Privacy Policy

Effective Date: April 20, 2026 · Last Updated: April 20, 2026

This Privacy Policy explains how Yubin Hong (a sole individual operator based in the Republic of Korea, referred to in this document as "liteq," "we," "us," or "our") collects, uses, shares, and protects personal information about visitors and users of the liteq website and service (collectively, the "Service"). We are the data controller of the personal information we process in connection with the Service.

The Service is offered exclusively to users located in the United States. We do not solicit registrations from, market to, or knowingly process personal information of users located in the Republic of Korea or any other jurisdiction outside the United States. Accordingly, this Privacy Policy is written to address the rights and disclosures required by United States federal law and the privacy laws of U.S. states (most notably California). If you are accessing the Service from outside the United States, you are doing so contrary to our Terms of Service, and we may decline to process your registration or terminate your account.

Even though our service providers operate primarily in the United States, the operator is located in the Republic of Korea. Personal information processed in the course of operating the Service may therefore be accessed from the Republic of Korea by the operator for administrative purposes (for example, support requests). Such access is incidental to operation and does not constitute provision of the Service to Korean residents.

1. Who We Are and How to Contact Us

Operator: Yubin Hong, an individual residing in the Republic of Korea, operating the Service as a sole proprietor.
Contact email for privacy matters: studio4any@gmail.com
Website: litequs.com

If you have questions about this Privacy Policy, wish to exercise a privacy right, or believe your information has been handled improperly, please email us at the address above. We will acknowledge requests within a reasonable period and respond in accordance with the timelines required by applicable law.

2. Information We Collect

We collect the categories of personal information described below. "Personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.

2.1 Information you provide when you sign in

We use Google OAuth as our only authentication method. When you authenticate with Google, Google shares the following with us:

• Your email address;
• Your display name (as configured in your Google account);
• Your Google account profile picture URL, if any; and
• A unique identifier that allows us to recognize your account on return visits.

We do not receive your Google password at any time, and we do not have access to other Google services (Gmail, Drive, Calendar, etc.) unless you separately authorize that access in a future feature.

2.2 Information you provide during onboarding and practice

• Your self-reported grade level, target SAT score, and expected test date;
• Your answers to diagnostic questions and practice questions, including the option you selected, whether you were correct, and how long you spent on each question;
• Aggregate practice-session metadata such as the number of questions attempted, domain-level accuracy, streak counts, and mock-exam results; and
• Voluntary preferences you set within the product (for example, a display preference or whether to resume an in-progress mock exam).

2.3 Payment information

Subscription payments are processed by Lemon Squeezy (Lemon Squeezy, Inc., operated through its Irish affiliate Paddle.com Market Ltd. for certain transactions), which acts as the merchant of record. When you subscribe:

• We do not see or store your full payment card number, CVV, or bank account number. Those are collected and processed directly by Lemon Squeezy on their servers.
• We do receive, from Lemon Squeezy, a subscription identifier, the plan you purchased (e.g., "monthly" or "quarterly"), the subscription status, the renewal/expiration date, and limited billing metadata such as the billing country.
• Lemon Squeezy handles its own privacy obligations for payment data. See Lemon Squeezy's privacy notice at lemonsqueezy.com/privacy.

2.4 Information collected automatically

• Session cookies set by our authentication provider (Supabase) to keep you signed in. These cookies are first-party, HTTP-only, and scoped to our domain. They are not used for advertising.
• Minimal request logs that our hosting provider generates automatically (e.g., the IP address from which a request was made, timestamp, and the URL accessed). These logs are used only for security monitoring and troubleshooting.
• Local-device storage(your browser's localStorage) is used to cache quiz progress, learner tier, and onboarding state so that the Service works if you refresh the page. This data stays on your device and we do not collect it.

We do not use third-party advertising cookies, Meta Pixel, Google Analytics, or similar tracking technologies.

2.5 Information we do not collect

• We do not collect precise geolocation (GPS) information.
• We do not collect biometric identifiers, health information, or genetic information.
• We do not use your answers to train any generative-AI model or sell them to third-party training datasets.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• Providing the Service. Creating and maintaining your account; authenticating you on each visit; serving practice questions and tracking your progress; generating your study statistics and streak history.
• Payments and subscription administration. Associating your Lemon Squeezy subscription with your liteq account so that paid features unlock correctly; processing renewals, cancellations, and refund requests.
• Security, fraud prevention, and abuse protection. Detecting account compromise, enforcing rate limits and weekly mock limits, and investigating suspicious activity.
• Service improvement. Understanding how the Service is used in aggregate so that we can fix bugs, improve the question bank, and prioritize features. We use aggregate or pseudonymous data for this purpose wherever possible.
• Communicating with you. Responding to your inquiries; sending transactional messages (e.g., a receipt or password-reset equivalent) when necessary. We do not send marketing emails without your explicit opt-in.
• Compliance with law. Complying with applicable laws, responding to lawful requests from governmental authorities, and enforcing our Terms of Service.

4. Legal Bases for Processing (for users in jurisdictions that require one)

We process your personal information on one or more of the following legal bases, depending on the processing activity:

• Performance of a contract. To provide the Service that you have asked for when you sign up, including processing a subscription you have purchased.
• Legitimate interests. To protect the security and integrity of the Service, to improve product quality, and to communicate with you in ways that you would reasonably expect.
• Consent. When we rely on your consent (for example, if we add optional marketing emails in the future), you can withdraw that consent at any time.
• Legal obligation. When processing is necessary to comply with a legal obligation.

5. How We Share Your Information

We share personal information only in the limited circumstances below. We do not sell your personal information, and we do not share it with advertisers.

5.1 Service providers

We use the following third-party service providers to operate the Service. Each receives only the information necessary to perform its function, and each is contractually or structurally obligated to protect that information.

