Skip to content

Privacy Policy

Last updated: October 18, 2026

This Privacy Policy explains how EarnIt Learning LLC, a Tennessee limited liability company (“StudyBucky,” “we,” or “us”), collects, uses, and protects your information when you use our website, our iOS and Android mobile apps, and related services (collectively, the “Service”). The mobile apps present the same StudyBucky experience as the website and are covered by this same Policy.

The Service is intended for users located in the United States. We do not target the Service to, or knowingly provide it to, individuals located outside the United States, and your information is processed and stored in the United States.

1. Information we collect

  • Account information — your email address and authentication details, managed through our authentication provider (Supabase). If you sign in with Google or Apple, we receive basic account information from them to create your account.
  • Study activity — your diagnostic results, practice answers, progress, and flashcard data, so we can personalize your prep.
  • Payment information — if you subscribe on our website or in the Android app, Stripe processes the payment. If you subscribe in the iPhone app, Apple processes it. We do not store your full card number, and we do not receive your Apple payment details. Stripe and Apple share limited billing information with us, such as your plan, its status, and its dates.
  • AI chat content — when you use “Ask Bucky” or other AI features, the messages you send, limited context about the page you are on, the number of days until your exam, and your study stage (for example, first attempt or retake) are processed to generate a response. Your messages are stored to maintain your conversation history. To answer, your message, the earlier messages in that conversation, and that context are sent to our AI provider (Anthropic), labeled with a scrambled ID that does not include your name or email. Your question is also sent to an embedding provider (Voyage AI) that finds the relevant study material. A copy of each conversation is sent to Braintrust, which we use to check the quality of Ask Bucky’s answers; when you are signed in, that copy includes your account ID and email. Please do not enter sensitive personal or patient information into AI features.
  • Score report — if you upload an ARRT score report, it is kept in private storage, and you can delete it from your Account page. If you choose to have your scores read from it, we send the image to Anthropic as it is, so Anthropic receives everything on it, which can include your name, ARRT ID, and exam date.
  • Usage and device data — basic analytics (e.g. pages viewed, referring page, general location, and performance metrics) and, for security and abuse-prevention, your IP address. We collect this through Google Analytics (via Google Tag Manager), Vercel Analytics, our own activity log, PostHog, and our error-monitoring provider (Sentry). When you are signed in, PostHog ties your activity to your account email. PostHog also makes session replays, which are recordings of what appears on your screen as you use the site: clicks, scrolling, navigation, page content (including your Ask Bucky conversation as it appears), and technical messages from your browser. Text you type into form fields is hidden in replays. Replays are deleted after 30 days.
  • Mobile app data — if you install our iOS app and allow notifications, we store a device notification token so we can send study reminders (for example, a prompt the day before the exam date you enter, or a note that flashcards are due). These are delivered by Apple’s Push Notification service. You can turn notifications off at any time in your device settings, and we delete tokens that are no longer valid. If you install our Android app, it registers with Google’s Firebase service and we store the device token it returns. We do not send notifications to Android devices at this time. The apps do not collect advertising identifiers and do not track you across other companies’ apps or websites.
  • Voice input — if you use a feature that lets you speak your answer, the transcription is done by the speech recognition built into your own browser or device. Your audio does not pass through our servers and we never receive or store it. Note that some browsers perform this by sending the audio to their own vendor’s speech service — Chrome sends it to Google — so that vendor’s privacy policy applies to the audio, not ours. We only access the microphone while you are actively using that feature, and only after your device asks your permission.

2. How we use your information

  • To provide, personalize, and improve the Service;
  • To process payments and manage your subscription;
  • To email you about your account and support requests, send exam reminders, and send study tips and offers. You can turn off the reminders and the tips and offers on your Account page, or with the unsubscribe link in those emails;
  • To maintain security, monitor for errors, and prevent abuse.

3. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share data only with the service providers that operate the Service on our behalf, and only as needed to provide the Service or when required by law. These providers include:

  • Supabase hosts our database, handles sign-in, and stores files you upload, such as a score report.
  • Stripe processes payments for subscriptions on our website and in the Android app, and for tutoring.
  • Apple processes subscriptions bought in the iPhone app, provides Sign in with Apple, and delivers push notifications to iPhones and iPads.
  • Anthropic provides the AI behind “Ask Bucky” and reads score reports when you choose to have your scores read from one.
  • Voyage AI turns your Ask Bucky question into a search so we can find the relevant study material.
  • Braintrust keeps a copy of each Ask Bucky conversation so we can check the quality of its answers.
  • PostHog provides product analytics and session replay, linked to your email when you are signed in.
  • Vercel hosts the website and provides website analytics.
  • Google provides analytics (Google Analytics and Tag Manager), Google sign-in, tutoring scheduling and video calls, and Firebase on Android.
  • Sentry provides error monitoring and diagnostics.
  • Resend delivers our emails.
  • Cloudflare provides bot and abuse checks on sign-in, password reset, and Ask Bucky.

