Privacy Policy

1. Who we are

CPA Copilot is an independent CPA Program study platform for Buy Me A Coffee supporters. It is not affiliated with, endorsed by, or sponsored by CPA Australia.

2. Information we collect

Depending on how you use the service, we may collect:

• Membership details — email address, and where provided via Buy Me A Coffee, name, membership tier, supporter ID, and membership status (including cancellation / access end dates).
• Login & device sessions — authentication cookies, approximate session timestamps, and browser user-agent strings used to manage signed-in sessions (including our limit of 5 active devices).
• Study activity — practice sessions, answers, timing, scores, flashcard use, and related progress analytics tied to your member account.
• Technical data — standard server logs such as request times and error information needed to run and secure the service.
• Analytics / ads signals — Google tags on the site may collect device and usage data according to Google's policies.

3. How we use information

We use this information to:

• Verify membership and sign you in
• Enforce fair-use session limits and protect against account misuse
• Provide practice, flashcards, tools, and progress history
• Operate, secure, debug, and improve CPA Copilot
• Measure traffic and marketing effectiveness (for example via Google Ads tags)
• Communicate about access or service issues when needed

We do not sell your personal information.

4. Sharing & processors

We share personal information only as needed to run the product, including with:

• Buy Me A Coffee — membership and payment are handled on their platform; we receive membership events to sync access.
• Hosting & database providers — infrastructure that stores and serves the app and member data.
• Google — analytics / advertising tags loaded on the site (Google Privacy Policy).

We may also disclose information if required by law or to protect the security and integrity of the service.

5. Cookies & similar technologies

We use an httpOnly authentication cookie to keep you signed in. Session records help us apply the device limit in our Terms of Use. Google tags may set or read their own cookies or local storage for analytics and ads measurement. You can control some third-party cookies through your browser settings; disabling essential auth cookies will prevent login.

6. Retention

We keep membership and study records while your account is active and for a reasonable period afterward so we can restore access, show history, or resolve disputes. Auth sessions expire (typically within about 7 days) or when you log out / are signed out by the device limit. We may delete or anonymise data sooner when it is no longer needed.

7. Security

We use reasonable technical measures to protect account data (including signed session tokens and access controls). No online service is perfectly secure — please keep your membership email private and do not share login access.

8. Your choices

Depending on where you live, you may have rights to request access to, correction of, or deletion of personal information we hold about you. Membership and billing changes are primarily managed through Buy Me A Coffee. For CPA Copilot-specific requests (for example deleting study history we store), contact us via the channels you use for supporter support.

9. Children

CPA Copilot is intended for adults preparing for professional exams. We do not knowingly collect personal information from children.

10. Changes

We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use after an update means you acknowledge the revised policy.

11. Contact

Privacy questions? Reach us through the same channels you use for Buy Me A Coffee support, or start from our homepage.