Privacy

What we store

Two kinds of data, kept apart. Your identity is held by our authentication provider; everything about your studying is held in our own database.

• Account: your email address, your name if you give one, and a profile image if your sign-in provider supplies one.
• Plan: your exam date, the study window you chose, your timezone, and the waking hours you set.
• Practice: which questions and cards you were shown, what you answered, whether it was right, how confident you said you were, and when.
• Errors: one row per principle you have got wrong — never a list of the individual questions you fluffed.
• Organizations, only if you are asked or invited to join one: which organization and team you belong to and when you joined, each request or invite you were sent and how you answered it, and the organization's log of those changes and who made them. If you delete your account, those log entries stay with the organization without your account attached.

What your organization's admins can see

If you join an organization on Spaced, its admins can see these things about you, and nothing else:

• Readiness band (on track / behind / at risk)
• Exam date and chosen plan
• Modules completed, in total and by domain
• Last active day and days active this week
• Whether you're on Free or Full Access
• Which rules are common across a group of 5 or more learners, counted, never by name
• Which modules a group of 5 or more learners knew least before they were taught, counted, never by name

What they can never see

Not a setting — a guarantee. No query in the product returns one learner's answers to an admin, and the database carries no team-scoped view over per-question data. It is enforced on the server, not hidden in the interface. An admin can never see:

• Individual answers or per-question results
• Your individual error log
• Projected or scaled scores
• Your baseline results
• How or when you got Full Access, or what you paid

Colleagues on your company's domain

Organizations are set up only by us, for a company whose email domain we have been given. That organization's admins can see the name and email address of anyone on Spaced with a verified address on that domain, and whether a request to join is waiting for them or was declined in the last 30 days — nothing about their studying. You join only if you accept a request or an invite yourself, and you can leave at any time, from Settings › Account. Leaving removes your place in the organization and nothing about your studying.

What we do not do

We do not sell your data, share it with advertisers, or use it to train models. There is no advertising on Spaced. We use PostHog for anonymous usage and error analytics — cookieless in the browser, keyed only by an account id once you are signed in, and never your answers or anything you type. We do not use your free-text answers for anything except showing them back to you.

Who processes it

We use a small number of providers, each doing one job. Your data lives in the United States.

• Clerk — accounts and sign-in. Holds your email, name and sessions.
• Supabase — the database holding your plan, practice history and error log, hosted in the US West region.
• Vercel — hosting, server logs and Speed Insights, which measures how fast pages load. Logs record requests and errors, not your answers.
• Resend — sends team invitation emails, and only where a team's invites are sent by email rather than by a copied link.
• Stripe — takes the Full Access payment on its own page. It holds your card details and the email your receipt goes to; Spaced keeps a record that the payment was made — its Stripe ids, amount and outcome — and never your card.
• Anthropic — only if you connect your own Claude to Spaced. Claude then reads your plan, your gaps and what you have already answered, when you ask it to; nothing is sent to Anthropic otherwise.
• PostHog — usage and error analytics, hosted in the US. It receives page views, where on a page people click and how far they scroll, milestones in your study (a module opened, a session finished, a purchase), the campaign tags on the link you arrived by, the site that sent you and the page you first arrived on, and crash reports — never your answers, anything you type, your name or your email, and no cookie is set in your browser.

Cookies

Spaced sets cookies for one purpose: keeping you signed in. There are no advertising or tracking cookies, so there is no consent banner to dismiss.

How long we keep it

Your practice history is kept while your account exists, because the schedule is computed from it — a card's next date is a function of every time you have seen it. Delete your account and it goes.

Deleting your account

You can delete your account from your account settings. Deletion removes your practice history, error log, plan and profile from our database, and your usage record in our analytics; it is a cascade, not a flag, so the rows are gone rather than hidden.

Exam content — modules, questions, cards — is ours and stays. It was never yours to delete and holds nothing about you.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Email us and we will answer. If you are in the UK, EU or California you have these rights under law; we extend the same handling to everyone, because maintaining two standards is how mistakes happen.

Children

Spaced is for people preparing for a professional certification and is not intended for anyone under 16. We do not knowingly collect data from children.

Changes

If this policy changes in a way that affects what we collect or who can see it, we will say so here and update the date above rather than changing it quietly.