Privacy Policy

PermitCrush ("we," "us," or "our") operates the website at permitcrush.com (the "Platform"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our exam preparation and driver education platform.

By using the Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Platform.

Account Information

• Email address (used for authentication via one-time passcode)
• Display name (derived from your email)

Usage & Performance Data

• Quiz scores, answers, and completion times
• Study streaks, XP, and achievement badges
• Progress and mastery data per exam section
• Bookmarked questions and custom tests
• Activity logs (quiz starts, completions, milestones)

Technical Data

• IP address (for rate limiting and security)
• Browser type and device information
• Pages visited and interaction patterns

We use the following cookies:

• pc_session — An httpOnly session cookie that keeps you logged in. Expires after 30 days. Essential for authentication.
• pc_cookie_consent — Records your cookie consent preference. Expires after 1 year.

We also use localStorage for the following non-personal preference:

• pc_theme — Your preferred color theme (light, dark, or system).

We do not use third-party tracking cookies. If we add analytics in the future, this policy will be updated accordingly.

• To authenticate you and maintain your session
• To track your study progress and provide personalized learning
• To power spaced repetition and adaptive study recommendations
• To award achievements, streaks, and rewards
• To send study reminders (if enabled)
• To improve the Platform and fix bugs
• To prevent abuse and enforce rate limits

Your data is stored securely using Supabase, a hosted PostgreSQL database platform. Supabase provides encryption at rest and in transit, role-based access control, and regular backups. Our database is hosted in secure cloud infrastructure with industry-standard protections.

We do not sell, trade, or rent your personal information to third parties.

We may share data only in these limited circumstances:

• With service providers that help us operate the Platform (e.g., Supabase for database hosting, Resend for transactional emails)
• If required by law, regulation, or legal process
• To protect the rights, safety, or property of PermitCrush or its users

We retain your account and study data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where we are required by law to retain it.

All Users

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Opt out of non-essential communications

California Residents (CCPA)

• Right to know what personal information is collected and how it is used
• Right to delete personal information
• Right to opt out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your rights

EU/EEA Residents (GDPR)

• Right of access, rectification, and erasure
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

The Platform may be used by minors under parental supervision. We do not knowingly collect personal information from children under 13 without parental consent. If you believe a child under 13 has provided us with personal data without consent, please contact us so we can delete it.

We implement appropriate technical and organizational measures to protect your data, including HTTPS encryption, httpOnly session cookies, rate limiting, security headers, and access controls. However, no method of transmission over the Internet is 100% secure.

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date at the top of this page. Continued use of the Platform after changes constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

PermitCrush
Email: support@permitcrush.com
Website: permitcrush.com