentication; optional analytics cookies

1.3 Information from third parties:

• Payment information: billing details are collected and processed by Lemon Squeezy LLC, our payment processor. We receive only a subscription status and customer identifier — we do not receive or store your card details.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service, including delivering personalized adaptive practice sessions and readiness reports
• Process payments and manage your subscription
• Send transactional emails (account confirmation, password reset, subscription receipts)
• Send service notifications (scheduled maintenance, policy updates)
• With your consent: send study reminders and engagement notifications
• Improve the Service through aggregate, anonymized analysis of usage patterns
• Respond to support requests
• Enforce our Terms of Service and prevent abuse

We do not sell your personal information to third parties.

We do not use your data to train third-party AI or machine learning models.

3. How We Share Your Information

We share your information only in the following circumstances:

• Service providers: Lemon Squeezy (payment processing), Resend (transactional email), Railway (cloud infrastructure), Vercel (web hosting). These providers process data on our behalf under data processing agreements.
• Legal requirements: We may disclose your information if required by law, court order, or other legal process.
• Business transfer: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With your consent: In any other circumstances, only with your explicit consent.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except:

• Financial transaction records, which we retain for 7 years as required by law
• Anonymized aggregate data (no personal identifiers), which we may retain indefinitely for product improvement

5. Your Rights

Depending on your location, you may have the following rights:

• Access: request a copy of the data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your data (subject to legal retention requirements)
• Portability: request your data in a structured, machine-readable format
• Objection: object to certain processing of your data
• Withdrawal of consent: where processing is based on consent, you may withdraw it

To exercise any of these rights, contact us at privacy@valenke.com. We will respond within 30 days. For EU/EEA residents, you also have the right to lodge a complaint with your local data protection authority.

6. Cookies

We use essential cookies required for the Service to function (authentication session). We may use analytics cookies to understand usage patterns. You can control cookies through your browser settings. Disabling essential cookies will prevent login from functioning.

7. Security

We implement industry-standard security measures including:

• Encryption in transit (HTTPS/TLS)
• Encrypted storage of sensitive data
• Password hashing using bcrypt
• Regular security reviews

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but we take reasonable precautions.

8. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided personal information, we will delete it.

9. International Data Transfers

Our servers are located in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

For EU/EEA residents: transfers are made under appropriate safeguards including Standard Contractual Clauses where applicable.

10. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service with a new "Last Updated" date. Continued use after the effective date constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or to exercise your rights:

Valenke
Privacy: privacy@valenke.com
General: support@valenke.com
Address: Valenke, United States