Privacy Policy

Last updated 26 August 2026.

Cardemy is an independent study app for Ireland's Category B/BW theory test. This page explains what we collect, why we collect it, where it is stored and how to request deletion.

Who is responsible. Cardemy is an independent project, run by the person who operates this service. Every question about this policy, and every request about your own data, goes to hello@cardemy.ie and is answered within one month. The operator's full registration details will be listed here once they are settled; until then, that address is the contact point for every data protection matter, and no request will be turned away for want of them.

What we collect

Data	Why	Where it lives
Email address and display name	To create your account and let you sign back in.	Clerk (authentication provider)
Password	To authenticate you. It is handled entirely by our authentication provider — Cardemy never sees or stores it.	Clerk
Lesson and unit progress, session position and best unit score	So an incomplete session can resume and completed units remain visible.	Supabase
Answers you give to practice questions	To show you what you got wrong and schedule it for review.	Supabase
Basic product events	To understand which learning steps work and improve the beta.	Supabase (first-party analytics)

We do not use third-party advertising or tracking SDKs. There is no Google Analytics, Facebook pixel or advertising cookie on this site. Product events are limited to actions such as opening the landing page or completing a study session; they do not include passwords or question text.

Legal basis

Performance of a contract — your account, answers and learning progress. Without these the app cannot provide the signed-in study service.

Who else processes your data

Clerk — authentication and account management.
Supabase — database storage.
Vercel — hosting and delivery of the site itself.
Stripe — only if paid plans are activated; Stripe would process payment details directly and Cardemy would not store card numbers.

Each of these acts as a processor on our instructions. Where any of them transfers data outside the EEA, that transfer relies on the European Commission's Standard Contractual Clauses.

How long we keep it

Account and learning data is kept for as long as your account exists, unless a longer period is legally required. You can request deletion at any time.

Your rights

Under the GDPR you have the right to:

access a copy of the data we hold about you;
correct anything that is wrong;
have your data deleted;
restrict or object to how we process it;
receive your data in a portable format;
lodge a complaint with the Irish Data Protection Commission.

To exercise any of these, email hello@cardemy.ie. We will respond within one month.

Children

You must be at least 16 to hold a learner permit for a category B vehicle in Ireland, and Cardemy is not intended for children under 16. We do not knowingly collect data from them.

Changes

If this policy changes in a way that affects you, we will update the date at the top of this page and tell you in the app before the change takes effect.