by
REALICENSE
Privacy Policy
This policy explains what personal information Prepped collects, why, who receives it, how long we keep it, and the choices and rights you have. It covers imprepped.com, the Prepped study app, and the emails we send.
The short version
- We collect what it takes to run your exam prep: your account, your purchase, and your study progress.
- Companies that run parts of Prepped for us (hosting, payments, email, the Tudy coach, the Premium community) get only what their job needs.
- We use Google and Meta advertising tools to show Prepped ads and measure them. California law may call that selling or sharing. You can switch it off on Your Privacy Choices, and we honor Global Privacy Control.
- If a partner brokerage sponsored or referred you, it can see your name, email, plan, and study progress.
- You can ask to see, correct, copy, or delete your information at hello@imprepped.com.
1. Who we are
Prepped is run by Prepped Group LLC ("Prepped," "we," "us"). We sell exam prep for the California Department of Real Estate (DRE) salesperson exam under the name "Prepped by REALicense." REA License, Inc. (REALicense) is our affiliated real estate school. Prepped and REALicense use one shared account system: the same login works in both, and both apps read and update one student record. Each company uses that record only for its own service, as described here and in the REALicense privacy policy.
This policy does not cover websites or services we do not run, even when we link to them, such as Stripe checkout pages, the Prepped Community on Circle, Google, or Meta. Their own policies apply there.
2. What we collect, and how long we keep it
Below is every category of personal information Prepped collects, where it comes from, what we use it for, and how long we keep it. "While your account is open" means until you ask us to delete it or we close it. After that we delete or de-identify it within 30 days. Copies in our encrypted backups expire on their normal schedule.
Account and identity
What: your name, email address, account ID, and how you sign in (password, email link, Google, or Apple). Your password is stored only as a scrambled one-way hash by our login provider; we never see it.
From: you, and Google or Apple if you sign in with them. The name typed at Stripe checkout fills in your name when you buy before you have an account.
Kept: while your account is open.
Study profile and preferences
What: your exam date, study goal, the hours and times you say you can study, your background, the areas you pick as weak, notes you type into your study plan, your profile photo if you add one in Prepped or REALicense, and settings such as light or dark mode.
From: you.
Kept: while your account is open.
Study activity
What: the questions you answer and whether you got them right, quiz, mastery, and mock exam scores, flashcards, Smart Review, readiness, streaks, your licensing roadmap steps, whether you passed the real exam, and questions you report as wrong or unclear.
From: your use of the app.
Kept: while your account is open.
Tudy coach messages
What: the messages you send Tudy, our AI study coach, and a short study snapshot sent with them so the answer fits you: your first name, exam date, weak areas, and recent misses.
From: you and your study activity.
Kept: we do not store your conversations on our servers. They stay in the open page and are gone when you close it. We keep only a count of messages per day, for the daily limit, while your account is open.
Purchases, refunds, and payouts
What: the plan you bought, the amount, any promotion code, the date, refund status, and the Stripe customer and payment IDs. Your card number goes to Stripe and never to us. When you buy Standard, Stripe keeps your card on file so you can upgrade to Premium in one tap later; we never see the number. Email hello@imprepped.com and we will have it removed. If you earn referral rewards or a partner payout, Stripe collects what it needs to pay you (such as identity, bank, and tax details) and tells us only whether your payout account is ready and what was paid.
From: you and Stripe.
Kept: 7 years after the purchase or payout, for tax, accounting, and refund records.
Referrals and how you found us
What: the friend or partner brokerage that referred or sponsored you, and the first ad, search, or link that brought you to Prepped (source, medium, and campaign).
From: the link you used and your browser.
Kept: while your account is open. The record that a referral reward is owed or was paid follows the 7 year rule above.
Free readiness check
What: if you take the free check at imprepped.com/check without an account: your first name, email address, the questions you were given, your answers and score, the first ad, search, or link that brought you to Prepped, and a scrambled (hashed) copy of your IP address, used only to limit how many checks one connection can start.
From: you and your browser.
Kept: up to 2 years after your last check, or until you ask us to delete it.
Device, network, and usage
What: IP address, browser and device type, operating system, pages and screens viewed, times, and error and server logs.
From: your browser and our hosting providers.
Kept: server logs are kept for a limited time set by our hosting providers, then deleted.
