Plain-English summary: We collect your email, name, your answers to the setup questions, and your study activity to run the app. We don't sell your data, we don't show ads, and we run no analytics or tracking SDKs. We never see your card number: web payments go to Stripe, and purchases made inside the mobile app go through Apple or Google. You can permanently delete your account and data yourself, any time, from Settings → Delete account (or by contacting us).
CPAcioli is owned and operated by Johnson Ecommerce LLC, a Mississippi limited liability company ("CPAcioli," "we," "us," or "our"), which runs the CPAcioli CPA exam preparation platform. This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service, which includes this website, the web study app, and the CPAcioli mobile apps for iOS and Android.
CPAcioli is not affiliated with, endorsed by, or sponsored by the AICPA, NASBA, Apple, Google, or Anthropic in any way whatsoever.
Questions about this policy? Email us at walter@cpacioli.com.
| Category | What we collect | Why |
|---|---|---|
| Account info | Name, email address, hashed password (if using email signup) | To create and authenticate your account |
| Setup answers | The answers you give during the short setup flow after signup: the section you're studying, roughly when you plan to sit for the exam, the study challenges you picked, how you study today, your confidence level, and your daily question goal | To choose your starting section and tailor your study plan and pacing |
| Study activity | Questions and simulations answered, correct/incorrect responses, per-cell simulation results, sections studied, blueprint areas practiced, starred questions, mock exam and estimated readiness scores, time spent, and daily activity history | To power your dashboard, progress tracking, and adaptive practice |
| Payment info | We never receive or store your payment card details. Payments made on the web are processed by Stripe. Purchases made inside the iOS or Android app are processed by Apple or Google, and we receive only the resulting subscription status through RevenueCat, our in-app purchase provider. | To process payments and unlock your access |
| Purchase and entitlement data | Which plan you bought, where you bought it (web or app store), purchase and renewal history, and the anonymous device identifier the store and RevenueCat use to tie a purchase to your account | To grant access, restore purchases, and route you to the right place to manage or cancel |
| Google or Apple account info | If you sign in with Google, we receive your name, email, and profile photo. If you sign in with Apple, we receive your name and email address, or Apple's private relay address if you choose to hide your email. On iOS we also receive a one-time authorization code, which we exchange for a token used solely to disconnect your Apple account if you delete your account. | To authenticate you without a password |
| Support messages | If you use the contact form or email us, we receive your name, email, and message. The contact form is delivered by Web3Forms. | To answer your question |
| Usage data | Browser or app version, pages visited, error logs (if applicable) | To improve the Service and diagnose issues |
What we do not collect. We run no advertising, no analytics or product-tracking SDKs, and no cross-site tracking or advertising identifiers. We do not request access to your contacts, photos, microphone, or location, and the mobile apps do not ask to track you across other companies' apps or websites.
Firebase. Your account and your study data live in Google Firebase. Firebase Authentication manages sign-in (email and password, Google, or Apple) and stores your email and account identifier. Your profile, setup answers, plan status, and study statistics are stored in Firestore under your account, and they sync across every device you sign in on. We never store your password ourselves. Refer to Google's Privacy Policy for details on how Firebase handles your data.
On your device. The web app and the mobile apps keep a local copy of your session, your recent study progress, and in-progress setup answers on your device (in browser localStorage or its app equivalent) so the app stays fast and survives a reload. Signing out or deleting your account clears it.
Where your data is processed. Our servers, the Firebase project, and our service providers are located in the United States. If you use the Service from outside the United States, your information is transferred to and processed there.
We do not use your data to train AI models or sell it to third parties for advertising purposes.
We share your information only in the following circumstances:
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
We use browser localStorage (not traditional cookies) to store your session state and study progress on your device. No advertising or cross-site tracking cookies are used. Firebase may set authentication cookies to maintain your login session. The mobile apps store the same session data locally on the device instead of in a browser.
We retain your account information and study data for as long as your account is active, or as needed to provide the Service. When you delete your account from Settings, we cancel any active web subscription, disconnect your Apple sign-in if you used one, and delete your profile, setup answers, and study data along with your login. Backups and provider logs may retain copies for a short period, and payment records are kept by Stripe, Apple, or Google as their own tax and accounting rules require. If you ask us to close your account by email instead, we will delete or anonymize your personal data within 90 days, unless we are required to retain it by law.
You have the right to:
To exercise any of these rights, email us at walter@cpacioli.com. We will respond within 30 days.
We take reasonable measures to protect your information from unauthorized access, alteration, or disclosure. However, no method of internet transmission or storage is 100% secure. We encourage you to use a strong, unique password and to keep your credentials confidential.
Passwords are handled entirely by Firebase Authentication, which hashes them. We never see or store your password in any form. Study content is delivered only to signed-in accounts with active access, and our database rules prevent one account from reading another account's data or from granting itself a paid plan.
The Service is not directed to children under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a child, please contact us and we will delete it promptly.
We may update this Privacy Policy periodically. We will notify you of material changes by email or by posting a notice on the Service. The "Last updated" date at the top of this page reflects when the policy was last revised.
For privacy-related questions, requests, or concerns, contact us at:
walter@cpacioli.com