Privacy policy

tessura ("we", "us") provides exam preparation and credential tracking for security professionals. This policy describes what we collect, why, and the choices you have. The short version: we collect what the product needs to work, we do not sell your data, and your credential photos are private to your account.

What we collect

• Account information — email address, optional display name, home state, and study goal, provided when you create an account.
• Credential information you add — license types, issue and expiry dates, and optional photos of your credentials. Photos are stored in a private storage bucket readable only by your authenticated account.
• Study activity — quiz attempts, scores, and answers, used to compute your progress, weak topics, and readiness score.
• Usage analytics — anonymous or pseudonymous product events (e.g. "quiz started") used to improve the product.
• Early-access signups — if you join the waitlist on our website, we collect the audience you select (guard, security company, or buyer of security services), your email address, and any name, company, role, or message you choose to include.

What we do with it

• Operate the app: sync your wallet and progress across devices.
• Compute compliance deadlines and send the reminders you opt into.
• Improve question quality and product features.
• Process subscriptions through Apple App Store / Google Play (we never see your payment card).
• Contact you about the early access you signed up for — product launches and openings relevant to the audience you selected. Every email includes a way to opt out, and you can ask us to delete your signup at any time.

What we do NOT do

• We do not sell your personal information.
• We do not share credential data with employers, state agencies, or data brokers.
• We do not use your credential photos for anything except showing them to you.

Service providers

We use Supabase (database, authentication, and storage), RevenueCat (subscription management), PostHog (product analytics), and Anthropic (AI tutor responses — questions sent to the tutor contain exam content, not your personal information). Each processes data solely to provide their service to us.

Notifications

Deadline reminders are local notifications scheduled on your device. You can turn them off any time in Profile or in your device settings.

Data retention and deletion

Your data is retained while your account is active. You can delete credentials (and their photos) in the app at any time. To delete your entire account and all associated data, email privacy@tessurasecurity.com from your account email — we complete deletions within 30 days.

California residents

Under the CCPA/CPRA you have the right to know, delete, and correct personal information, and to be free from discrimination for exercising those rights. We do not sell or share personal information as defined by the CPRA. Requests: privacy@tessurasecurity.com.

Children

tessura is for adults preparing for professional licensure and is not directed at children under 13. We do not knowingly collect information from children.

Changes

We will post changes to this policy here and update the effective date. Material changes will be announced in the app.

Contact: privacy@tessurasecurity.com