Legal
Privacy Policy
Effective Date: April 1, 2026 · Last Updated: April 1, 2026
PermitPop (“we,” “us,” or “our”), operated by RetenzAI, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the PermitPop website at permitpop.ai and related services (the “Service”).
1. Information We Collect
1.1 Information You Provide
- Account information: Name, email address, and state of residence when you create an account.
- Payment information: When you make a purchase, payment details (credit card number, billing address) are collected and processed by our payment processor, Stripe. We do not store your full payment card details on our servers.
- Support communications: Any information you provide when contacting us for support.
1.2 Information Collected Automatically
- Study progress & quiz scores: Your answers, scores, study streaks, completion data, and spaced repetition scheduling data.
- Usage data: Pages visited, features used, session duration, and interaction patterns collected through PostHog analytics.
- Device & browser information: Browser type, operating system, screen resolution, and general location (country/region level — not precise GPS).
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Personalize your study experience through our spaced repetition algorithm
- Process payments and fulfill purchases
- Verify Pass Guarantee eligibility (study progress, scores, streaks)
- Send transactional emails (purchase confirmations, password resets)
- Provide parent/guardian visibility into their child's study progress (when linked)
- Analyze usage patterns to improve our content and user experience
- Detect and prevent fraud or abuse
- Respond to support requests and communicate with you about the Service
3. Third-Party Services
We work with trusted third-party service providers who process data on our behalf:
Supabase — Database & Authentication
Stores your account information, study progress, and quiz data. Supabase provides our authentication system and database hosting.
Stripe — Payment Processing
Processes all payments securely. Stripe collects and stores your payment card information directly — we never see or store your full card number. See Stripe's Privacy Policy.
PostHog — Analytics
Tracks anonymous usage patterns (page views, feature usage, session data) to help us improve the product. PostHog uses cookies — see Section 4 below. Analytics are only loaded after you consent to cookies.
Vercel — Hosting
Hosts our website and processes web requests. Vercel may collect server logs including IP addresses and request metadata. See Vercel's Privacy Policy.
We do not sell your personal information to third parties. We only share information with third parties as described in this policy or with your consent.
5. Children's Privacy (COPPA)
PermitPop is designed for teenagers preparing for their DMV permit test. Our policies regarding minors:
- Under 13: We do not knowingly collect personal information from children under the age of 13. If you believe a child under 13 has provided us with personal information, please contact us immediately at support@permitpop.ai and we will delete it.
- Ages 13-17: Users between 13 and 17 may use the Service with parental consent. Parents/guardians can link their account to monitor their child's study progress through our Parent Dashboard. Parents may request access to, deletion of, or restrictions on their child's data at any time.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you the Service. Specifically:
- Account data: Retained while your account is active and for up to 30 days after account deletion to process any pending refund claims.
- Study progress: Retained while your account is active. Deleted when you delete your account.
- Payment records: Retained for 7 years as required for tax and accounting purposes.
- Analytics data: Anonymized and aggregated data may be retained indefinitely for product improvement.
7. Your Rights
You have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information and account.
- Export: Request a portable copy of your data (study progress, scores, account information) in a machine-readable format.
- Withdraw consent: Opt out of analytics cookies at any time.
To exercise any of these rights, email us at support@permitpop.ai. We will respond to your request within 30 days.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption in transit (TLS/HTTPS) and at rest
- Row-level security policies on our database
- Regular security reviews of our infrastructure
- Minimal data collection — we only collect what we need to provide the Service
No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security, but we work hard to protect your information.
9. State-Specific Disclosures
California residents (CCPA): You have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information. To exercise your CCPA rights, contact support@permitpop.ai.
Residents of other states with comprehensive privacy laws (Virginia, Colorado, Connecticut, etc.) may have similar rights. Contact us to exercise them.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last Updated” date and, where appropriate, sending you an email notification. We encourage you to review this page periodically.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:
- Email: support@permitpop.ai
- Website: permitpop.ai
- Operator: RetenzAI