Privacy Policy
Effective date: October 2026
PrepDesk (“we”, “our”, “us”) runs the PrepDesk web application at prepdesk.site (the “Service”). On PrepDesk, reviewers (a review center or review organizer) run courses with practice tests and mock exams for their students. This Privacy Policy explains what personal information we collect, why, who can see it, and your rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
1. Who We Are
The review center or review organizer that runs your course also sees your information (see Section 4) and is responsible for how they use it outside PrepDesk.
2. Information We Collect
a) Account information
- Your full name and email address.
- Your phone number, only if you choose to give it when signing up.
- Your password, if you sign up with email. We store only an argon2 hash of it, never the password itself.
- If you use Google Sign-In: your name and email address from your Google account. We do not receive your Google password.
b) Course activity
- The courses you join and your role in each course.
- Your answers in practice tests and mock exams, your scores, and how long you took.
- Review scheduling data used to decide which questions to show you next.
- Questions you flag as possibly wrong, with any note you add.
c) Content from reviewers
- Questions, explanations, topics, and study materials that reviewers add to their courses.
d) Technical information
- Sign-in cookies that keep you logged in (see Section 9).
- Standard server logs: IP address, browser type, the page requested, and the time.
PrepDesk is not meant for children under 13. If you believe a child under 13 has given us information, email [email protected] and we will delete it.
3. How We Use Your Information
- To run the Service: show your courses, record your answers, and show your results.
- To sign you in and keep your account secure.
- To let your reviewer manage who is in their course and follow their students’ progress.
- To fix problems and prevent misuse of the Service.
- To comply with the law.
We do not sell your information, show ads, or send marketing email.
4. Who Can See Your Information
- Your reviewer (the review center or review organizer running your course, and anyone they assign to help run it) can see your name, email, enrollment status, answers, and scores.
- Other students in the same course can see your name and score on the leaderboard of an exam set you complete.
- PrepDesk’s administrator can access the data to run and support the Service.
- Service providers that help us run PrepDesk:
- Hostinger, which hosts our server.
- Cloudflare, which carries all traffic between your browser and our server.
- Google, when you choose Google Sign-In.
- OpenAI, only when a reviewer uses the AI question tool. The material the reviewer uploads is sent to OpenAI to draft questions. Student information is not sent.
- Government agencies or courts, only when Philippine law requires it.
5. Where Your Data Is Stored
Our server is hosted by Hostinger in Kuala Lumpur, Malaysia. Traffic to and from it passes through Cloudflare’s network. Google Sign-In and the AI question tool involve Google’s and OpenAI’s own servers. This means your information is processed outside the Philippines.
6. How Long We Keep Your Data
We keep your account and course activity while your account is active. If you ask us to delete your account, we will delete or anonymise your personal information, except anything we must keep by law. Server logs are kept only as long as needed to run and secure the Service.
7. How We Protect Your Data
- Passwords are stored as argon2 hashes.
- Connections are encrypted with HTTPS.
- Sign-in cookies are httpOnly, so scripts on the page cannot read them.
- Each course’s data is kept separate at the database level, so one course cannot read another’s.
- Only PrepDesk’s administrator has access to the server.
- We keep a log of administrative actions, such as enrollment changes.
No system is completely secure. If you notice a problem, please email us.
8. Your Rights
Under the Data Privacy Act (RA 10173), you have the right to:
- Be informed about how your data is processed.
- Access the personal information we hold about you.
- Correct inaccurate information.
- Object to processing.
- Have your data erased or blocked.
- Get a copy of your data.
- File a complaint with the National Privacy Commission (privacy.gov.ph).
To use any of these rights, email [email protected] from the email address on your account. We aim to reply within 15 working days.
9. Cookies and Browser Storage
We use two cookies to keep you signed in. While you take a practice test, the browser holds that session’s questions temporarily. The app also stores a few of its own pages in your browser so it loads faster. Cloudflare may set a cookie it needs for security. We do not use advertising cookies or third-party tracking scripts.
10. Changes to This Policy
If we change this Policy, we will update the date at the top. For significant changes, we will also tell you in the app or by email.