Privacy Policy

Open Mindset Group LLC ("we," "us," or "our") operates the CLT Ready mobile application and website at cltready.app (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

CLT Ready is an independent test-preparation app and is not affiliated with, endorsed by, or sponsored by Classic Learning Initiatives, LLC or the Classical Learning Test (CLT).

1.Who This Service Is For

CLT Ready is intended for students preparing for the Classical Learning Test (the main CLT exam, typically taken by students in grades 11–12). The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13.

At account creation, users must affirm they are 13 years of age or older by checking a box. Any account we discover to belong to a user under 13 will be terminated and associated data deleted. If you are a parent or guardian and believe your child under 13 has provided us personal information, contact us at cltready@openmindsetgroup.com and we will delete it promptly.

2.Information We Collect

We collect only what the Service needs to function. We do not collect date of birth, age beyond the 13+ attestation, government IDs, payment card details, precise geolocation, analytics telemetry, crash reports, advertising identifiers, or biometric data.

2.1 Information You Provide

• Account information: email address and display name. If you sign in with Google or Apple, we receive your email and name from that provider.
• Onboarding responses: your target CLT test date range, the section you consider weakest, your score goal, and whether you have taken the CLT before. These are used to personalize your practice.

2.2 Information Generated Through Use

• Practice performance: your answers to practice questions, section scores, correct/incorrect results per question, time spent per question and per session, and timestamps.

2.3 Information Stored Locally on Your Device

• Local app state: onboarding progress, current quiz state, app launch count, and authentication tokens. This information is stored in AsyncStorage on your device and is cleared when you uninstall the app or delete your account from within the app.

2.4 Information We Do Not Collect in This Version

CLT Ready v1.0 does not collect parent or guardian contact information, and does not provide parent progress reports. If we add these features in a future version, we will update this Privacy Policy and notify users before the features go live.

3.How We Use Your Information

We use the information above to:

• Provide and operate the Service (deliver practice questions, score attempts, track progress).
• Personalize your study experience based on onboarding responses and performance.
• Maintain and secure your account, including authentication.
• Process and manage your subscription, if you purchase one.
• Communicate with you about the Service (account notices, policy updates, support replies).
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information. We do not share your personal information with advertisers. We do not use your information to train artificial intelligence models.

4.Third-Party Service Providers

We use a small set of vetted service providers to run CLT Ready. These providers process data on our behalf under contractual confidentiality and security obligations.

Each provider has its own privacy policy that governs its handling of data we pass to it.

5.Data Storage and Security

Your data is stored in Supabase (PostgreSQL) with row-level security, meaning each user can only access their own records. Data is transmitted over TLS. Authentication tokens are stored in AsyncStorage on your device.

No system is perfectly secure. We use commercially reasonable safeguards appropriate to the sensitivity of the data, but we cannot guarantee absolute security.

6.Data Retention and Deletion

We retain your data only as long as your account is active.

• Account deletion: you can delete your account at any time from the Profile screen within the app.
• Cascade deletion: when you delete your account, we immediately delete your authentication record from Supabase Auth along with all associated attempts, answers, and onboarding data. Local AsyncStorage on your device is also cleared.
• No retention period: deleted data is removed immediately, not queued or archived.
• Backups: routine database backups may retain data for a limited period before being overwritten in the ordinary course of backup rotation.

7.Your Privacy Rights

7.1 All Users

You may:

• Access the personal information associated with your account by viewing your Profile.
• Correct inaccurate information by updating your Profile.
• Delete your account and associated data from the Profile screen.
• Contact us at cltready@openmindsetgroup.com with any privacy question or request.

7.2 California Residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and (if applicable) sell or share.
• Delete personal information we have collected from you, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.
• Limit the use of sensitive personal information. We do not collect sensitive personal information as defined under the CPRA.
• Non-discrimination for exercising any of these rights.

To exercise any of these rights, email cltready@openmindsetgroup.com from the email address associated with your account. We will verify your identity before responding and respond within the timeframes required by law.

7.3 EEA, UK, and Swiss Residents (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, our lawful bases for processing your personal information are:

• Performance of a contract — to provide the Service you requested.
• Consent — where you have affirmatively opted in (e.g., account creation).
• Legitimate interests — to secure and improve the Service, where not overridden by your rights.

You have the right to request access, rectification, erasure, restriction, portability, and to object to processing. You may also lodge a complaint with your local supervisory authority.

Open Mindset Group LLC is the data controller for purposes of this Policy. To exercise these rights, email cltready@openmindsetgroup.com.

8.International Data Transfers

We operate in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.

9.Children Under 13

As stated in Section 1, CLT Ready is not directed to children under 13 and we do not knowingly collect personal information from them. If we learn that we have collected personal information from a child under 13, we will delete it promptly. Parents and guardians may contact cltready@openmindsetgroup.com with any concerns.

This Policy is intended to comply with the Children's Online Privacy Protection Act (COPPA) by limiting the Service to users 13 and older.

10.Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by email before the changes take effect. The "Last Updated" date above indicates when the Policy was most recently revised.

11.Contact Us