Privacy Policy

Effective date: October 9, 2026

Last updated November 3, 2026: optional employer contact after a purchase. October 27, 2026: Google Ads conversion measurement for purchases. October 26, 2026: we may occasionally email to ask for your feedback. October 23, 2026: one follow-up email if you leave checkout, and a one-tap unsubscribe from offers. October 22, 2026: what Stripe shares with us when you buy, and how we use it; Stripe is our payment processor. October 20, 2026: our email delivery provider is now Resend. October 12, 2026: named our email delivery provider. October 11, 2026: added sign-in with Google. October 9, 2026: purchases are one-time rather than subscriptions; added advertising measurement. October 7, 2026: clarified how analytics relates to your account, ad and share links, and launch notifications.

This Privacy Policy explains how Trelos (“Trelos,” “we,” “us,” or “our”) collects, uses, and shares information when you use the Trelos application and website (the “Service”). By using the Service, you agree to this policy.

1. Information we collect

Account information. Your email address, which we use to create your account and sign you in using one-time “magic” codes. We do not use passwords. If you choose Continue with Google, Google confirms your identity and shares your email address (and basic profile details such as your name) with us; we use only the email address to create and sign in to your account.
Study and usage data. The exams you study, your progress, spaced-repetition scheduling, answers, performance, and calibration data, plus details you choose to give us such as roughly when your exam is, so we can run the learning engine, tailor your study plan, and sync your progress across your devices.
Device and technical data. Browser and device type, app version, approximate location inferred from your IP address, and diagnostic information used to keep the Service secure and reliable.
Analytics and session data. We use PostHog, a product analytics service, to understand how the Service is used: for example, pages viewed, features used, referring sites, and interactions such as clicks and taps. This may include session replays that reconstruct how you interact with the Service; text you type into input fields is masked by default in replays. If you sign in, we link this analytics data to your account, including your email address, so we can understand how the Service is used over time, support you, and send the notifications you request. PostHog processes this data on our behalf as a service provider.
Ad and referral information. If you arrive by clicking an ad or a link, the link may include information about the campaign or ad that brought you (for example, which ad you clicked). We record this to measure which ads and links are useful, and we may share limited information with advertising partners as described in “How we share information” below.
Challenge links. If you share a “challenge” link to a question, the link contains the exam, the question, and an anonymous code that is not your name or email, so we can see whether shared links are used. People who open your link can’t see who you are.
Payment data. When you purchase, payments are processed by Stripe, our payment processor. We do not collect or store your full payment-card details; Stripe processes them under its own terms and privacy policy. Stripe shares with us the email you enter at checkout, the amount, and a link to your receipt; we use them to attach the purchase to your Trelos account (creating one for that email if you don’t have one), to send your purchase confirmation, and to handle refunds and pass-guarantee requests.

2. How we use information

We use information to provide, maintain, and improve the Service; create and sync your account and progress; tailor your study plan; process and manage purchases; communicate with you about your account, security, and updates; send notifications you ask for, such as when full access to an exam opens, and study reminders you can turn off at any time; if you start a purchase and leave checkout before paying, send one follow-up email about that exam (only if you are signed in, or you ticked the box at checkout agreeing to hear from us; it never offers a different price, and you can unsubscribe from offers in one tap); occasionally ask for your feedback about Trelos (these emails come from support@trelos.ai, replies go to our team, and the same unsubscribe from offers stops them); measure which ads and links bring people to the Service; prevent fraud and abuse; and comply with legal obligations.

3. Legal bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we process personal data on the bases of performance of a contract with you, our legitimate interests (such as operating and securing the Service), your consent (where required), and compliance with legal obligations.

4. How we share information

We do not sell your personal information. We share it only with:

Service providers (processors) who help us operate Trelos — including our authentication and database provider (InstantDB), our payment processor (Stripe), our hosting and infrastructure provider (Vercel), our email delivery provider (Resend), and our analytics provider (PostHog). If you sign in with Google, Google handles that sign-in under its own privacy policy.
Advertising partners (such as OpenAI’s ChatGPT ads): to measure and improve our ads, we may share limited information, such as that you arrived from an ad and completed an action in the app (for example, finishing a lesson), an ad click identifier, and, if you’re signed in, a hashed (scrambled) version of your email address. We use this to see which ads work and to show ads to people likely to find Trelos useful. Partners may not use it to sell to you on their own behalf.
Google Ads: we use Google Ads conversion measurement to know when an ad led to a purchase; it receives the order amount and an order id, not your name or email.
Employer partners, only if you opt in: after you buy an exam where we offer it, you can choose to hear from employers that recruit candidates for that exam (for example, hospitals and staffing agencies for nursing and healthcare exams, broker-dealers and financial firms for securities exams, brokerages for real estate). If you ask us to, we share your email, exam and target date (and, for the NCLEX, whether you completed your nursing education in the US or outside it, if you tell us) with employers we’ve vetted. You can withdraw this in Settings at any time, and we tell those employers to stop. It is off unless you turn it on, and it never affects your access or price.
Legal and safety recipients, where required to comply with law or to protect rights, safety, and the integrity of the Service.
Business transfers, in connection with a merger, acquisition, or sale of assets, subject to this policy.

5. Cookies, local storage & offline caching

We use local storage, caches, and a service worker (for offline study) to operate the app, remember your preferences, and keep your progress available. Our analytics provider also stores an identifier in your browser to recognize return visits and measure usage. We may use advertising measurement tools from our advertising partners to understand which ads lead people to use Trelos.

6. Data retention

We retain personal data while your account is active and as needed to provide the Service and meet legal obligations. You may request deletion of your account and associated data (see “Your rights”).

7. Your rights

Depending on where you live (for example, under the GDPR/UK GDPR or the CCPA/CPRA), you may have the right to access, correct, delete, port, or restrict the processing of your personal data, and to opt out of certain processing. To exercise these rights, contact us at the address below. We will not discriminate against you for exercising them.

You can stop reminders with the one-tap unsubscribe link in any reminder email, and stop offers (launch notifications and checkout follow-ups) with the one-tap “Unsubscribe from offers” link in those emails. You can also stop launch notifications or reminders at any time by replying to any message or emailing support@trelos.ai. Deleting your account also deletes the analytics profile linked to it.

You can turn employer contact off at any time in Settings (Employer contact), or by emailing support@trelos.ai.

You can opt out of having your information shared for advertising at any time by emailing support@trelos.ai.

8. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International transfers

Your information may be processed in countries other than the one in which you live. Where required, we rely on appropriate safeguards for such transfers.

10. Children

The Service is not directed to children under 16 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version with a new effective date and, for material changes, provide additional notice where appropriate.

12. Contact us

Questions or requests? Email us at support@trelos.ai.

Trelos is an independent study tool and is not affiliated with, authorized, endorsed by, or sponsored by FINRA, NASAA, CFA Institute, NCSBN, the National Healthcareer Association, AICPA, or any other examination or credentialing body. All exam names and trademarks are the property of their respective owners.