Privacy

Your study records stay on your device. Certbound sends usage and learning totals to PostHog.

Contact: hello@certbound.app

Product domain: certbound.app

1. What never happens

• Certbound has no account or sign-in. Your selected answers, notes and typed reports are not uploaded or used to train anything.
• Study records stay local. Analytics sends totals and scores, not individual questions or answers.
• Builds without valid analytics configuration send no usage events.
• Browser exercises never upload answers. Website PostHog is unconfigured; no analytics cookies are set.

2. Data we touch

2.1 Data on your device

Data: a local database of your answers, missed questions, mock exam scores, per-area progress and settings, question notes and voluntary exam feedback. Questions and figures ship inside the app.

Used to: run practice, score exams and estimate readiness. Aggregate totals also feed app analytics.

Kept: until you export, run Delete everything, or uninstall. Export is free: one JSON file. Delete everything clears the device after a second confirmation and clears the analytics install ID.

2.2 Buying Lifetime in the app

Data: the store receipt and transaction identifiers for the purchase, plus an anonymous app-instance identifier.

Used to: unlock the question bank, restore it on a new device, and keep it working offline from a local cache.

Who: the Apple App Store or Google Play takes the payment; RevenueCat checks the receipt. We never see your card number.

Basis: performing the purchase contract.

Kept: by the store under its own terms; by RevenueCat while Certbound is on sale, so Restore purchase keeps working.

2.3 App usage analytics

Data: a random install identifier, app version, platform, usage counts, purchase steps, diagnostic score bands, mock scores and per-area correct totals.

Events include an install channel distinguishing store, test, internal or unknown installs. Voluntary test feedback shares only passed or not passed, never its date.

One event per install records install source and our Apple Ads campaign, ad group and keyword IDs on iPhone.

The raw Google Play referrer stays on the device.

We share the random identifier with RevenueCat to link app use to store purchases. RevenueCat also collects Apple's AdServices attribution token on iPhone.

These attribution paths run only while analytics is enabled. They need no tracking prompt or advertising identifier.

PostHog keeps your IP address and uses it to estimate your country, region and city.

Used to: find broken purchase steps and understand which study tools people use. Client purchase events are not receipts or revenue records.

Who: PostHog in the United States. No advertising identifiers, person profiles, cross-app tracking, session recordings or automatic screen capture.

Basis: our legitimate interest in improving the app. We attach no account, email or name to the random identifier.

Kept: by PostHog under its terms. We keep no separate copy.

Analytics runs when configured, without a switch. If you turned sharing off in an earlier version, it stays off. Delete everything clears the install identifier and starts a new one. Uninstalling stops sending. Questions: hello@certbound.app.

No event includes question text, chosen options, notes, typed ACS codes, pasted weather, report text, email or exam dates.

2.4 Email to us

Data: what you write to hello@certbound.app, and your address. Reporting a question sends the same way, and adds the identifier of that question and the line you choose to write.

Used to: answer you, and to fix a question and re-check its source.

Kept: 12 months after the thread closes.

2.5 The website

Data: your IP address and connection metadata reach Cloudflare to deliver the website. No analytics beacon reads your browser practice, decoder text or ACS input.

Used to: serve pages over HTTPS and protect the website.

Who: Cloudflare globally; delivery-log retention is unverified.

Practice and teaching inputs stay in page memory until you reload or leave.

Google, Microsoft, Meta or TikTok ad click IDs go to our conversion relay when an ad landing brings new IDs. Your browser keeps the IDs and an opaque reference in session storage for that session. The relay deletes its copy after 90 days. For ad-attributed purchases, server-side reporting can send the purchase to that ad platform.

3. Processors

• Apple App Store and Google Play — payment and receipts (United States).
• RevenueCat — entitlement verification, restore purchase, purchase analytics and Apple ad attribution (United States), under its data processing terms.
• Cloudflare — website delivery and security (global network).
• PostHog — anonymous usage and learning analytics (United States).

We do not sell data or show advertising.

4. Your rights

If you are in the EU, the UK or another place with data-protection rights, you can ask us to show, correct, delete, restrict, export or stop using data about you. You can also complain to your local supervisory authority. Write to hello@certbound.app; we answer within one month. We cannot retrieve practice answers from our servers. Use the app’s export and Delete everything controls for device records, or contact the store for purchase records.

5. Children

Certbound is not directed at children. It is written for adults preparing for a United States certification exam. We do not knowingly request personal information from children.

6. Changes

If a change would affect what data we touch, we announce it in the app's update notes before it takes effect.

7. Contact

hello@certbound.app — WaveApp LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA