Privacy Policy

Last updated: February 21, 2026

1. Data Controller

The data controller for CambPrep (cambprep.com) is Alberto Merino, based in Spain. For any privacy-related inquiries, contact us at albertomerino.ams@icloud.com.

2. Data We Collect

We collect the following personal data:

  • Account information — name and email address provided during registration.
  • Exercise data — your answers, scores, and results from practice exercises.
  • Usage data — pages visited, features used, and session activity for service improvement.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, or health data.

3. How We Use Your Data

Your data is used to:

  • Provide and maintain the CambPrep service.
  • Track your learning progress and exercise history.
  • Generate AI-powered evaluations and feedback.
  • Process payments and manage subscriptions.
  • Send important service-related communications.

4. Legal Basis for Processing (GDPR)

We process your data based on:

  • Contract performance — to provide the service you signed up for.
  • Legitimate interest — to improve the platform and ensure security.
  • Consent — when you accept these terms during registration.

5. Third-Party Services

We share data with the following third-party processors, strictly for service functionality:

  • Stripe — processes payments securely. We never store your credit card details. Stripe's privacy policy: stripe.com/privacy.
  • Google Gemini — processes your exercise text submissions to generate AI evaluations. Google's privacy policy: policies.google.com/privacy.
  • Vercel — hosts the application.
  • Supabase — hosts the database (PostgreSQL).

We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Cookies

CambPrep uses only essential technical cookies required for authentication and session management. We do not use advertising or tracking cookies.

7. Data Retention

Your data is retained for as long as your account is active. If you delete your account, all personal data and exercise history will be permanently removed within 30 days.

8. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access — request a copy of your personal data.
  • Rectification — correct inaccurate data via your account settings.
  • Erasure — request deletion of your account and all associated data.
  • Data portability — export your data in a machine-readable format.
  • Restriction — request limitation of processing in certain circumstances.
  • Objection — object to processing based on legitimate interest.

To exercise any of these rights, contact us at albertomerino.ams@icloud.com. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and secure database access. However, no method of transmission or storage is 100% secure.

10. Children's Privacy

CambPrep is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes via email. Continued use of the service constitutes acceptance of the updated policy.

12. Supervisory Authority

If you are unsatisfied with our handling of your data, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — aepd.es).

13. Contact

For any privacy-related questions, contact us at albertomerino.ams@icloud.com.

See also our Terms and Conditions.