Privacy Policy

1. Introduction

BarVerse™ ("we," "our," "us") is operated by VersEDLabs LLC, a Delaware limited liability company. We are committed to protecting your privacy and handling your data responsibly.

This Privacy Policy explains what information we collect, how we use it, and the rights you have regarding your data.

2. Cookies & Tracking

We use cookies and similar technologies to provide our services, understand how BarVerse is used, and improve your experience. When you first visit BarVerse, you can choose which categories of non-essential cookies you accept. You can change or withdraw your consent at any time by clicking the "Cookie Preferences" link in the footer or contacting us at privacy@barverse.app.

We use the following categories:

• Essential cookies: Always active. Required for authentication, security, audio playback, subscription checks, and core app functionality. These cannot be disabled.
• Analytics and performance cookies: Optional. Help us understand how visitors use BarVerse, which features are most helpful, and how we can improve learning outcomes. We use Google Analytics for this purpose.
• Marketing cookies: Optional. Used to measure the effectiveness of our marketing campaigns and promotional offers.

Your consent choice is stored locally in your browser and in a first-party cookie so we can respect it on future visits.

If you decline analytics or marketing cookies: we set no analytics or marketing cookies, and we use no identifier that recognises you across visits or across devices. Three things still happen, and we would rather be plain about them than leave you with the wrong impression:

• We record product events in our own systems without identifying you — which pages and tracks were used, and when. These records are stored with no account identifier and no session identifier, so they form counts rather than a record of your activity, and they are never shared with our marketing tools. We rely on our legitimate interest in understanding which content helps people pass the bar exam. See section 6 for your right to object to this.
• Two account events — completing a login and completing a signup — are sent to our analytics provider even if you decline, and these do identify the account involved. We rely on our legitimate interest in the security and integrity of accounts, which is not something we can protect without knowing which account an event concerns.
• Google Analytics receives a basic record of each page view: the page, the page you arrived from, your device type and your IP address. It receives no cookie and no identifier that persists between visits, so these records cannot be assembled into a profile of you. If you accept analytics cookies, it is additionally permitted to store a cookie so that repeat visits can be recognised. We do not enable its advertising features, and we do not use it to build advertising audiences.

3. Information We Collect

A. Information You Provide

• Account information (name, email)
• Study preferences or progress
• Support inquiries

B. Automatically Collected Information

• Device type, operating system and app version
• App usage analytics (pages visited, features used)
• Playback activity: tracks played, listening duration, playback events (play, pause, complete), and session identifiers — recorded to improve content recommendations and personalize your learning experience
• Crash logs and performance data
• If you allow notifications on your device, a notification token that lets us send you push notifications
• If you ask for a reminder before a free trial ends, your time zone. We use your time zone to time the reminder, and we keep it, with the time the reminder was sent, in our record of that reminder (see Account and legal records in section 5).

C. Service Providers

We use a small number of service providers to run BarVerse. Each receives only the information it needs for its function. Providers that process personal information on our behalf are bound by contract to protect it to a standard at least equal to this policy.

• Sign-in. Google provides our account authentication service, including sign-in, email verification and password reset. If you choose Continue with Apple or Continue with Google, Apple or Google confirms your identity and shares your name and email address with us, as you authorize at that time.
• Analytics. Google Analytics, for website usage analytics. You can read how Google uses information from sites or apps that use its services.
• Payments. Stripe serves as the payment processor for website transactions, and RevenueCat acts as the subscription management platform, handling subscription status, renewals, cancellations, and entitlement management. Apple takes payment for purchases made in the iOS app. We never receive or store your full card details.
• Notifications. Google and Apple deliver push notifications to your device, if you allow them.
• Hosting and infrastructure. Cloud providers host the website and our servers, hold your account, study progress and playlists, and stream audio.
• Monitoring. An error- and performance-monitoring provider helps us find and fix faults.
• Email. An email-delivery provider sends transactional email, such as verification, account notices, and the free-trial reminders you ask for.

Some of these providers are based in the United States, and your information may be processed there. If we add a new kind of provider, we will update this list.

D. Do Not Track

Some browsers send a "Do Not Track" signal. There is no common standard for responding to it, so BarVerse does not change its behavior when it receives one. You can turn analytics and marketing cookies off at any time through Cookie Preferences in the footer. We do not allow other companies to use BarVerse to collect information about your activity across other websites over time, except that our payment processor may use cookies and device information during checkout to prevent fraud.

4. How We Use Your Information

We use your data to:

• Provide and improve the BarVerse app
• Personalize your learning experience
• Communicate updates or support responses
• Send you a reminder before a free trial ends, if you ask for one
• Maintain security and prevent misuse

We do not sell your personal information.

5. Data Retention

We keep different kinds of information for different lengths of time, because they serve different purposes. We do not keep anything longer than the purpose requires.

• Your account and study data — your profile, progress, streaks, and playlists: kept for as long as your account exists, and deleted when you delete your account. There is no fixed period, because deleting your own study history while you are still studying would not serve you.
• Website analytics held by Google Analytics: 14 months. The bar exam is sat twice a year, so a shorter period would make it impossible to compare one exam cycle with the next.
• Error and performance reports: 90 days.
• Server logs: up to six months.
• Records of the emails we send you and whether they were delivered: 24 months.
• Our own records of product usage — which tracks and pages were used, and when: 24 months, after which they are deleted. The anonymous daily totals derived from them are kept for longer (see the next item), so we keep the long-term picture of what works without keeping the individual records behind it.
• Anonymous aggregate statistics — daily totals with no account identifier attached: kept indefinitely. These are not personal information and cannot be traced back to an individual.
• Payment and subscription records: kept for as long as tax and accounting law requires, which is longer than the life of an account. When you delete your account, the transaction remains for our accounts, but the profile it refers to no longer holds your name or email address.
• Account and legal records — a record of key events on your account: when it was created, sign-ins, purchases, renewals, cancellations and refunds, reminders we sent, and when it was deleted. These records hold your account identifier and what happened and, for a trial reminder, your time zone — never the content of what you did. They are kept after you delete your account, because we may need them to meet legal obligations, resolve disputes and keep accounts secure: sign-in records for 12 months; records of an email change or password reset for 24 months (an email address kept with an email-change record is erased when you delete your account); payment records, including when a subscription or trial started, for 7 years after the end of the tax year; the record of when your account was created, and the other records of your subscription and the notices we sent, for 6 years after your account was last active or was deleted, whichever is later; and the record of your account's deletion for at least 6 years after that, and for as long as any of these records remain. If we must keep a record longer because of a legal claim or investigation, we keep it until that is resolved.

6. Your Rights

Depending on your jurisdiction, you may also have rights to:

• Access your data
• Request deletion of your account and data
• Request correction of inaccurate information
• Withdraw consent for non-essential cookies and analytics
• Receive a copy of your data in a portable format
• Ask us not to sell or share your personal information — we do neither

To withdraw consent for cookies, click the "Cookie Preferences" link in the footer and update your choices. To delete your account, use the delete option in your profile settings. To exercise any other right, contact us at privacy@barverse.app. We will respond within the time your local law requires, and within 30 days in any case.

7. Children's Privacy

BarVerse is not intended for children under 13. We do not knowingly collect data from children under 13.

8. Security

We use reasonable technical and organizational measures to protect your information.

9. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on this page.

10. Contact

For privacy inquiries: privacy@barverse.app