Privacy Policy

Last updated: [pending]

Beacon is in beta. This policy is being finalized with counsel, so some details may still change. We will update the date above whenever it does.

Beacon is a study tool, operated by Therapy Innovations LLC ("Beacon", "we"), that helps candidates prepare for the BCBA (Board Certified Behavior Analyst) examination. This policy explains what we collect, why, and your choices.

1. What we collect

Account and identity. When you sign up we collect your email address and name. You authenticate either with an email and password or with "Continue with Google"; if you use Google, we receive your email and basic profile (name) from Google. Passwords are handled by our authentication provider (Supabase) and are never stored by us in readable form.
Study activity. As you use Beacon we store your practice and exam activity: the questions you answer, your selected answers and whether they were correct, your self-reported confidence on a question, your progress, streaks, experience points, readiness indicators, study settings, and any question reports you submit. This data is tied to an opaque account identifier, not to outside personal records.
Technical data. Standard server logs and error diagnostics (via Sentry) needed to operate and secure the service. We record limited security events (for example rate-limit or origin rejections) with a hashed identifier, not raw personal data.
Usage analytics. We use Vercel Web Analytics, a privacy-friendly, cookieless, first-party tool that measures aggregate usage (page views, referrers, approximate location by country, device type). It does not set tracking cookies or build per-user advertising profiles.
Cookies. We use a single essential, HttpOnly session cookie to keep you logged in. Our analytics (Vercel Web Analytics) is cookieless and does not rely on tracking cookies, and we do not use advertising cookies.

2. Why we use it

To create and run your account; to deliver and personalize your study experience (adaptive difficulty, readiness, calibration insights); to operate, secure, and debug the service; to improve our content in aggregate; and to communicate with you about the service.

3. Who we share it with

We do not sell your personal data. We use these processors to run Beacon: Supabase (authentication and database hosting), Vercel (application hosting, and cookieless Web Analytics for aggregate usage), Sentry (error monitoring), Upstash (rate limiting and abuse prevention), and Google (only if you choose "Continue with Google"). We may disclose data if required by law or to protect the service.

4. Retention and deletion

We keep your data while your account is active. You can request deletion at any time by contacting us at joao.fernandes@therapyinnovations.org; we honor erasure requests and maintain a process to remove your account and associated study data. We may retain limited records where required by law.

5. Your rights

You may have rights to access, correct, delete, or export your data, and to object to or restrict certain processing. Depending on your state of residence, you may have specific privacy rights under applicable US state laws (for example, California residents under the CCPA). To exercise any of these rights, contact us at joao.fernandes@therapyinnovations.org.

6. Security

Data is encrypted in transit (TLS). Access to your data is restricted at the database level (row-level security), study data is keyed by an opaque identifier, and we do not duplicate sensitive personal records. No system is perfectly secure, but we take reasonable measures to protect your information.

7. Children

Beacon is intended for exam candidates and is not directed to children under 18. We do not knowingly collect data from children.

8. International users

Beacon is intended for users in the United States and is hosted in the United States. Your data is processed there.

9. Beta notice

Beacon is offered as a free beta. Features and data handling may evolve; we will update this policy and note the "Last updated" date when we do.

10. Contact

Questions or requests: email joao.fernandes@therapyinnovations.org.

Not affiliated with, endorsed by, or sponsored by the Behavior Analyst Certification Board (BACB).