Privacy Policy

Last updated: May 2026

This policy describes what personal information ClaimPass collects, how we use it, and the choices you have. We aim to collect as little as possible and to be plain about what we do with it.

1. Information We Collect

  • Account data: your email address and a hashed version of your password, provided when you create an account.
  • Usage data: questions you've answered, exam scores, and chat history with the AI assistant — used to power your study progress and improve the product.
  • Payment information: processed by Stripe. We receive subscription status and billing metadata; we never see or store your full card number.
  • Session cookies: a single authentication cookie that keeps you signed in.

2. How We Use Your Information

  • To provide, maintain, and improve ClaimPass.
  • To process payments and manage subscriptions through Stripe.
  • To respond to support requests you send us.
  • To detect and prevent abuse of the service.

We do not sell your personal data.

3. Data Storage and Security

  • Account and usage data is stored in Cloudflare D1 (SQLite at the edge).
  • AI queries are processed by Cloudflare Workers AI on Cloudflare's infrastructure.
  • Passwords are stored as cryptographic hashes only — never in plaintext.
  • The authentication session cookie is set with HttpOnly, Secure, and SameSite=Lax.

4. Third-Party Services

We rely on a small number of third parties to operate the service:

5. Cookies

ClaimPass uses one cookie — a session cookie used for authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

6. Your Rights

You can request a copy of the personal data we hold about you, or request deletion of your account and associated data, by emailing support@claimpass.app. We will respond within 30 days.

7. Data Retention

We retain your account and usage data while your account is active. After you request account deletion, your data is removed from our systems within 30 days. Backup copies may persist for a short additional period before being overwritten.

8. Children's Privacy

ClaimPass is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.

9. Changes to This Policy

We may update this policy from time to time. For material changes, we will notify users by email. Your continued use of ClaimPass after a change takes effect constitutes acceptance of the updated policy.

10. Contact

Questions about this policy or your data? Email support@claimpass.app.