Privacy Policy
This policy says, in plain language, what we collect, why we collect it, who processes it on our behalf, and the controls you have. The short version: we collect the data the product needs to work, we don't run ads, we don't track you across other apps or sites, and we never sell your data.
1Who we are
FE Exam AI Prep is an independent exam-preparation study tool. You can reach us about anything in this policy at contact@xingshiyu.com.cn.
2What we collect
- Account information. Your name when Apple or Google provides it, email address, user ID, and authentication credentials. On the web you sign in with the same account by email link or password — Apple and Google sign-in aren't available on the web yet.
- Emails you choose to share. If you join the iPhone launch list or request a free study resource by email, we store the address you submit and the page where you submitted it.
- Your exam profile. The discipline you're preparing for, your exam date, and your weekly study-hours budget.
- Study activity. Questions attempted, answers and correctness, time spent per question, confidence ratings, mock-exam scores, topic mastery, streak days, wrong-answer review history, and video watch positions.
- Subscription status. Which plan you're on and when it renews. Payment itself is processed by Apple or Google — we never see or store your card details.
- Cross-device metadata. Which of your own devices a practice session, mock exam, or video was last active on (for example “Watched to 6:32 on iPad”), so you can resume anywhere. This is visible only to you.
- AI request content. Prompts you submit to optional live-AI features and the relevant study context listed on the consent screen for that request.
- AI response reports. If you choose to report a generated response, we store that response, its request ID, your issue category, and any optional note. The report does not store your original prompt.
What we deliberately do not collect: contact lists, photos, precise location, advertising identifiers, or anything for cross-app tracking. The apps declare no tracking in their App Store privacy labels, and this policy is written to match them.
3How we use it
- To run the product. Your activity computes your readiness estimate, builds your adaptive daily plan, schedules wrong-answer recovery, curates video recommendations, and keeps your progress in sync across iPhone, iPad, and the web member center.
- To power optional AI features. Before the first request, the app names DeepSeek, lists the prompt and study fields required for that feature, and asks for permission. Only after you consent and make a request are those fields sent through our server to DeepSeek. With permission off, no prompt or study context is sent and deterministic local recommendations remain available.
- To review reported AI responses. We use the generated response, request ID, issue category, and optional note to investigate accuracy, safety, privacy, and quality issues.
- To email you. Sign-in links you request, the one-time iPhone launch notice you request, and study resources you explicitly ask us to send.
We do not sell your data, use it for advertising, or share it with data brokers. We may use aggregated, de-identified statistics (for example, “typical readiness at the start of prep”) to improve the product; those never identify you.
4Who processes data on our behalf
- Supabase — account, authentication, sync, and storage for your study data.
- Vercel — website hosting, performance measurements, and anonymous aggregate web analytics.
- Resend — delivery of sign-in, launch-list, and requested study-resource emails.
- Apple, Google & RevenueCat — identity sign-in, subscription and purchase processing, entitlement status, and aggregate subscription reporting.
- DeepSeek — only after explicit consent and when you use a live-AI feature; it receives the prompt and listed study context for that specific request to generate a reply.
Each provider processes data only to provide its service to us. We don't authorize any of them to use your data for their own purposes.
5Cookies & the web member center
The website uses browser storage to keep you signed in and remember your light/dark theme choice. We use Vercel Web Analytics to understand aggregate page visits, referral sources, device types, and general location, and Speed Insights to measure page performance. These services do not use advertising cookies, do not identify you by email, and do not track you across other websites. Member-center routes are excluded from our Web Analytics page-view collection, and we remove query strings before analytics events are sent.
6Retention & deletion
- Delete your account from Settings on the web or in the app — deletion starts immediately, including cleanup requests to connected identity and subscription service providers, and removes your account, plan, progress, and account-linked AI response reports from active systems promptly. Backup and security-log copies age out within 30 days. Deleting your account does not cancel store billing — manage that in your Apple or Google account settings.
- Access or correct your data by emailing contact@xingshiyu.com.cn. We'll respond within 30 days.
- Launch-list emails are kept until we send the requested availability notice, then deleted within 90 days unless you separately create an account or ask to receive something else. You can ask us to remove your address at any time.
- We keep your data while your account exists so your progress and readiness history keep working.
7Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. We honor these requests for everyone, not just where the law requires it — email contact@xingshiyu.com.cn and we'll take care of it. You can also withdraw DeepSeek permission at any time under Settings → Privacy & AI.
8Children
The product is for engineering-exam candidates and is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We don't knowingly collect data from children; if you believe a child has created an account, contact us and we'll delete it.
9Changes to this policy
If we change this policy in a way that matters, we'll update the effective date above and, for significant changes, tell you in the app or by email before the change takes effect.