Privacy Notice

GetReddy ("we", "us", or "our"), trading as GetReddy, is the data controller responsible for this privacy notice. This notice explains how we collect, use, store, and share your personal information when you use the GetReddy website and application.

1. Information we collect

We collect the following categories of personal data:

• Account information: name and email address when you create an account.
• Login credentials: authentication tokens and session data managed by our identity provider.
• Study data: diagnostic results, quiz answers, flashcard progress, mock-exam scores, and readiness scores.
• Support messages: content you send when contacting support or using the Ask Reddy coach.
• Usage and telemetry: pages visited, features used, and interactions with the app.
• Device and connection data: IP address, browser type, operating system, and device identifiers.

2. How we use your information

We use your data for the following purposes:

• Providing the service: creating and maintaining your account, generating your study plan, tracking progress, and enabling quizzes, flashcards, and mock exams.
• Customer support: responding to questions and resolving issues.
• Security and fraud prevention: verifying accounts, detecting abuse, and protecting against unauthorized access.
• Product improvement: understanding how users interact with GetReddy so we can improve features and content.
• Marketing: sending occasional product updates or offers, only where you have consented or applicable law permits.

3. Legal basis for processing

We rely on the following legal bases:

• Contract performance: processing necessary to provide the GetReddy service you signed up for.
• Legitimate interests: security, fraud prevention, and service improvement.
• Consent: for marketing communications and non-essential cookies.
• Legal obligation: where required by applicable law or regulatory authority.

4. Who we share data with

We do not sell your personal data. We share data only with:

• Service providers: hosting, database, analytics, and support tooling providers who process data on our behalf under contract. This includes Supabase, which hosts our authentication and database, and Lovable, which hosts the application and sends our email.
• AI provider: when you use Ask Reddy or ask for a study plan, the message you write, the exam you are studying, your readiness and domain scores, and the text of questions you recently missed are sent through the Lovable AI Gateway to an OpenAI model, which generates the reply. Up to your last 12 messages are kept so the conversation has context; you can delete them at any time by clearing the conversation in the Ask Reddy panel. Do not put information you would not want processed this way into that box.
• Payment processor: Stripe, Inc. processes all purchases on our behalf, including payment processing, tax calculation, fraud prevention, and invoicing. See Stripe's privacy notice at stripe.com/privacy for how they process payment data.
• Other students, only if you ask: the leaderboard shows your first name, XP, streak and level to other students preparing for the same exam. It is off unless you turn it on under Profile & security, and turning it off removes you again.
• Professional advisers: legal, accounting, or other advisers when necessary.
• Authorities: when required by law, regulation, or court order.

5. Data retention

We keep your personal data for as long as your account is active or as needed to provide the service. If you delete your account, we will delete or anonymize your personal data within a reasonable period, unless a longer retention period is required by law.

6. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to or withdraw consent for certain processing. To exercise these rights, contact us at support@getreddy.so. We will respond within one month where required by law. You also have the right to lodge a complaint with your local supervisory authority.

7. Security

We use appropriate technical and organizational measures to protect your data, including encryption in transit, access controls, and regular review of our security practices.

8. Cookies

We use essential cookies to keep you signed in and maintain your session. We may use analytics cookies to understand how the app is used. You can manage cookie preferences through your browser settings.

9. International transfers

Your data may be processed in countries outside your own, including the United States and the European Union. Where data is transferred outside the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

10. Changes to this notice

We may update this privacy notice from time to time. The latest version will always be posted on this page with the "Last updated" date.

11. Contact us

If you have questions about this privacy notice or how we handle your data, contact us at support@getreddy.so.

Who operates GetReddy

GetReddy is operated from the address below. Written notice under these terms, and any privacy or data request, can be sent to either address.

These terms are governed by the laws of the State of Florida, United States.