PrepTabs Privacy Notice

Effective date: October 22, 2026

PrepTabs is an independently operated study-tool pilot. This notice describes how the current web pilot handles personal information at preptabs.com and app.preptabs.com. Our former quizbinder.com addresses may redirect to the new website or continue to receive existing service callbacks. The rename does not create a separate account or transfer your study history to a new service.

You can contact the developer responsible for PrepTabs at [email protected] about this notice or your information.

Information we handle

Account information. When you sign in with email, Amazon Cognito manages the sign-in process, password handling, email verification, and password recovery. When you choose Google sign-in, Google and Cognito provide identity information used to create or identify your PrepTabs account, including an account identifier, email address, email-verification status, and name. PrepTabs does not receive your Google password. Our Google sign-in requests basic identity scopes, not access to Gmail, Drive files, contacts, or calendars.

Study information. We store the information you enter into your private binders, such as binder names, chapters, questions, answer choices, answers, explanations, favorites, practice responses, and study progress. This information is linked to your account so that you can return to it. Do not include other people's personal information or sensitive records in study content submitted to the pilot.

Billing information. The current pilot uses Waffo/Pancake in test mode; real-money billing is disabled. Testing may create buyer identifiers, email addresses, product and order details, subscription and refund statuses, credit balances, and payment-provider event records. Checkout is handled by the payment provider. The PrepTabs application does not provide a form that collects your full payment-card number or security code. Use only designated test payment details in the sandbox.

Technical and security information. Our hosting and network providers process information such as IP addresses, request times, request paths, browser or device information, and security signals to deliver and protect the service. The application also records operational errors and service events. We use sign-in cookies and security cookies to maintain sessions and protect requests. A PrepTabs web session is configured to expire after 30 days, and signing out invalidates that session. This is a session lifetime, not a promise that all related database or provider records are deleted at that time.

Why we use information

We use information to sign you in, associate you with your own binders, save and restore study progress, enforce access permissions, maintain test billing and credit records, respond to support requests, diagnose errors, prevent abuse, and operate the pilot. We do not use Google identity information for advertising. The current application does not include advertising tracking or sell personal information.

Your binders are not published as a public directory. Access controls restrict normal application access to the account that owns the data. The developer and service providers may process information when needed to operate, secure, troubleshoot, or support the service, or to address a legal obligation. This is not a promise of end-to-end encryption or a guarantee that an administrator can never access stored data.

Document import and AI

Document import and AI extraction are disabled in the current deployed pilot. The current import feature therefore does not send your study materials to an AI model provider. We have tested document-processing infrastructure using synthetic materials; that testing is separate from an enabled user import feature.

Before enabling user document import, we will update the relevant notice to identify the document-recognition and model providers, explain what content is sent to them, and describe the applicable retention and processing practices. A feature described as being developed is not evidence that your current study content is already being processed by an AI service.

Service providers and disclosures

The current pilot uses Amazon Web Services for hosting, account authentication, private storage, and backups; Cloudflare for DNS, traffic delivery, and network security; Google when you choose Google sign-in; and Waffo/Pancake for sandbox billing. Those providers may also process information under their own terms and privacy notices.

We may disclose information when reasonably needed to protect the service or people, respond to valid legal requirements, or carry out a request that you authorize. We do not make your study binders publicly available as part of the current service.

Storage, retention, and deletion

The primary application infrastructure is configured in AWS's US East (Northern Virginia) region. Network, identity, and payment providers may process information in other locations; this pilot does not promise that every copy remains in one country.

Account, study, and billing records remain in the pilot database while needed to operate your account, maintain records, and resolve problems. The current pilot has no general automatic account-deletion schedule. Database backups are configured for a 14-day lifecycle. Storage staging and temporary-processing locations have separate short lifecycles; these do not establish a deletion deadline for all user files or records.

You can delete a binder through the application. Deleting a binder removes its active study entries, but does not guarantee immediate deletion of associated files, provider records, or backup copies. Automatic account closure and complete file cleanup are still being developed.

To request access, correction, or deletion of account-related information, contact [email protected] from the email address associated with your account. Requests are handled manually during the pilot. We may need to verify your identity and clarify the request. We will explain any information that needs to be retained for security, recordkeeping, or legal reasons. This notice does not promise a self-service deletion feature or an immediate purge of every backup.

You can sign out, control cookies through your browser, and remove the app's Google connection through your Google Account settings. Removing Google's authorization does not itself delete your PrepTabs account or existing study records. Blocking necessary cookies may prevent sign-in from working.

Children and school use

The current pilot does not provide dedicated child, parent, classroom, or school-administration accounts. If you believe a child has provided personal information that should not be in the service, contact the developer so that the situation can be reviewed. Do not use the pilot to upload student records or information about children on someone else's behalf.

Changes and contact

We will update the date on this notice when it changes. If a new feature changes how we use personal information, we will provide the relevant information before that feature is enabled and seek additional permission where required.

For privacy questions or requests, contact [email protected].