5.2 Legal disclosures

We may disclose personal information if required to do so by law, subpoena, court order, or other valid legal process, or if we have a good-faith belief that disclosure is necessary to: (i) protect the rights, property, or safety of liteq, our users, or the public; (ii) investigate or prevent fraud, abuse, or security incidents; or (iii) enforce our Terms of Service.

5.3 Business transfers

If the operation of the Service is transferred to another person or entity (for example, through a sale of the Service or a change in the operating entity), personal information may be transferred as part of that transaction. We will notify affected users and require the successor to honor this Privacy Policy or provide equivalent protections.

6. International Data Transfers

The operator is located in the Republic of Korea. Our service providers operate data centers primarily in the United States. Accordingly, when you use the Service, your personal information will be transferred across international borders. By using the Service, you understand that your information will be processed in those jurisdictions. We rely on contractual protections with our service providers to ensure that your information receives an adequate level of protection regardless of where it is processed.

7. How Long We Keep Information

• Account data is retained for as long as your account is active. If you delete your account, we will delete or anonymize the associated personal information within ninety (90) days, except where a longer retention period is required for legal, tax, accounting, or fraud-prevention purposes.
• Practice history (questions answered, results, streaks) is retained while your account is active. You can request deletion at any time.
• Payment records are retained for as long as required by applicable tax and accounting laws, typically five to seven years from the date of the transaction, even after account deletion.
• Server logs are retained for no more than thirty (30) days for security monitoring purposes, then automatically rotated.

8. Your Rights

Depending on where you live, you may have the rights described below. We honor these rights regardless of whether they are strictly required, to the extent it is reasonably practical.

8.1 Rights that apply to all users

• Access. You can ask us what personal information we hold about you.
• Correction. You can ask us to correct inaccurate or incomplete information.
• Deletion. You can ask us to delete your account and the personal information associated with it. Certain records (primarily payment records) may be retained as described in Section 7.
• Export / portability. You can ask us to provide your personal information in a structured, machine-readable format.
• Withdraw consent. Where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of processing before the withdrawal.
• Complaint. You can file a complaint with a relevant data-protection authority. We ask that you contact us first so we can try to resolve the issue directly.

8.2 Additional rights for California residents (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), provides you with additional rights:

• Right to know the categories of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purpose for collecting it, the categories of third parties with whom we have shared it, and the specific pieces of information we have collected.
• Right to delete the personal information we have collected from you, subject to certain exceptions permitted by law.
• Right to correct inaccurate personal information we hold about you.
• Right to limit the use of sensitive personal information. We do not use sensitive personal information to infer characteristics about you, so this right generally does not apply to our processing.
• Right to opt out of sale or sharing. We do not sell personal information and we do not share personal information for cross-context behavioral advertising. There is nothing to opt out of.
• Right of non-discrimination. We will not deny you the Service, charge you a different price, or provide a different quality of service because you exercised any of these rights.

How to exercise California rights. Email us at studio4any@gmail.comwith the subject line "California Privacy Request." We may need to verify your identity (for example, by asking you to respond from the email address associated with your account) before fulfilling your request. You may also authorize an agent to submit a request on your behalf; in that case, the agent must provide written proof of the authorization and we may contact you to confirm.

Categories collected in the last 12 months. Identifiers (name, email, unique identifier), commercial information (subscription status, plan), internet or other network activity (practice answers and session metadata), and inferences based on your practice performance (estimated SAT score, tier assignment).

Categories disclosed for a business purpose in the last 12 months. Identifiers and commercial information, disclosed only to the service providers listed in Section 5.1 for the functions described there.

Categories sold or shared in the last 12 months. None.

8.3 Additional rights for residents of other U.S. states

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Indiana, Tennessee, Florida, New Jersey, New Hampshire, Minnesota, Maryland, and other states with comprehensive privacy laws have rights substantially similar to those described in Section 8.2. To exercise these rights, email us at studio4any@gmail.com.

9. Children's Privacy (Ages Under 13)

The Service is not intended for children under the age of thirteen (13). We do not knowingly collect personal information from children under 13. When you create an account, you are required to affirm that you are at least 13 years old.

If you are a parent or legal guardian and believe that a child under 13 has provided personal information to us, please email studio4any@gmail.com. We will take steps to delete the account and associated personal information promptly, in accordance with the U.S. Children's Online Privacy Protection Act ("COPPA").

Users between the ages of 13 and 18 (or the age of legal majority in their jurisdiction) should review this Privacy Policy and the Terms of Service with a parent or legal guardian before using the Service.

10. Security

We use reasonable administrative, technical, and physical safeguards designed to protect the personal information we collect and process. These include encryption in transit (HTTPS) for all network traffic, encryption at rest for data stored by our providers, access controls limiting which employees or contractors can view data, row-level security policies in our database, and minimization of data collection to what is strictly necessary.

No method of transmission or storage is one-hundred percent secure. If we learn of a security incident that affects your personal information, we will notify you and the relevant authorities as required by applicable law.

11. "Do Not Track" Signals and Global Privacy Control

Our website does not currently respond differently to browser "Do Not Track" signals, because we do not track users across third-party websites. We honor the Global Privacy Control (GPC) signal as a request to opt out of the sale or sharing of personal information for California residents; however, we do not sell or share personal information for cross-context behavioral advertising in any case.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make a material change, we will update the "Last Updated" date at the top of this page and, where appropriate, provide notice through the Service or by email. Your continued use of the Service after the effective date of a material change constitutes acceptance of the updated Privacy Policy, to the extent permitted by applicable law.

13. Contact

Privacy questions, requests to exercise your rights, and complaints should be sent to studio4any@gmail.comwith a subject line that identifies the nature of your request (for example, "Data Deletion Request").