Legal

Privacy Policy

Last updated: February 4, 2026

Overview

Test Prep Sheets (“testprepsheets.com”) is operated by TKO Prep. We take your privacy seriously. This policy explains what information we collect, how we use it, and your rights regarding your data.

Information We Collect

Account Information

When you sign in with Google, we receive your name and email address from Google OAuth. We use this to manage your account and subscription.

Payment Information

Payment processing is handled entirely by Stripe. We never see, store, or have access to your credit card number, CVV, or full card details. Stripe provides us only with a confirmation of payment and your subscription status.

Usage Data

We track the number of worksheets you generate each month to enforce plan limits. For free (unauthenticated) users, we use your IP address for rate limiting. This data is stored temporarily in Upstash Redis and automatically expires.

Generated Content

Worksheets are generated on-the-fly and delivered directly to your browser. We do not store copies of your generated worksheets on our servers.

Screenshots

If you upload a screenshot for topic detection, the image is sent to our AI provider (Anthropic/Claude) for analysis and is not stored after processing.

How We Use Your Information

  • Authentication: To identify you and manage your account
  • Usage tracking: To enforce worksheet generation limits based on your plan
  • Billing: To process subscription payments through Stripe
  • Service improvement: To understand usage patterns and improve our worksheet generation
  • Communication: To contact you about your account if necessary

We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties. Your data is used solely to provide and improve the Test Prep Sheets service.

Third-Party Services

We use the following third-party services to operate Test Prep Sheets:

Google OAuth

Authentication

Stripe

Payment processing

Anthropic (Claude)

AI problem generation & screenshot analysis

Upstash Redis

Usage tracking & rate limiting

Vercel

Hosting & infrastructure

Each of these services has their own privacy policy governing their handling of data. We encourage you to review their respective policies.

Cookies

We use cookies strictly for authentication purposes. When you sign in with Google, NextAuth.js sets a session cookie to keep you logged in. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

session-token

Required for authenticated users to maintain their login session

csrf-token

Security cookie to prevent cross-site request forgery

You can clear these cookies at any time by signing out or clearing your browser data.

Data Retention

  • Account data: Retained for as long as you have an active account
  • Usage counters: Reset monthly and automatically expire
  • IP-based rate limiting: Automatically expires within 30 days
  • After cancellation: Account data may be retained for up to 90 days for billing and support, then deleted

Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request deletion of your account and associated data
  • Cancel your subscription at any time
  • Opt out of any marketing communications

To exercise any of these rights, contact us at info@tkoprep.com.

Children’s Privacy

Our service is designed for SAT and ACT preparation and may be used by students under 18 with parental consent. We do not knowingly collect personal information from children under 13 without verifiable parental consent, in compliance with COPPA.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date.

Contact Us

If you have questions about this privacy policy or your data, contact us at: info@tkoprep.com