Zero to 524 — Privacy Policy

This Privacy Policy explains how Taran Bryce Grove, a sole proprietor doing business as “Zero to 524” in the State of Nevada, United States (“Zero to 524,” “we,” “us,” or “our”), collects, uses, and shares information when you use the website at zeroto524.com and the Zero to 524 study application (together, the “Service”).

The Service is intended only for individuals 18 years or older. We do not knowingly collect information from anyone under 18.

Contact: tarangrove@zeroto524.com

1. Information we collect

Information you provide:

• Account information: your email address and a password. Passwords are handled and hashed by our authentication provider (Supabase); we never see or store your plaintext password.
• Study data: your study progress and inputs — chapter and drill completion, practice exam scores, question-bank accuracy (such as UWorld and CARS), your target exam date, and your baseline diagnostic score — used to generate and track your personalized Roadmap.
• Guarantee claim information: if you file a Score Guarantee claim, the official AAMC score report you submit.
• Marketing preference: whether you opted in to receive marketing emails.

Information collected automatically:

• We do not use third-party analytics (such as Google Analytics, Meta Pixel, Mixpanel, or similar) and our application does not set its own tracking cookies.
• Our authentication provider (Supabase) stores a session token in your browser’s local storage to keep you signed in. This is required for the Service to function.
• When you pay, you are redirected to Stripe’s hosted checkout on Stripe’s own domain. Stripe may set its own cookies there as part of processing your payment. That activity is governed by Stripe’s privacy policy, not this one.

We do not collect or store your payment card details. Payment information is handled entirely by Stripe.

2. How we use your information

• To provide the Service: create your account, generate and track your Roadmap, and record your progress.
• To process payments and manage your access and any extensions (through Stripe).
• To send transactional emails you need — for example, receipts (via Stripe) and password resets (via Supabase). Notices that your access is ending are shown to you inside the Service, not sent by email.
• To administer the Score Guarantee, including verifying claims.
• To send marketing emails (study tips, offers) only if you opted in. See Section 4.
• To maintain, secure, and improve the Service, and to comply with law.

3. How we share information

We do not sell your personal information. We share it only with service providers (“sub-processors”) that help us run the Service, and only as needed:

• Supabase — authentication and database hosting (stores your account and study data; also sends authentication emails such as password resets).
• Stripe — payment processing (and payment receipts).
• Vercel — application hosting.
• Mailchimp — sending marketing emails to users who have opted in.

We may also disclose information if required by law, to protect our rights, or in connection with a business transfer. Each sub-processor is bound by its own agreements and privacy commitments.

4. Marketing emails and your choices

We send marketing emails only to people who actively opt in — the marketing consent box at signup is unchecked by default. If you opt in, every marketing email includes an unsubscribe link, and you can opt out at any time; we honor opt-outs promptly. Opting out of marketing does not stop transactional emails you need to use the Service (like receipts and access notices).

5. Where your data is stored

Your account and study data are stored in the United States (our database region is US West / us-west-2). If you access the Service from outside the United States, you understand and agree that your information will be processed and stored in the United States.

6. Data retention and deletion

You can delete your account at any time from within the Service, or by emailing tarangrove@zeroto524.com.

When you delete your account, or after a period of inactivity, we separate your information into two independent sets and handle each differently:

• Identifiers (your email and account record): deleted from our active systems, except that if you opted in to marketing, your email address may remain on our marketing list (see below) until you unsubscribe. Your email is never used to store or look up your study data after deletion.
• Study/performance data: retained only in de-identified form for aggregate statistics and product improvement. De-identified means it is stored under a random identifier with no email, no account ID, and no other identifier that links it back to you, and we do not attempt to re-identify it or re-link it to any person.

These two data sets are kept separate and are not re-joined. Your marketing email and your de-identified study statistics cannot be matched back to each other. This means:

• We may email our marketing list and may use aggregate statistics to inform our messaging (for example, average score improvements).
• We do not target or personalize marketing to you based on your individual study data, because that data is de-identified and severed from your email.

Inactivity: accounts that remain inactive or expired for 24 months are purged or de-identified on the same basis described above.

We may retain certain records (such as transaction and tax records) as required by law, and information reasonably needed to resolve disputes or enforce our agreements.

7. Your privacy rights

Depending on where you live (including under Nevada law and the California Consumer Privacy Act, as amended), you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain uses. To exercise any of these rights, email tarangrove@zeroto524.com. We will respond as required by applicable law and will not discriminate against you for exercising your rights.

Nevada residents: Nevada law allows consumers to opt out of the sale of certain personal information. We do not sell your personal information. You may still submit a request to tarangrove@zeroto524.com.

8. Security

We use reasonable administrative and technical measures, and rely on the security practices of our providers (Supabase, Stripe), to protect your information. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

9. Children

The Service is for users 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact tarangrove@zeroto524.com and we will delete it.

10. Changes to this Policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above and, for material changes, take reasonable steps to notify you.

11. Contact

Questions or requests about your privacy: tarangrove@zeroto524.com

See also our Terms of Service and Score Guarantee Terms.