Advertising and analytics
What: cookie and device identifiers from Google and Meta, the ad you clicked, and events such as viewing a page, finishing the free check, starting checkout, and buying. When you buy, we also send Google and Meta a scrambled (hashed) copy of your email address, and send Meta hashed first and last name, ZIP code, and country, so the purchase can be matched to an ad.
From: your browser and our servers. See section 5.
Kept: Google and Meta keep this under their own retention rules. We keep the purchase records described above.
Messages and email records
What: emails you send us, and a record of which emails we sent you and when (so we never send the same one twice).
From: you and our email provider.
Kept: support emails for up to 3 years. Email records while your account is open.
Sensitive personal information. Your login (email address with password) counts as sensitive personal information under California law. We use it only to let you sign in and keep your account secure. We do not collect government ID numbers, financial account numbers, precise location, or health information in Prepped, and we do not use any information to infer characteristics about you.
3. How we use it
- Create your account, sign you in, and keep it secure.
- Run the study app: save your progress across devices, build and update your study plan, score your quizzes and mock exams, and bring back the questions you miss.
- Answer your questions through Tudy, the AI study coach.
- Process purchases, refunds, Pass Promise requests, referral rewards, and partner payouts.
- Set up Premium extras, such as your Prepped Community account.
- Send service emails: sign-in links, receipts, welcome emails, password resets, and important account notices. Send study reminders unless you opt out (see section 7).
- Score your free check, email you the results, and send a few study tips afterward unless you opt out (see section 7).
- Credit the friend or partner brokerage that referred or sponsored you.
- Show Prepped ads to people who visited our site, and measure which ads lead to sign ups and purchases, unless you opt out (see section 5).
- Fix errors, improve questions and features, prevent fraud and abuse, and keep Prepped running.
- Follow the law, respond to lawful requests, and enforce our Terms of Service.
4. Who receives it
Companies that run Prepped for us. These service providers may use your information only to do their job for us, under contracts or terms that limit their use.
- Supabase: our database, login, file storage, and server functions. Holds your account and study data.
- Vercel: hosts imprepped.com. Receives your IP address and the pages you request.
- Stripe: payments, refunds, and payouts. Receives what you enter at checkout or payout setup.
- Resend: sends our emails. Receives your email address and the email we send you.
- Anthropic: writes Tudy coach replies. Receives your Tudy messages and the study snapshot described in section 2.
- Circle: runs the Prepped Community for Premium members. Receives your name and email to create your community account. What you post there is covered by the Circle terms and privacy policy.
- Google Fonts and jsDelivr: deliver fonts and code our pages load. Receive your IP address and browser details when your browser asks for them.
- Loom: plays the how it works video when you open it. Receives your IP address and browser details.
REALicense. Our affiliated school shares the account system and student record with Prepped. It can see your name, email, profile photo, licensing roadmap steps, and whether you have a Prepped plan, and it may add course records for California students. It uses them for its own school services under its privacy policy.
Partner brokerages. If a brokerage sponsored your access or referred you, it can see your name, email, plan, the date you joined, and your study progress, so it can support you. If you do not want that, email us before you sign up through a partner link.
The friend who referred you. Sees that someone they referred joined, and whether their reward is pending or paid.
Advertising partners. Google and Meta, as described in section 5.
Legal and safety. Courts, regulators, law enforcement, or professional advisors, when the law requires it, or when it is needed to protect the rights, safety, or property of you, us, or others.
A buyer of our business. If Prepped or its assets are sold, merged, or transferred, your information may move with them, under this policy or one at least as protective.
We do not sell your personal information for money, and we never share your study activity or Tudy messages with advertisers.
5. Advertising, selling, and sharing
We use Google Analytics, the Google tag for Google Ads, and the Meta pixel on our website and in the study app. When you buy, our server also tells Google and Meta about the purchase directly (Google enhanced conversions and the Meta Conversions API), so ads are measured even when a browser blocks the tags. These companies receive cookie and device identifiers, your IP address, browser details, the pages you visit, the ad you clicked, events such as purchases, and the hashed contact details listed in section 2. We use them to show Prepped ads to people who visited our site (remarketing) and to measure our ads. Google and Meta also use this information for their own purposes, under their own privacy policies.
