Privacy Policy

Effective July 19, 2026 · Applies to the FE Exam AI Prep website and web member center

This policy says, in plain language, what we collect, why we collect it, who processes it on our behalf, and the controls you have. The short version: we collect the data the product needs to work, we don't run ads, we don't track you across other apps or sites, and we never sell your data.

1Who we are

The FE Exam AI Prep website and web member center are operated by Hangzhou Star Vision Technology Co., Ltd. We are responsible for the personal data described in this policy. You can reach us about anything in this policy at contact@xingshiyu.com.cn.

This policy covers the website, the web member center, and FE Exam AI Prep mobile apps, including the Android app available through Google Play. The same account and the same data described in this policy power the web service and supported mobile apps.

FE Exam AI Prep is an independent study tool and is not affiliated with, endorsed by, or sponsored by NCEES. All practice questions are original and generated for study purposes based on publicly available exam specifications.

2What we collect

Account information. Your email address, user ID, and authentication records. On the web you sign in by email link or password.
Emails you choose to share. If you previously joined an app launch list or request a free study resource by email, we store the address you submit and the page where you submitted it.
Your exam profile. The discipline you're preparing for, your exam date, and your weekly study-hours budget.
Study activity. Questions attempted, answers and correctness, time spent per question, confidence ratings, mock-exam scores, topic mastery, streak days, wrong-answer review history, and video watch positions.
Subscription and purchase records. Your plan, renewal or cancellation status, Paddle customer and subscription identifiers, and transaction or invoice metadata needed to provide access and support. Paddle processes web payments; we never receive or store your full card details.
Web-session metadata. Which supported browser or device a practice session, mock exam, or video was last active on, so you can resume in the web member center. This is visible only to you.
AI request content. Prompts you submit to optional live-AI features and the relevant study context listed on the consent screen for that request.
AI response reports. If you choose to report a generated response, we store that response, its request ID, your issue category, and any optional note. The report does not store your original prompt.

What we deliberately do not collect: contact lists, photos, precise location, advertising identifiers, or anything for cross-app tracking.

3How we use it

To run the product. Your activity updates your progress and readiness indicators, supports wrong-answer review and video recommendations, and keeps your records available in the web member center across supported browsers.
To power optional AI features. Before the first request, the web service names DeepSeek, lists the prompt and study fields required for that feature, and asks for permission. Only after you consent and make a request are those fields sent through our server to DeepSeek. With permission off, no prompt or study context is sent and deterministic local recommendations remain available.
To review reported AI responses. We use the generated response, request ID, issue category, and optional note to investigate accuracy, safety, privacy, and quality issues.
To email you. Sign-in links you request, any one-time app launch notice you previously requested, and study resources you explicitly ask us to send.

We do not sell your data, use it for advertising, or share it with data brokers. We may use aggregated, de-identified statistics (for example, “typical readiness at the start of prep”) to improve the product; those never identify you.

Readiness indicators summarize your own practice activity only for study planning. They do not determine exam eligibility, admission, employment, professional licensure, or any other consequential decision, and we do not provide them to NCEES, licensing boards, schools, or employers for those purposes.

4Who processes data on our behalf

Supabase — account, authentication, sync, and storage for your study data.
Vercel — website hosting, performance measurements, and anonymous aggregate web analytics.
Resend — delivery of sign-in, launch-list, and requested study-resource emails.
Paddle — merchant of record and payment, tax, invoicing, subscription, billing-portal, fraud-prevention, and buyer-support services for web purchases.
DeepSeek — only after explicit consent and when you use a live-AI feature; it receives the prompt and listed study context for that specific request to generate a reply.

Each provider processes data only to provide its service to us. We don't authorize any of them to use your data for their own purposes.

5Cookies & the web member center

The website uses browser storage to keep you signed in and remember your light/dark theme choice. We use Vercel Web Analytics to understand aggregate page visits, referral sources, device types, and general location, and Speed Insights to measure page performance. These services do not use advertising cookies, do not identify you by email, and do not track you across other websites. Member-center routes are excluded from our Web Analytics page-view collection, and we remove query strings before analytics events are sent.

6Retention & deletion

Delete your account from Settings on the web — deletion starts immediately, including cleanup requests to connected identity providers, and removes your account, progress, and account-linked AI response reports from active systems promptly. Backup and security-log copies age out within 30 days. Transaction, invoice, tax, fraud-prevention, and subscription records may be retained by us or Paddle where required for legal, accounting, dispute, or security purposes. Deleting your account does not cancel billing — cancel separately in the Paddle billing portal.
Access or correct your data by emailing contact@xingshiyu.com.cn. We'll respond within 30 days.
Launch-list emails are kept until we send the requested availability notice, then deleted within 90 days unless you separately create an account or ask to receive something else. You can ask us to remove your address at any time.
We keep your data while your account exists so your progress and readiness history keep working.

7Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. We honor these requests for everyone, not just where the law requires it — email contact@xingshiyu.com.cn and we'll take care of it. You can also withdraw DeepSeek permission at any time under Settings → Privacy & AI.

8Children

The product is for engineering-exam candidates and is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We don't knowingly collect data from children; if you believe a child has created an account, contact us and we'll delete it.

9Changes to this policy

If we change this policy in a way that matters, we'll update the effective date above and, for significant changes, tell you in the web service or by email before the change takes effect.

Questions about privacy? Email contact@xingshiyu.com.cn. See also our Terms of Service.