Trust & Security
This page is maintained by the ACCA FA1 Practice team to answer common questions about how we protect your account, your study progress, and your exam data. It is not a third-party certification — it describes the controls we currently have in place.
Data protection
Your study data is stored in a managed Postgres database with row-level security policies. Every read and write is checked against your authenticated user ID, so one student cannot access another student's profile, attempts, answers, or results.
Student privacy
We do not sell or share academic progress data with third parties. Data is used solely to power your dashboard, recommendations, and exam history. You can request review or deletion of your data at any time by contacting us.
Authentication & account security
Authentication is handled by our managed auth provider (Supabase Auth). We never store plaintext passwords — credentials are hashed and verified server-side. Google sign-in uses standard OAuth 2.0.
Password security
Passwords are never written manually to the database. We recommend enabling Leaked Password Protection in your account and using a strong, unique password.
Exam progress & results
Correct answers are never exposed to the client before an exam is submitted. Grading happens server-side. Your results, mastery scores, and recommendations are visible only to you and to platform administrators for support purposes.
How we use academic data
We use your answers and topic mastery only to personalize study recommendations and to improve the question bank. Aggregated, non-identifying statistics may be used to improve the platform.
Access control
Administrative actions (managing the question bank, viewing platform-wide stats) require an admin role assigned in the database. Regular students cannot execute administrative operations, even through the API.
Contact
For privacy or security questions, contact us through the channels listed on the Contact section of the site, or email the address shown in your account settings.