StudyKits

Privacy Policy

Last updated: October 15, 2026

Introduction

StudyKits is a certification exam preparation product built by AityTech. We respect your privacy and are committed to protecting your personal data. This policy explains what information we collect, how we use it, and your rights.

Information we collect

StudyKits is designed to collect minimal information:

  • No account required. The current versions of our apps have no login or registration.
  • No analytics or ad tracking in the apps. The current versions of our apps contain no usage analytics or advertising tracking, and send no usage statistics to us or to third parties. Apart from Apple / Google Play, the only third-party service the apps contact is RevenueCat, for purchases (see below).
  • Purchase information. In-app purchases are processed by Apple App Store / Google Play. We use RevenueCat to validate purchases and unlock them in the app: when the app starts, it sends RevenueCat an anonymous app user ID it generates, basic device and app information (such as platform, OS and app version, and store country), and your purchase receipts / transaction history. We do not collect or store payment information, and RevenueCat does not receive your name, email address or study data.
  • Support inquiries. If you email [email protected], we receive your address and message content.
  • Study progress. All study progress, scores, and bookmarks live on your device. We do not have access to this data.
  • Waitlist email (this site). If you join a waitlist on studykits.app, see the dedicated section below.
  • Website analytics (this site only). The studykits.app website uses Google Analytics 4. This applies to the website, not to the apps. See Website analytics below.

Waitlist data (studykits.app)

Per Stream C of our public roadmap, the waitlist on this site is GDPR-compliant by design:

  • What we store: your email address, the certification slug you waitlisted for, your UI locale (so we email you in the right language), the page you signed up from, and a timestamp.
  • What we do not store: IP addresses, user-agent strings, device fingerprints, or any tracking identifiers.
  • Double opt-in: we send a confirmation email and only retain confirmed records.
  • Retention: we keep your email until either (a) you unsubscribe, or (b) the cert you waitlisted for ships and you receive the launch email. After launch, we delete the record within 30 days.
  • Hard delete on unsubscribe: clicking "unsubscribe" performs a hard delete — there is no soft-delete or archive.
  • Right to access (DSAR): email [email protected] to request the exact data we hold about your address. We respond within 30 days.
  • Storage location: Cloudflare D1 (UK / EU residency) and Cloudflare Workers (global edge).
  • Anti-abuse: we use Cloudflare Turnstile (privacy-friendly CAPTCHA) and rate-limiting. The email address you type into the form is never sent to Google Analytics.

Website analytics (studykits.app)

The studykits.app website (not the apps) uses Google Analytics 4, provided by Google LLC, to understand which pages are read and how visitors find the site. We use it only for aggregate statistics; advertising features, Google signals and ad personalisation are turned off, and ad-related consent signals are always set to "denied".

  • When it runs: visitors in the European Economic Area, the United Kingdom and Switzerland see a cookie banner, and Google Analytics cookies are only set after they click "Accept". Elsewhere, analytics is on by default and you can turn it off at any time. Until analytics is allowed, Google Analytics sets no cookies and only receives cookieless signals without identifiers (Google Consent Mode).
  • What is collected: pages viewed and time on page, approximate location (country / city, derived from your IP address, which Google Analytics 4 does not log or store), device type, operating system, browser and screen size, language, and the referring page or link that brought you here.
  • Cookies: _ga and _ga_* (first-party, set by Google Analytics to tell visits apart). The choice you make in the banner is stored in your browser's local storage (cookie-consent), not in a cookie.
  • Retention: as configured in Google Analytics for our property.
  • Changing your choice / opting out: use "Cookie settings" in the footer of any page and choose "Decline". This stops analytics cookies and removes the _ga cookies from your browser. You can also use Google's opt-out browser add-on.
  • Google's privacy policy: policies.google.com/privacy and how Google uses data from sites that use its services.

外部送信に関する公表事項（電気通信事業法 第27条の12）

本ウェブサイト（studykits.app）では、利用者に関する情報を以下のとおり外部に送信しています。なお、アプリにはアクセス解析機能はありません。

  • 送信先：Google LLC（Google アナリティクス 4）
  • 送信される情報：閲覧したページのURL・タイトル、滞在時間、リファラー（参照元）、端末の種類・OS・ブラウザ・画面サイズ・言語設定、IPアドレスから推定されるおおよその地域、Cookie（_ga、_ga_*）による識別子
  • 利用目的：本ウェブサイトの利用状況の統計的な把握と改善のため（広告目的には利用しません）
  • オプトアウトの方法：各ページ下部の「Cookie settings」から「拒否する（Decline）」を選択するか、Google が提供する オプトアウト アドオン をご利用ください。
  • 送信先のプライバシーポリシー：Google プライバシーポリシー

How we process data

StudyKits processes data primarily on your device:

  • Question data is bundled with the app and stored locally.
  • Study progress stays on-device. There is no cloud sync in the current versions.
  • Internet connectivity is needed for the initial download and updates from the app store, and for purchases and restoring them (via RevenueCat). The core practice features work entirely offline.

Third-party services

  • Apple App Store / Google Play: distribution, IAP, refunds. Subject to their privacy policies.
  • RevenueCat (purchase processing): service provider that validates in-app purchases and stores purchase status for the anonymous app user ID described above. See RevenueCat's privacy policy.
  • Google Analytics 4 (website only): Google LLC; see Website analytics.
  • Cloudflare: serves studykits.app and processes the waitlist via Workers + D1 (Free Tier). See Cloudflare's privacy policy.
  • Resend / SES (waitlist email): transactional email only — confirmation and launch announcements.

Children's privacy

StudyKits is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at [email protected] and we will take steps to delete it.

International users

StudyKits is GDPR and CCPA compliant by design:

  • Data minimization — we collect only what we cannot avoid.
  • Right to erasure — uninstall the app or unsubscribe from the waitlist.
  • No in-app analytics — the apps do not track usage or show ads.
  • Website analytics only with a lawful basis — opt-in consent in the EEA, UK and Switzerland; opt-out everywhere via "Cookie settings".

Changes to this policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

Contact

Email: [email protected]