Privacy Policy

Zakarian GMAT (the “Platform”) is operated by Adam Zakarian, an independent GMAT prep provider (the “Operator,” “we,” or “us”). We can be reached at adamzakaryan17@gmail.com.

We collect only the information needed to operate the Platform:

• Account information. Your name, email address, and a password you choose. Passwords are stored as a salted hash via our authentication provider; we never see them in plain text.
• Study data. Your practice sessions, question attempts, error-log entries, exam date, target score, chapter progress, and notification preferences. This is the data the Platform uses to give you analytics, an adaptive plan, and a spaced review queue.
• Payment information. If you purchase a plan, our payments processor (Stripe) collects your card details directly. We store only a record of which plan you purchased and the corresponding identifier from Stripe. We never receive or store full card numbers.
• AI tutor messages. If you use the in-product AI tutor on a question, the question, your selected answer, and the messages you send to the tutor are sent to our model provider (Anthropic) to generate a reply. We do not retain the conversation on our servers beyond what is needed to render it back to you in the session.
• Device and log data. Standard server logs (IP address, request path, user agent, timestamp). These are retained for a limited period for security and debugging.

We do not currently use third-party advertising trackers, behavioral analytics, or session-replay tools.

• To provide the Platform and its core features.
• To compute your analytics, study plan, and review queue.
• To process payments and manage your subscription or plan.
• To send transactional emails (account verification, password reset, receipts).
• To send product updates if you opt in via your notification preferences.
• To diagnose bugs, prevent abuse, and keep the Platform secure.

We do not sell your personal information.

The Platform runs on a small set of vendors who process data on our behalf:

• Supabase — authentication and database (your account, study data, error log).
• Stripe — payments processing.
• Vercel — application hosting and content delivery.
• Anthropic — language-model inference for the in-product AI tutor.

Each of these providers has its own privacy and security commitments. We share only the data necessary for them to perform their role.

We use a small number of cookies (and equivalent local-storage keys) that are necessary for the Platform to function — primarily to keep you signed in and to remember session state such as your study timer and offline cache. We do not use advertising or cross-site tracking cookies.

Depending on where you live (for example, the EU/UK under GDPR or California under CCPA), you may have the right to:

• Request a copy of the personal data we hold about you.
• Request that inaccurate data be corrected.
• Request that your account and associated data be deleted.
• Object to or restrict certain processing.
• Receive your data in a portable format.

To exercise any of these rights, email us at adamzakaryan17@gmail.com. We will respond within 30 days.

We retain your account and study data for as long as your account is active. If you close your account, we delete your personal data within 30 days, except where we are required to keep specific records (for example, transaction records for tax purposes) or where the data is held in routine backups, in which case it is purged on the normal backup rotation.

We use industry-standard safeguards — TLS in transit, encrypted credentials at rest via our authentication provider, and least- privilege access to production systems. No system can guarantee perfect security; if we ever detect a breach affecting your data, we will notify you and the relevant regulators as required by law.

Our service providers may store and process your data in countries other than your own, including the United States. By using the Platform, you consent to that transfer. Where required, we rely on standard contractual clauses or equivalent safeguards.

The Platform is intended for users aged 16 and over. We do not knowingly collect personal information from children under 16. If you believe a child has created an account, please contact us and we will delete it.

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, give existing users reasonable notice by email or in the Platform.

Questions, requests, or complaints about this policy can be sent to adamzakaryan17@gmail.com. See also our Terms of Service and Refund Policy.