Privacy policy
Last updated 2026-09-21.
Website data
Product analytics via PostHog (page views, tool and practice events, coarse geography, device type). No account is required to use the free features; your diagnostic answers and study-plan inputs are stored only in your browser's local storage even when you sign in. Account sign-in does not synchronize your study history.
We also use Google Analytics 4 to measure aggregate website usage: pages viewed, referrer, device type, and approximate location. We do not enable Google Signals or ad personalization, and GA4 is not used for advertising or remarketing. See Google's privacy policy for how Google handles this data.
Website accounts
For Pro, we store your email address, verified account ID and secure session records on Cloudflare. We send short-lived sign-in links through Cloudflare Email Service. Session cookies keep you signed in; they are required for account features. Rate-limit records help prevent abuse. RevenueCat receives an opaque account ID and entitlement status to manage access; we do not send it your email address or study answers.
Website payments
If you buy Pro, Dodo Payments processes the payment. We receive a payment status and a reference to your account to manage access. We never see card numbers.
Cookies
Analytics uses first-party storage. Account features use secure session cookies. No advertising cookies.
Your rights
Email [email protected] to access or delete data associated with you.
Android app privacy
Updated October 8, 2026. This section covers the AFQT Plan Android app operated by Openverse. It is separate from the website services described above.
Study data on your device
No app account is required. Your study plan, answers, progress and cached access status are stored on your device. Reset all progress in Settings clears local study records; it does not delete records already processed by our service providers or refund a purchase. The app disables Android backup and excludes its local databases, preferences and files from device transfer.
Google Play purchases and RevenueCat
Google Play handles payment details. RevenueCat processes purchase history, product and transaction references, an anonymous app user identifier and access status to verify, restore and manage Full Access. We do not receive payment card numbers. Purchase data is retained rather than processed only temporarily, and this processing is necessary for purchase and restore functionality. A complimentary access code grants a separate local license; it does not create a Google Play transaction or a RevenueCat purchase. Codes are checked on your device and are not sent to analytics.
App analytics
PostHog receives an installation identifier, app and device information, language/region information, and events such as opening the app, practice topics, answer correctness, round summaries, paywall interactions and purchase outcomes. Network services receive your IP address, and PostHog derives approximate geography from it using GeoIP. We do not request GPS location or use advertising identifiers. These events help us understand and improve the app. The Android app has no analytics opt-out switch; collection is enabled in release builds and events can be queued offline and sent when connectivity returns. The Android app does not use website GA4 tracking, advertising, session replay or automatic screen recording.
Providers, security and retention
We use Google Play, RevenueCat and PostHog to operate these services, including processing outside your country. App requests to RevenueCat and PostHog use encrypted HTTPS connections. We do not sell your personal data or use app data for targeted advertising. We retain service records as needed to operate purchases, analyze product use, handle support and meet applicable obligations; local study data remains until you reset or remove it. Deleting our service records does not delete Google's independently held transaction records.
Access and deletion requests
Email [email protected] with the app name and the Purchase support ID and Analytics support ID shown in Android Settings under Privacy support identifiers. These identifiers let us locate the anonymous records in RevenueCat and PostHog. Do not send your password, payment card number or access code. We may ask for information needed to verify the request, and will explain any records that must be retained. Request deletion before uninstalling so the identifiers remain available. Using the app again can create new analytics records. See support for purchase and complimentary-access instructions.
Operator
Openverse. Independent of the U.S. Department of Defense ASVAB program.