Under California law, this can count as "selling" personal information, or "sharing" it for cross-context behavioral advertising. In the last 12 months we have made these categories available to Google and Meta: identifiers (cookie IDs, IP address, hashed email address, and for Meta hashed name and ZIP code), internet activity (pages viewed and the ads that brought you here), and commercial information (purchases).
How to opt out: use Your Privacy Choices, or turn on Global Privacy Control (GPC) in your browser. Both work right away in that browser. After you opt out, Google runs with restricted data processing and no ad personalization, the Meta pixel runs in Limited Data Use, and purchases you make are sent to Meta in Limited Data Use without your IP address, browser details, or cookie IDs. If you want the opt-out to follow your account to every device, email us and we will record it.
You can also manage ads in Google Ad Settings and Meta ad preferences, and install the Google Analytics opt-out add-on.
6. Cookies and similar technologies
Needed to run Prepped: browser storage that keeps you signed in, remembers your settings and theme, holds your study progress between saves, remembers your privacy choice, and lets the checkout page sign you in after you pay. These cannot be switched off without breaking the app. Your browser can clear them at any time.
Advertising and analytics: cookies and similar tools from Google and Meta, described in section 5. We also remember for up to 90 days the first ad or link that brought you here, so we can credit it if you buy.
We clean page addresses before sending them to Google and Meta, so sign-in links, email addresses, and checkout details are never shared. There is no agreed standard for Do Not Track signals, so we do not respond to them separately. We do honor Global Privacy Control.
7. Emails
Service emails (sign-in links, receipts, welcome emails, password resets, refund and account notices) go out because you have an account or made a purchase. You cannot opt out of these while your account is open.
Free check results and tips: if you take the free check, we email your results and up to four short study tips over the next two weeks. Each one has a link to stop them, and they stop on their own if you buy Prepped.
Study reminders and tips help you keep going. Each reminder includes a way to stop them, or you can email us to stop them at any time. We never sell or rent your email address.
8. Your rights and how to use them
Wherever you live, you can ask us to:
- Know and access the personal information we have about you, where it came from, why we use it, and who receives it.
- Get a copy of your information in a portable format.
- Correct information that is wrong.
- Delete your information, except what we must keep for law, tax, fraud prevention, or an open refund or dispute.
- Opt out of selling and sharing for advertising (section 5).
How: email hello@imprepped.com from the email address on your account and tell us what you want. We confirm within 10 business days and answer within 45 days. If we need more time, we tell you why, and the total stays under 90 days. To protect you, we confirm your identity first, usually by sending a link to the email on your account. Someone you authorize may ask for you; we will ask them for your signed permission and may confirm with you directly.
Deleting your Prepped information also ends your Prepped access. Because the login is shared, deleting your login also ends your REALicense access, so tell us if you want to keep one of them.
We will not charge you more, give you less, or treat you differently for using any of these rights. If you live in another state with a privacy law and we decline a request, you can appeal by replying to our answer, and we will respond within 60 days.
9. California notices
This section gives California residents the notices required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act. Sections 2 through 8 are our notice at collection: the categories we collect, their sources, why we use them, who receives them, and how long we keep them.
- Right to opt out of selling or sharing: see section 5, or Your Privacy Choices.
- Right to limit use of sensitive personal information: we use sensitive personal information only to provide Prepped and keep accounts secure, so there is nothing further to limit.
- Minors: we do not knowingly sell or share the personal information of anyone under 16.
- Shine the Light: California residents may ask once a year whether we disclosed personal information to third parties for their own direct marketing in the previous year. Email us with the subject "Shine the Light."
- Referral rewards: rewards are paid for friends who buy, not in exchange for your personal information.
10. Children
Prepped is for adults preparing for the California real estate salesperson exam. It is not directed to children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us personal information, email us and we will delete it.
11. Security and where data is stored
We protect your information with encryption in transit, database rules that let each student read only their own record, server-only access for sensitive actions, and limited staff access. Card payments are handled by Stripe, which is certified to the payment card industry standard. No system is perfectly secure. If a breach affects your personal information, we will tell you as the law requires.
Prepped is offered in the United States, and your information is stored and processed in the United States.
12. Changes to this policy
When we change this policy, we post the new version here and update the date at the top. If a change materially affects how we use information we already have, we will tell you by email or in the app before it takes effect.
13. Contact
Prepped Group LLC
3780 Kilroy Airport Way, Suite 245, Long Beach, CA 90806
Email: hello@imprepped.com