In short: we collect the minimum needed to run the app and send a parent their child's weekly report. Students never create accounts, never enter an email, and never see ads. We do not sell or rent personal information, and a parent can delete their family's data at any time by emailing support@vaultprep.app.
This policy describes how Provident Design, LLC ("Vault Prep," "we," "us") handles information in connection with the Vault Prep iOS app, the website vaultprep.app, the parent dashboard, and email reports (the "Service"). The Service is offered to residents of the United States.
| Information | Where it comes from | Why we use it |
|---|---|---|
| Parent email address | Entered by the parent at checkout (Stripe) or when connecting the parent dashboard in the app | Delivering your purchase code, the Sunday progress report, and support replies |
| Student first name (optional) | Entered by the parent in the dashboard | Labeling the dashboard and reports when a family has more than one student |
| Family code | Generated by the Service when a parent connects the dashboard | Linking a student's phone to the parent's dashboard and reports; it is the only identifier we use |
| Practice statistics | Generated by the app as the student practices | Streaks, accuracy by skill, pace, the baseline estimate, and the parent's reports and focus-area recommendations |
| Parent settings and PIN | Chosen by the parent | Running the vault the way the parent configured it (goal, track, focus, difficulty, free-pass days) |
| Payment details | Entered at Stripe or Apple checkout | Processed entirely by Stripe or Apple; we never see or store card numbers |
The parent dashboard in your web browser may remember your family codes and student names in your browser's local storage so you don't have to retype them; it never stores your PIN. Nothing else about your browsing is tracked by the dashboard.
Vault Prep is designed for students in grades 8–12, some of whom are under 13. We follow the Children's Online Privacy Protection Act (COPPA) as amended in 2025:
Blocking is enforced on the device by Apple's Screen Time controls. Vault Prep does not read, monitor, or store the content of blocked apps, messages, photos, browsing history, contacts, or location. The list of apps a parent places in the vault stays on the device and is never sent to us.
We share information only with the providers needed to run the Service, each under its own privacy policy and only for that purpose:
We do not sell personal information. We disclose information to authorities only where the law requires it, and would transfer it to a successor only if the Service changes ownership, under this same policy.
We keep each kind of information only as long as needed for the purpose we collected it for, under a written data-retention policy:
| Information | How long we keep it | Why |
|---|---|---|
| Family record: settings, first name if entered, practice totals, device registrations, consent record | 24 months after the family's last activity, then deleted automatically | SAT and PSAT prep often spans more than one school year |
| A setup whose parent never confirms consent | 30 days, then deleted automatically | Time for the parent to receive and act on the consent email |
| Daily practice snapshots | 70 days, then only running totals remain | Week-over-week trends in the dashboard and weekly report |
| Parental consent record | As long as the family record exists | To show consent was given before practice data was saved |
| Purchase records | 7 years after the purchase or refund | Tax and accounting law |
| Consent links and PIN reset links | 30 days for consent links and 45 minutes for reset links, or until used | Letting the parent act from the email |
| Site traffic counts, with no identifiers | 120 days | Knowing whether people find the site |
A parent can have their family's information deleted sooner at any time by emailing support@vaultprep.app from the parent email on file; we will confirm within 10 business days. Purchase records are kept for the tax and accounting period above.
Data travels over encrypted connections, and we follow a written information-security program. Viewing the parent dashboard, changing settings, and sending reports require the parent's PIN, and PIN checks lock for 15 minutes after repeated wrong tries. The student's app reads the settings it needs with the family code; that read never includes the parent's email. Only phones registered to a family can upload its practice data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If a breach affecting your information occurs, we will notify you as required by law.
Material changes to this policy will be posted on this page with a revised date. Questions: Provident Design, LLC · support@vaultprep.app.