Privacy policy

What Fasteppp stores

When you sign in with Google, Fasteppp stores the account information needed to authenticate you, such as your email address, name, profile image, and the OAuth connection managed by Auth.js.

When you study, Fasteppp stores your quiz attempts, selected answers, confidence ratings, flashcard reviews, domain mastery, readiness snapshots, planner settings, and activity totals so the app can provide personal progress and adaptive recommendations.

Optional product telemetry

If enabled in Account and privacy settings, Fasteppp records a small first-party event stream: signup, first quiz, quiz completion, flashcard review, and feature usage. These events contain an internal user identifier and limited context such as the feature name or quiz mode. They do not contain question text, selected answers, IP addresses, advertising identifiers, or third-party analytics cookies.

You can disable optional product telemetry at any time. Disabling it does not delete your personal study data; use account deletion when you want all account-linked data removed.

Error monitoring

Fasteppp records sanitized server and client error details to a private, self-hosted database so production failures can be diagnosed. Error records may include an error name, a short redacted message, route, method, and framework digest. Request headers, OAuth tokens, question answers, and raw query strings are not stored in the error stream.

Bug reports

The in-app bug report form may store the report summary, description, page path, browser user-agent, and an optional contact email. Signed-in reports are linked to your account so they can be investigated and removed when you delete your account.

Retention

• Optional product telemetry is retained for 90 days.
• Sanitized error records are retained for 30 days.
• Bug reports are retained while needed for product support and maintenance.
• Personal account and study data is retained until you delete your account.
• Backups may retain encrypted database copies for up to 14 days for disaster recovery.

Contact and data requests

To exercise your privacy rights — access, correction, export, or deletion of your personal data — email privacy@fasteppp.com from the address associated with your account and describe your request. Requests are handled within 30 days. You can also disable optional telemetry or delete your account yourself at any time via Account and privacy settings.

Service providers

Fasteppp relies on a small set of processors to operate the service. Each processes only the data needed for its function:

• OVH — application hosting and content delivery.
• Google — OAuth sign-in (account identity only).
• Resend — transactional email (magic-link sign-in messages and account lifecycle notices).

Voice Study Buddy (optional)

The optional voice feature lets you speak to a study assistant about the quiz item you are viewing. It is entirely opt-in and off until you turn it on:

• Microphone audio is processed by the speech-recognition service selected by your browser. In browsers that expose Web Speech (including Chrome and Safari), that service is used first and may process audio through the browser vendor. If Web Speech is unavailable, Fasteppp can use an on-device Whisper model in the browser. The notice in the voice panel identifies the active path before you speak.
• Only the transcribed text of your question is sent to our server, together with the quiz item you are looking at, to generate the spoken explanation. Your transcript is not stored on our servers; the conversation history lives only in your browser session and is cleared when you close the tab or press Clear.
• Spoken answers are generated by your device's built-in speech synthesis.
• You can revoke voice access at any time: press Clear in the panel to wipe history, and manage microphone permissions from your browser settings.

Cookies

Fasteppp uses strictly-necessary cookies only: the authentication session cookie required to keep you signed in and to protect your account (CSRF protection). There are no analytics, advertising, or cross-site tracking cookies, so no cookie consent banner is shown. Optional product telemetry, when enabled, is a first-party server-side event stream — not a browser cookie — and can be disabled in Account and privacy settings.

Your controls

Visit Account and privacy settings to disable optional telemetry or permanently delete your account and associated data. Account deletion removes the Google connection, sessions, study history, flashcard reviews, readiness data, planner settings, account-linked telemetry, and account-linked bug reports.