Privacy Policy

1. Information we collect

Information you provide

• Account information — your email address and, if you sign up with email and password, a password (stored securely by our authentication provider; we never see it in plain text). If you sign in with Google, we receive your email address and display name.
• Payment information — when you subscribe, payment is processed by Stripe. Your card number and billing details are entered on Stripe's systems; CrushCert never receives or stores your full card number. We retain a record of your subscription status, plan, and the exams you have access to.
• Study activity — quiz, practice-exam, flashcard, and lab results, progress, streaks, readiness scores, and similar learning data you generate while using the Service.
• Communications — messages you send us (for example, to support@crushcert.com) and any email address you submit to our newsletter or waitlist.

Information collected automatically

• Usage and analytics data — pages viewed, features used, and events such as sign-ups, study sessions, and checkouts, collected through Google Analytics (GA4). This helps us understand how the Service is used and improve it.
• Device and technical data used for security and anti-abuse — to prevent abuse of our free trial (for example, one person creating many trials), we collect limited technical signals such as browser type, language, screen and timezone settings, and device characteristics, and we store a hashed device fingerprint and a hashed form of your email. These hashes are one-way; we do not use them to build advertising profiles.

2. How we use your information

• To provide, operate, and maintain the Service and your account.
• To process subscriptions, payments, and access to the exams you purchase.
• To send you transactional messages (for example, email verification, password resets, and subscription confirmations) and, if you have not opted out, product and study-reminder emails.
• To measure and improve the Service, understand usage, and develop new features.
• To detect, prevent, and address fraud, trial abuse, security issues, and violations of our Terms.
• To comply with legal obligations.

3. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only with service providers who help us run CrushCert, and only as needed for them to perform their services:

• Google Firebase — authentication, database, and backend infrastructure.
• Google Analytics — usage analytics.
• Stripe — payment processing and subscription management.
• Resend — delivery of our transactional and product emails.
• Netlify — website hosting and content delivery.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a business transfer (such as a merger or acquisition).

4. Cookies and analytics

We and Google Analytics use cookies and similar identifiers to keep you signed in and to understand how the Service is used. Most browsers let you control or delete cookies through their settings. CrushCert does not show advertising and does not use advertising cookies. You can opt out of Google Analytics using Google's browser add-on.

5. Your choices and rights

You can:

• Access or update your account information from within the app, or by contacting us.
• Unsubscribe from product and reminder emails at any time using the link in those emails or your dashboard settings. We will still send essential account and billing messages.
• Delete your account and personal data by emailing us at support@crushcert.com.

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA/CPRA) or the EU/UK GDPR — including the right to know what we hold, to request deletion, and to not be discriminated against for exercising your rights. We do not sell personal information. To make a request, contact us at support@crushcert.com; we may need to verify your identity first.

6. Data retention

We keep your information for as long as your account is active and as needed to provide the Service. After you delete your account, we remove or de-identify your personal data within a reasonable period, except where we must retain certain records (for example, payment and tax records) to comply with legal obligations.

7. Security

We use industry-standard safeguards — including encrypted connections and access controls through Firebase and Stripe — to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Children's privacy

CrushCert is intended for adults preparing for professional IT certifications and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

9. International users

CrushCert is operated from the United States. If you access the Service from outside the U.S., your information will be processed in the United States, where privacy laws may differ from those in your country.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice. Your continued use of the Service after an update means you accept the revised policy.

11. Contact us

Questions about this policy or your data? Reach us at support@crushcert.com.

Bridge10 Wireless LLC (dba CrushCert)
1463 North Claiborne, Unit A
New Orleans, LA 70116