Privacy Policy

• We never see your password — you sign in through Google, GitHub, Microsoft.
• We never see your card details — payments are handled by Dodo Payments.
• We do not sell your personal data, and we never have.
• Our product analytics is cookieless. Ad tracking only runs if you consent.
• You can ask us to delete your account and data at any time.

Account details. When you sign in with Google, GitHub, Microsoft, we receive your email address, your name, and your profile picture from that provider. We store those so we can identify your account and address you by name. You can edit your display name in settings.

Your practice data. The code you write, which questions you have opened, and your progress. This exists so we can show your own work back to you.

Purchase records. Your plan, subscription status, renewal date, and the identifiers Dodo Payments gives us for your customer, subscription, and payment records. We store no card number, no expiry, and no CVV — those never reach our servers.

Approximate country. Our CDN, Cloudflare, tells us the two-letter country your connection comes from. We use it only to decide which regional price to show you. We do not store your IP address in our own database.

Essential cookie. A single sign-in cookie keeps you logged in. It is required for the site to work and cannot be turned off while you are signed in.

Product analytics. We self-host Matomo to understand which pages and questions get used. We run it in cookieless mode: it sets no cookie and does not track you across other websites. The data stays on our own server and is not shared.

Advertising. We run ads, and the Google and Meta tags on this site can measure whether an ad led to a signup or a purchase. These run under Google Consent Mode v2 and are denied by default — they only store or send identifiers if you consent. If you do not consent, no advertising cookie is set.

We use a small number of processors, each for one job:

• Dodo Payments — payments, as our Merchant of Record. They receive your email and billing details directly and act as their own controller for that data. See their privacy policy.
• Google, GitHub, Microsoft — only the sign-in provider you choose, and only to authenticate you.
• Cloudflare — CDN and security in front of the site.
• Resend — sends our transactional email (sign-in links, receipts, occasional offers).
• Google and Meta — advertising measurement, and only with your consent.

We may also disclose data if the law requires it. We do not sell your personal data or share it with data brokers.

Our servers and database are hosted in Singapore. We keep your account data for as long as your account exists. If you ask us to delete it, we remove your account and practice data, but we keep the minimum purchase record we are required to retain for tax and accounting purposes.

Wherever you live, you can ask us to give you a copy of your data, correct it, or delete it — just contact us from the email address on your account and we will action it within 30 days, free of charge. Depending on your country you may also have the right to object to processing, restrict it, or complain to your local data protection authority.

UIReady is aimed at working and aspiring software developers and is not intended for children under 13. We do not knowingly collect data from them. If you believe a child has given us data, contact us and we will delete it.

If we change this policy in a way that materially affects you, we will tell you by email or in the app before it takes effect.