1.Introduction and Scope
justprepy (the “Platform”) is an independent online educational platform providing resources and interactive tools for university entrance preparation, including preparation for the Nazarbayev University Entrance Test (NUET). The Platform offers educational tools such as a Question Bank, Mock Tests, Vocabulary activities, learning analytics, and a leaderboard, as well as Free and Pro subscription plans.
This Privacy Policy explains how personal data is collected, used, stored, shared, and otherwise processed in connection with the Platform. It applies to visitors and registered users, including people who sign in with Google, use educational features, or purchase subscriptions. The availability and functionality of particular features may change over time.
2.Operator and Privacy Contact
The Platform, available at https://justprepy.com, is operated by Ikonnikov Diyar Serikovich (Иконников Дияр Серикович), an individual (the “Operator”, “we”, “us”, or “our”). The Operator determines the purposes and arrangements for processing personal data in connection with the Platform, subject to applicable law.
Privacy contact: buildsierem@gmail.com
Website: https://justprepy.com
You may contact us using this email address for privacy questions and requests regarding your personal data.
3.Personal Data We Process
3.1Account and Profile Information
When you sign in using Google authentication, we may receive the information made available through your authorized Google sign-in, such as your account name, email address, profile picture, and an account identifier. We use this information to authenticate you and maintain your account.
You may also choose a display nickname and avatar within the Platform. These may be separate from your Google account name and photo. If your account appears on the leaderboard, your chosen display nickname and avatar may be shown with your ranking, subject to applicable consent requirements.
3.2Learning Activity and Results
Depending on the feature and its implementation, information processed may include Question Bank attempts and answers, Mock Test participation and results, Vocabulary activity, and statistics used for learning analytics or rankings.
Some activity may be stored in your browser (for example, in local storage or temporary application state) rather than saved as a persistent record in your account. We do not represent activity stored only in your browser as a synchronized, cross-device learning history.
3.3Technical Information and Browser Storage
Technical information, such as IP addresses, browser and device characteristics, request details, and security-related events, may be processed by the Platform and its infrastructure providers for hosting, authentication, troubleshooting, prevention of misuse, and security.
The Platform may use cookies or similar browser storage needed for authentication and session management. Some educational features may use local browser storage to remember activity on that device. Clearing browser data may remove locally stored progress.
3.4Payments and Subscriptions
For Pro subscriptions, we process subscription-related information needed to provide access and support users, such as subscription status, payment or order identifiers, payment amounts, billing dates, and refund or cancellation status.
Dodo Payments is the Platform’s payment provider. For transactions handled through its Merchant of Record service, Dodo Payments also acts as the seller of record and independently processes payment and billing information for purposes such as transaction processing, payment security, fraud prevention, tax and regulatory compliance, refunds, and disputes. Payment information submitted at Dodo Payments checkout is subject to Dodo Payments’ own privacy practices. We do not require you to send full payment-card details to justprepy by email.
3.5Support Communications
If you contact us, we process the contact details and information you include in your message to respond to your inquiry or request, including refund and privacy requests.
4.Purposes and Legal Grounds for Processing
We process personal data as necessary and permitted by applicable law to:
- Register and authenticate accounts and provide access to Platform features.
- Deliver educational activities, show available results, and provide learning-related features.
- Display leaderboard information where applicable and appropriately authorized.
- Manage subscription access, support, payment status, cancellations, and refunds.
- Maintain service reliability, investigate technical issues, and protect against unauthorized activity.
- Respond to inquiries, privacy requests, and legal obligations.
Where consent is required under the laws of the Republic of Kazakhstan, we will rely on the consent of the person concerned or, where applicable, their legal representative, unless the law permits processing without consent. Public display or disclosure of personal data will be subject to the applicable legal requirements and permissions.
5.Children’s and Minors’ Privacy
Registration for and use of the Platform are not permitted for individuals under the age of 14, consistent with the Platform’s current Terms of Service.
If you are under 18, by taking any action on the Platform that requires the consent of a parent or legal guardian under applicable law, you confirm that you have obtained the necessary consent before taking that action. This may include purchasing a paid subscription or consenting to particular personal-data processing or disclosures where applicable law requires representative consent.
Where the law requires consent to be obtained or verified through a particular process, a statement by the user alone does not replace that requirement. A parent or legal guardian may contact us at buildsierem@gmail.com concerning a minor’s personal data or applicable rights.
6.Sharing and Disclosure of Personal Data
We use service providers to operate the Platform. Depending on the environment or feature, these include:
- Google: Account sign-in and authentication.
- Supabase: Authentication and database infrastructure.
- Vercel: Hosting and delivery of the primary website where deployed.
- Netlify: Hosting and server/edge execution for test or other deployments where used.
- Dodo Payments: Payment processing, subscription and billing operations, and Merchant of Record services for applicable transactions.
We share information with these providers to the extent needed for their roles, subject to applicable law. Dodo Payments may also process buyer information as an independent controller for its Merchant of Record activities.
Selected nicknames, avatars, and rankings displayed on the leaderboard may be visible to others who can access that feature, subject to the necessary permissions and consent. We may also disclose information when required by applicable law or a lawful request.
7.Data Storage and International Transfers
Our infrastructure and payment providers may operate in countries outside Kazakhstan, and personal data may be processed or transferred across borders in connection with the Platform, where permitted by applicable law.
Kazakhstan law imposes requirements concerning the location of storage of personal data and conditions for cross-border transfers. Use of an overseas service provider does not remove those requirements. Our data-storage and transfer arrangements must comply with applicable localization, consent, security, and cross-border transfer obligations.
8.Retention and Deletion
We retain personal data only for as long as needed for the purposes described in this Policy or for applicable legal obligations, including obligations associated with payments, disputes, and security. Different categories of data may be retained for different periods.
Some educational activity may exist only in browser storage or temporary application state and can be removed when that storage is cleared or the session ends. Account or subscription records held by the Platform or its providers may be subject to different retention and deletion processes.
You may request access, correction, or deletion of your personal data by contacting buildsierem@gmail.com. Requests will be handled in accordance with applicable law; deletion may be limited where retention is legally required.
9.Information Security
We use technical and organizational safeguards appropriate to the information we process and rely on relevant security measures provided by our service providers. No online service can guarantee absolute security. If you believe your account or personal data may have been compromised, contact us at buildsierem@gmail.com.
10.Privacy Rights
Subject to applicable law, you or your legal representative may have the right to:
- Obtain information about the collection, processing, storage, and disclosure of your personal data.
- Request access to, correction of, or updates to your personal data.
- Request blocking, deletion, or anonymization of personal data where the law provides for these rights.
- Withdraw consent where applicable, subject to legal exceptions or retention requirements.
Send requests to buildsierem@gmail.com. We may need information reasonably necessary to verify that a request is made by you or an authorized representative. We will respond within the period required by applicable law.
11.Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in the Platform, its data practices, service providers, or applicable requirements. The latest version will be made available on the Platform, with additional notice where required by law.