What we collect, in plain English.

The short version

• No account, no sign-up. We never ask for your name, email, phone number or address.
• Your study work stays on your device. Progress, scores, streaks, bookmarks and saved questions are stored locally on your iPhone and are not uploaded to us.
• Anonymous usage events do leave the device. We record which features get used — for example that a quiz set was completed — so we can tell what is working. These events are anonymous and carry no study content. See Product analytics.
• Crash reports leave the device when something breaks. They contain technical diagnostics, not your study answers. See Crash reporting.
• Apple handles all payment. We never see your card details.
• Ad tracking is off unless you turn it on. iOS asks you once; if you decline, no advertising identifier is collected and the app works identically.

What we never collect

The app does not ask for, and is not built to collect, any of the following:

• Your name, email address, phone number or postal address
• Date of birth, employer, rank, badge number or agency
• Precise or approximate location
• Contacts, photos, camera, microphone, or health and fitness data
• Payment card numbers or bank details
• The text of questions you answered, the answers you chose, or anything you have bookmarked

There is no login, so there is no profile to build. Analytics events are never tagged with a name or email, because the app has neither.

Your study data

The following is written to your device's local storage and stays there:

• Per-module progress — best score, attempts, accuracy
• Your daily streak and last study date
• Bookmarks and the auto-saved list of questions you missed
• Recent quiz and practice-exam state, so you can resume
• Your settings, including the daily goal and difficulty level

An important distinction. The content of your study work — which questions, which answers, what you saved — stays on the device. What does leave the device is anonymous metadata about activity: for example, "a 5-question set was completed in the Title 39 module, on a device without a subscription." That event contains no question text and no answer text. Both statements are true at once, and the difference matters, so we would rather spell it out than say something simpler that is not quite right.

Product analytics (PostHog)

Got Stripes uses PostHog to understand which features are actually used, so development effort goes to the parts people rely on. Data is sent to PostHog's United States cloud.

The app does not identify you. It never calls PostHog's identify() function and never creates a named person profile. PostHog sees an anonymous, app-generated device identifier and nothing that ties it to you.

The events recorded are a fixed, closed list. They cover:

• App lifecycle — installed, updated, opened, backgrounded
• Screen views within the app
• Onboarding completion
• Quiz and question-set activity, including sets completed
• Views of a locked feature or the subscription screen
• Purchase flow outcomes — attempted, completed, restored
• Practice exams started and finished
• Scenario completions
• Streak and rank milestones
• When a review prompt is shown

Event properties are deliberately limited to controlled values — a module name such as "Title 39", a count, a true/false flag, a short enum-like status, and whether the device currently has premium access. There is no free-text field anywhere in the event schema.

What is never sent to PostHog: your name or email (we have neither), question text, answer text, any free text you could type, contacts, precise location, photos, microphone data, or payment-card data.

PostHog's privacy information is at posthog.com/privacy.

Crash reporting (Sentry)

Got Stripes uses Sentry to capture crashes and errors, so faults can be found and fixed rather than silently affecting people.

When something fails, Sentry may receive:

• The error or exception and its stack trace
• App version and build number
• Device model and operating-system version
• Performance and trace data for the operation that failed
• Breadcrumbs — a short technical trail of what the app was doing immediately beforehand
• Other technical context surrounding the failure

Performance tracing is sampled in production, not recorded for every interaction — only a fraction of sessions send trace data.

The Sentry SDK is configured with send-default-PII disabled. Got Stripes does not intentionally send your name, email address, study answers or any free-text content to Sentry.

We want to be precise about one thing rather than over-promise: a crash-reporting service necessarily receives a network request from your device, and Sentry's own documentation describes technical identifiers and IP address as data its platform can process depending on configuration. We therefore do not claim that Sentry never sees an IP address or an SDK-generated technical identifier. What we can say is that Got Stripes does not deliberately attach personal information to reports. Sentry's privacy policy is at sentry.io/privacy.

Purchases (Apple and RevenueCat)

Apple processes every payment. Your card details go to Apple and never to us. We are told only whether a purchase succeeded.

Subscription state is managed with RevenueCat, which receives:

• An anonymous, app-generated user ID — a random string, not your name or email
• The Apple-issued purchase token and product identifier
• Purchase and renewal dates, and current entitlement status

One important qualification. If — and only if — you grant Apple's App Tracking Transparency permission, the app additionally asks RevenueCat to collect device and advertising attribution identifiers, and passes it an anonymous Facebook identifier, so that a subscription can be attributed back to the advertisement that led to the install. We therefore do not claim that RevenueCat never receives device identifiers in every circumstance — when you have granted tracking permission, it does. If you decline, this step does not happen.

RevenueCat's privacy policy is at revenuecat.com/privacy.

Advertising and your tracking choice

Got Stripes is advertised on Meta's platforms. The Meta SDK is included so we can tell which advertisements actually bring officers to the app. It is important to separate two different things.

Standard app events — always on

Meta receives conversion events regardless of your tracking choice:

• App installs and app opens
• Free-trial starts
• Subscription purchases, including the purchase value and currency
• Standard device and app metadata accompanying those events, such as device model, OS version and app version

Your advertising identifier (IDFA) — your choice

The app ships with advertiser tracking and advertiser-ID collection switched off. They are enabled only after you explicitly grant permission on Apple's App Tracking Transparency prompt.

• If you allow tracking, advertiser-ID collection is enabled. Meta may use your advertising identifier to connect your install to an advertisement you saw and to measure across other apps and websites.
• If you decline, or never answer, advertiser-ID collection stays off and no IDFA-based cross-app or cross-site tracking takes place.

Every feature works identically either way — nothing in the app is gated on your answer. You can change your decision at any time in iOS Settings → Privacy & Security → Tracking.

Meta never receives your study data — no questions, answers, scores, streaks or bookmarks. Meta's privacy policy is at facebook.com/privacy/policy.

This website

This site is deliberately plain. It has:

• No website analytics — we do not measure your visit here at all
• No advertising or marketing pixels
• No cookies — the site sets none
• No third-party requests. Fonts, scripts and images are all served from this domain. The site does not contact Google Fonts, a CDN, or any embedded video player.

The site is hosted on Netlify. Like any web host, Netlify processes standard server-log and technical request information — such as IP address, user agent, and the page requested — in order to serve and secure the site. That is a function of web hosting, not something we collect for our own purposes.

Children

Got Stripes is intended for adults preparing for New Jersey law enforcement promotional examinations. It is not directed at children, and we do not knowingly collect data from them.

Your choices

• Erase your study data — Settings → Reset Progress in the app, or delete the app.
• Change your tracking decision — iOS Settings → Privacy & Security → Tracking. Declining limits nothing.
• Manage or cancel a subscription — iOS Settings → your name → Subscriptions. Subscriptions are managed by Apple, not by us.
• Restore a previous purchase — Settings → Restore Purchases in the app.
• Ask us anything — email support@gotstripes.app and a person will answer.

Changes to this policy

When what the app collects changes, this page changes with it and the "Last updated" date above moves. Material changes are also noted in the App Store release notes. We would rather rewrite this page than let it drift out of date — which is precisely what happened to the previous version, and why it was replaced.

Contact

Privacy questions support@gotstripes.app Questions about this policy or your data, answered by a human.

This page describes how the app handles data. It is not legal advice.