Privacy Policy
This Privacy Policy explains how Mocklet processes information when you use the Mocklet website and Android application. Mocklet provides Digital SAT and PSAT practice, attempts, scoring, explanations, history, and progress tracking.
Information we process
- Account information: name, email address, internal user identifier, email-verification status, and linked sign-in methods.
- Authentication and security information: password hashes, Google account identifiers used for sign-in, session and CSRF tokens, login events, IP address, user agent, and security-event records.
- Learning activity: practice and test attempts, selected answers, timing, completion state, scores, result snapshots, skill mastery, recommendations, and progress history.
- Subscription information: payment provider, product or price ID, provider customer/subscription/transaction references, subscription state, entitlement period, renewal state, billing country and currency, transaction totals, refund status, and account-linking identifier.
- Payment-card information: Mocklet does not collect or store your full payment-card number, CVV, or card authentication data. For website purchases, these details are submitted directly to Paddle and its authorized payment providers.
- Technical information: request identifiers, diagnostic logs, service errors, and basic connection metadata needed to operate and protect the service.
How we use information
- To create and authenticate accounts.
- To save attempts, answers, results, and progress.
- To generate scoring, mastery, and practice recommendations.
- To prevent abuse, investigate failures, protect accounts, and maintain service reliability.
- To send account-verification and password-reset messages when email authentication is used.
- To verify purchases, grant paid access, restore entitlements, prevent purchase abuse, and reflect subscription lifecycle changes.
Service providers and sharing
Mocklet does not sell personal information. Information may be processed by infrastructure and email-delivery providers acting on Mocklet's behalf. Google Identity Services processes Google sign-in.
Website billing through Paddle: Paddle is Mocklet's authorized reseller and Merchant of Record. Paddle collects and processes buyer identity, contact, location, billing, and payment information to process orders, prevent fraud, provide buyer support, manage subscriptions and refunds, and calculate and remit applicable taxes. Paddle may provide Mocklet with the limited customer, transaction, and subscription information needed to provision access, reconcile payments, and support buyers. Paddle processes this information under its Privacy Policy and Buyer Terms.
Paddle is responsible for its secure payment-processing environment and its handling of payment data. Mocklet remains responsible for the Mocklet account, the learning data described in this policy, and delivery of the Mocklet service.
Mobile billing: Google Play processes Android purchases and Apple processes App Store purchases. They provide Mocklet with the purchase and subscription information required to verify and maintain access. Each provider processes payment information under its own privacy terms.
Information may also be disclosed when required by law or reasonably necessary to protect users, the service, or legal rights.
Cookies and local session storage
Mocklet uses essential session and CSRF cookies for authentication and security. The Android app stores its session-cookie payload encrypted with a key held by Android Keystore. Mocklet does not use these essential authentication cookies for advertising.
Optional website analytics
With your permission, the Mocklet website uses Google Analytics to measure public-page visits, links followed between public guides, approximate reading engagement, and privacy-safe product events such as starting registration, beginning or completing practice, and viewing an explanation. Mocklet does not send email addresses, authentication tokens, answer selections, question content, full visited URLs, or raw user identifiers in these events. You may decline analytics without affecting the service. Your preference is stored in your browser.
Security
Mocklet uses HTTPS in transit, password hashing, limited-lifetime sessions, CSRF protection, rate limiting, server-side authorization, and encrypted Android session storage. No security method can guarantee absolute protection.
Retention and deletion
Account-associated information is retained while an account is active and as needed to provide the service. A user may permanently delete the account in the Android app or through the external deletion page. Deletion removes account identifiers, credentials, sessions, attempts, responses, results, progress, and Mocklet's stored subscription entitlement and purchase token.
Deleting a Mocklet account does not itself cancel a subscription billed by Paddle, Google Play, or Apple. Cancel the subscription through the applicable provider before deleting the account to prevent future renewal. Payment providers may retain transaction records under their own policies and legal obligations.
Mocklet may retain a non-identifying deletion receipt containing a random receipt ID, deletion time, deletion method, and categories removed. It contains no email address, name, username, or user ID and cannot be used to restore the deleted account.
Your choices
- Review and update account information available in the app.
- Change a password or use password reset for eligible accounts.
- Sign out to remove the local session.
- Permanently delete the account and associated data.
Children
Mocklet is not directed to children under 13. Users who have not reached the age of legal majority where they live should use the service with permission from a parent or guardian.
Changes
Material changes will be reflected by updating the effective date and, where appropriate, providing an in-product notice.
Privacy inquiries
For privacy questions, contact support@send.mocklet.app. For account deletion, use the account-deletion resource below.