Legal
Privacy Policy
Crux is a GMAT practice service. This policy explains what we collect when you use it, why, who helps us run it, and the choices you have. We have tried to keep it short and plain.
1. What we collect
Information you give us
- Account details: your email address and a password. Your password is stored by our login provider in scrambled (hashed) form; we never see it.
- Your practice activity: the questions you answer, the answer you choose, whether it was correct, how many seconds you took, and, on Premium, the reason you pick for a miss (for example, “I misread the question”) and the coach’s reply.
- Payment details: if you buy a plan, you pay on Stripe’s checkout page. Stripe collects your card details. We never see or store your full card number; we keep only a Stripe customer ID and your plan status.
Information collected automatically
- Technical data: like almost every website, our hosting provider records basic request information such as your IP address, browser type and the pages requested, mainly for security and troubleshooting.
We do not use advertising trackers, sell your data, or build advertising profiles.
2. How we use it
- To create and secure your account and sign you in.
- To run the service: pick practice questions, show explanations, and calculate your weak areas, pacing and predicted score.
- To provide Premium coaching and adaptive practice based on your history.
- To process payments and manage your plan.
- To keep Crux secure, prevent abuse (for example, daily limits), and fix problems.
- To improve our questions, using practice results in aggregate.
- To send essential account emails, such as confirming your email address. We will ask before sending marketing emails.
3. Who we share it with
We use a small number of trusted service providers to run Crux. They process data only on our behalf and for these purposes:
| Provider | What they do | Data involved |
|---|---|---|
| Supabase | Login and database | Email, hashed password, practice activity, plan status |
| Vercel | Website hosting | Technical request data |
| Stripe | Payments | Email, payment details, purchase history |
| Anthropic | AI coach (Premium) | The question, your answer, your time and the reason you selected. We do not send your name or email. |
We may also disclose information if required by law, or to protect the rights and safety of our users or Crux. If Crux is ever sold or merged, your information may transfer to the new owner under this policy.
4. Cookies
We use only the cookies needed to keep you signed in. We do not use analytics or advertising cookies. If you block cookies, you will not be able to sign in.
5. How long we keep it
- Account and practice data: while your account is open. When you delete your account, we delete this data within 30 days.
- Payment records: as long as tax and accounting law requires (Stripe keeps its own records under its policy).
- Technical logs: kept by our hosting provider for a limited period.
6. Your choices and rights
You can ask us to:
- give you a copy of your data,
- correct information that is wrong,
- delete your account and data, or
- stop using your data for a particular purpose, where the law allows.
Email support@myexamcrux.com from the address on your account. We will reply within 30 days. Depending on where you live, laws such as Canada’s PIPEDA, India’s Digital Personal Data Protection Act, the GDPR or US state privacy laws may give you additional rights, and you may also complain to your local data protection authority.
You can cancel a paid plan at any time from the Manage billing button on your Account page.
7. Security
We use encrypted connections (HTTPS), store passwords only in hashed form, and restrict access to your data so that you can see only your own. No online service can be perfectly secure, but we will tell you and the relevant authorities promptly if a breach affects your personal information, as the law requires.
8. Children, transfers and changes
Crux is intended for people preparing for graduate business school and is not directed at children under 16. If you believe a child has given us personal information, contact us and we will delete it.
Our providers may store and process data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for these transfers.
If we change this policy, we will update the date at the top and, for significant changes, tell you by email or on the site before they take effect.
9. Contact us
Questions or requests about your privacy: support@myexamcrux.com.
GMAT™ is a registered trademark of the Graduate Management Admission Council (GMAC). Crux is not affiliated with or endorsed by GMAC.