Privacy Policy

1. Who We Are

C3RT ("we", "us", "our") operates c3rt.com and publishes native iOS and macOS exam preparation apps on the Apple App Store. Our registered contact address for privacy matters is privacy@c3rt.com.

2. Scope

This policy applies to:

• All C3RT apps available on the Apple App Store (iPhone, iPad, and Mac)
• The website c3rt.com and any subdomains
• Any future C3RT products unless a separate policy is published

3. Information We Collect

3.1 Information You Provide

C3RT apps do not require you to create an account with us. We do not collect your name, email address, or any personal identifiers directly.

3.2 Study Data (On-Device)

Your quiz history, practice exam scores, flashcard progress, study streaks, settings, and custom notes are stored locally on your device using an on-device database. This data never leaves your device unless you explicitly enable iCloud sync (see Section 5).

3.3 Purchase Data

All purchases, including subscriptions and one-time purchases, are processed entirely by Apple via StoreKit. We receive only an anonymised transaction receipt to verify your entitlement. We never see your payment card details, billing address, or Apple ID.

3.4 Crash and Diagnostic Reports

If you have opted in to sharing crash data with developers through your iOS/macOS device settings, Apple may transmit anonymised crash reports to us via App Store Connect. These reports contain device model, OS version, app version, and a crash stack trace. They do not contain personally identifiable information.

3.5 Analytics

We do not embed any third-party analytics SDK. We do not use Google Analytics, Firebase, Amplitude, Mixpanel, or any similar service inside our apps. Aggregate, anonymised metrics (such as total active devices and session counts) may be visible to us through Apple's own App Analytics dashboard; these are provided by Apple under Apple's privacy policies and are never traceable to individual users.

3.6 AI and On-Device Intelligence Features

Where an app offers AI-powered study coaching, adaptive quiz recommendations, or similar intelligent features, these are processed entirely on-device using Apple's Core ML or Apple Intelligence frameworks. No study data, quiz responses, or user inputs are sent to any external AI service or server.

4. How We Use Information

We use the limited information described above solely to:

• Deliver and maintain app functionality
• Verify subscription entitlements
• Identify and fix software bugs
• Improve content accuracy and app performance

We do not sell, rent, trade, or otherwise transfer your data to any third party for marketing, advertising, or any other commercial purpose.

5. iCloud Sync

Some C3RT apps offer optional iCloud sync to keep your study progress consistent across your iPhone, iPad, and Mac. If you enable this feature:

• Your study data is stored in your private iCloud account using Apple's CloudKit framework
• The data is encrypted in transit and at rest by Apple
• C3RT cannot access the contents of your iCloud data. It is visible only to your Apple ID
• You can disable iCloud sync at any time in your device's iCloud settings, and delete the associated data from iCloud Drive

iCloud sync is governed by Apple's iCloud Terms and Privacy Policy in addition to this policy.

6. Data Retention and Deletion

On-device data persists until you delete the app or clear app data through your device settings. iCloud data persists until you remove it from iCloud. Because we do not operate user accounts or centralised servers storing your personal data, we have no data to delete on our end when you uninstall an app.

If you believe we hold any personal data related to a support communication, contact privacy@c3rt.com and we will respond within 30 days.

7. Children's Privacy

C3RT apps are professional exam preparation tools intended for adults (17 years of age and older, consistent with the App Store age rating). We do not knowingly collect any personal information from children under the age of 13 (or 16 in the European Economic Area). If you believe a child has provided personal information to us, please contact privacy@c3rt.com and we will take prompt action.

8. Third-Party Services

Our apps and website may contain links to third-party sites (for example, governing body exam registration pages). We are not responsible for the privacy practices of those sites and encourage you to review their policies separately.

Third-party services used:

• Apple App Store / StoreKit: payment processing and subscription management (Apple's Privacy Policy applies)
• Apple CloudKit / iCloud: optional sync (Apple's Privacy Policy applies, opt-in only)
• Apple Crash Reporting: anonymised diagnostics (requires user opt-in via device settings)

No advertising networks, data brokers, or marketing platforms are integrated into our apps.

9. Security

On-device data is protected by iOS and macOS Data Protection (hardware-level encryption tied to your device passcode). iCloud data is encrypted by Apple in transit and at rest. We do not operate any servers that store your study data or personal information, which significantly limits the attack surface.

10. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or erase personal data we hold about you, or to restrict or object to certain processing. Because we hold minimal data, the primary mechanism for exercising these rights is your device settings and Apple's privacy controls.

Residents of the EEA, UK, California (CCPA), and other jurisdictions with specific privacy rights may contact us at privacy@c3rt.com to make a request. We will respond within 30 days.

California residents: we do not sell personal information as defined under the CCPA. We do not share personal information for cross-context behavioural advertising.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via an in-app notice or an updated date at the top of this page. Continued use of our apps after a policy update constitutes acceptance of the revised policy.

12. Contact

Privacy questions, data requests, or concerns: privacy@c3rt.com

General inquiries: hello@c3rt.com