4. Cookies

We use cookies and similar technologies that are necessary to run the Service—most importantly to keep you signed in (authentication session cookies)—and analytics cookies (including Google Analytics and PostHog) to understand usage and improve the Service. We do not use advertising cookies, and we do not sell or “share” (as those terms are defined under state privacy laws) your personal information for cross-context behavioral advertising. Because we don’t engage in that kind of sale or sharing, there generally isn’t one to opt out of—but where a legally-recognized browser opt-out signal (such as Global Privacy Control) applies, we honor it as required by law. We do not currently respond to browser “Do Not Track” signals, which are a separate, non-standardized mechanism from Global Privacy Control.

The cookies and similar storage we set ourselves are: your sign-in session; an anonymous visitor ID (sb_anon_id, up to one year) that counts the free practice you have used and connects your visits before and after you sign up; a partner tag (sb_ref, 30 days), set only if you arrive through a partner’s link, so we can credit that partner if you sign up; and your dashboard layout choice (sb_dash_layout, one year). On our own test browsers only, a no-tracking flag (sb_no_track, one year) keeps our checks out of our visitor counts. Your browser also stores small settings on your device, such as light or dark mode and unfinished practice sessions. Our analytics providers set their own cookies.

5. Data retention

We keep your account, study, and Ask Bucky conversation data for as long as your account is active. PostHog session replays are deleted after 30 days. Other analytics and error-monitoring data are kept on a rolling basis under those providers’ standard retention periods. You can delete your account yourself at any time, or ask us to do it (see Contact below). Section 6 lists what deletion removes and what it does not.

6. Your rights

Depending on your state of residence, you may have the right to access, correct, export, or delete your personal data, and to opt out of any “sale” or “sharing” of it (we do neither). California residents (CCPA/CPRA), and residents of other states with comprehensive privacy laws, may request access to or deletion of their personal information, and we will not discriminate against you for exercising these rights. To exercise any of these rights, contact us using the details below; we may need to verify your identity before acting on a request.

Deleting your account. You do not need to contact us to delete your account. Sign in, open My Account (in the app or on the website), scroll to the bottom, and choose Delete my account. You can read what deletion does at studybucky.com/account-deletion, or email us and we will do it for you.

What deletion removes. Your sign-in and profile; your answers, mock exams, flashcards, and progress; your projected-score history and any exam results you recorded; your Ask Bucky conversations; any score report you uploaded; and your device notification tokens. A subscription you bought on our website or in the Android app is cancelled right away. Your Sign in with Apple connection is revoked.

What deletion does not do. It does not cancel a subscription you bought in the iPhone app, because Apple bills that subscription. Cancel it in Settings on your iPhone (tap your name, then Subscriptions) before you delete your account.

What we keep.

  • Tutoring records, if you booked tutoring. That is a separate paid service, so deleting your account unlinks them from your login but does not erase them.
  • Payment records held by Stripe and Apple, and the record of an App Store subscription, which loses its link to you but lets us process Apple’s billing notices.
  • Question reports and lesson suggestions you sent. They stay, with your account link and email removed.
  • Calibration records. To check how accurate the projected score is, we sometimes record a student’s practice totals next to an outside benchmark. These lose their link to your account but can still include a first name and those totals.
  • Records at PostHog, Braintrust, and Resend, which are not removed automatically. Email us and we will delete them or ask the provider to.
  • Records we must keep by law, such as billing and tax records, and backup copies until they cycle out under our standard backup schedule.

7. Security

We use industry-standard safeguards to protect your data, but no method of transmission or storage is completely secure. We cannot guarantee absolute security.

8. Third-party links

The Service may link to third-party websites. We don’t control those sites and aren’t responsible for their privacy practices. This Policy applies only to information we collect directly through the Service.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect data from them. If you believe a child has provided us personal information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. Material changes will be posted here with an updated date.

11. Mobile apps and the app stores

Our iOS and Android apps are distributed through the Apple App Store and Google Play. Those stores collect their own information about downloads and purchases under their own privacy policies, which we don’t control. In the iPhone app you can subscribe through the App Store, and Apple processes that payment. On our website and in the Android app, Stripe does. The apps request device permissions only when a feature needs them—notifications for study reminders, and the microphone for voice input—and you can change your mind at any time in your device settings. We do not collect advertising identifiers and do not track you across other companies’ apps or websites, so the apps do not present an app-tracking permission prompt.

12. Contact

For privacy questions or data requests, email support@studybucky.com, or write to us at:

EarnIt Learning LLC
3468 Cayuse Way
Clarksville, TN 37042