Privacy Policy

This Privacy Policy explains what information QuantSpell collects, how we use it, and who we share it with. QuantSpell is operated by Junlajak Jongpipattanakul, an individual developer based in Thailand, who is the data controller for the information described here.

• Account email: the address you sign in with. You can sign in with Google or with a one-time email link — either way we never receive or store a password. If you use Google, Google tells us your email address and basic profile information.
• A display name, if you give us one: optional, and only used to address you in the app.
• Your target and test date: the quant score you’re aiming at, and the day your exam is booked, if you tell us. Used to set up your dashboard.
• Official scores you enter: if you add your real GMAT result, we store it to show beside your practice scores. We only use it to check our own scoring if you switch that on in Account.
• Exam responses and timing: the answers you select, the answers you change, how long you spend on each question, and the resulting scores and reports. This is used to grade your attempt, build your report, and calibrate the difficulty of individual questions across everyone who sits them.
• Purchase records: which products you bought and when, so we can grant and keep your access. We do not collect or store your card number or other payment card details — Paddle (see below) handles your payment directly, and QuantSpell never sees that information.
• Support requests: anything you tell us when you contact us, by email or via our contact form.
• Tutor conversations: the questions you ask the review tutor, and the replies it gives. These are kept with your review so you can read the thread again later.

We don’t run advertising, analytics, or third-party tracking.

• To run your account and keep you signed in
• To grant access to sectionals you’ve purchased, and enforce that access
• To grade your attempts and produce your score report and review
• To calibrate question difficulty and improve the accuracy of the Q score
• To send you the email the product needs — sign-in links, a welcome message, and confirmation when credits are added
• To send you marketing email — only if you opt in (on your score report or in Account), and you can switch it off in Account at any time
• To fix bugs, keep the Service secure, and improve the exams
• To respond to support requests

We don’t use your data for advertising, and we don’t sell it.

We use a small number of service providers to run QuantSpell, and share only what each one needs to do its job:

• Supabase — hosts our database and handles sign-in (authentication). Stores your account email, your exam responses, and your purchase records, and generates your sign-in links.
• Vercel — hosts the website and application, and processes standard technical/server logs (e.g. IP address, request logs) as part of serving the site.
• Paddle — our payment provider and Merchant of Record for every purchase. Paddle collects and processes your payment details directly; we never see your card information. Paddle handles billing, tax, receipts, and refunds. See Paddle’s own privacy policy at paddle.com.
• Google — powers the review tutor, hosts our contact form, and signs you in if you choose Google sign-in. When you use the tutor on a question, we send Google that question, its worked solution, the answer you picked, and whatever you type to the tutor. We never send Google your email address or account details as part of a tutor conversation.
• Resend — sends all our email: your sign-in links, the welcome message, confirmation when credits are added, and marketing email if you’ve opted in. It receives your email address and the contents of those messages.

We don’t use any analytics, advertising, or tracking services. If we ever add a provider that handles your data, we’ll add it to this list.

We use essential cookies only — the session cookies Supabase sets to keep you signed in, and any cookies Paddle needs to run the checkout. We don’t use advertising or analytics cookies.

We keep your account and exam data for as long as your account is active, because your reports and responses are meant to outlive any single study cycle. If you delete your account, we’ll delete or anonymize your personal data within a reasonable period, except where we need to keep records for legal, tax, or dispute purposes — for example, purchase records. Anonymized response data may be retained for question calibration, since it is no longer linked to you.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, or to object to certain uses of it. To exercise any of these, contact us (below) and we’ll respond as required by applicable law.

We take reasonable technical and organizational measures to protect your data, including relying on Supabase’s and Vercel’s infrastructure-level security. No system is perfectly secure, and we can’t guarantee absolute security.

QuantSpell is aimed at adults preparing for graduate business school admission. You need to be at least 16 years old to create an account, and 18 — or have a parent or guardian’s permission — to make a purchase. We don’t knowingly collect personal information from children, and if we learn we have, we’ll delete it.

QuantSpell is based in Thailand, and the service providers named above may process and store data in other countries. By using the Service, you understand your data may be transferred internationally.

We may update this Privacy Policy as the Service changes. We’ll update the “Last updated” date above when we do.

Questions about this policy, or want to exercise a data right? Email us at support@quantspell.com or use our contact form.