Privacy Policy

Last updated 2026-06-14

Solurana ("Solurana", "we", "us", or "our") operates this website and the Solurana mobile and web application (together, the "Service"), a paid study tool for the CFA® Program Level I exam. This Privacy Policy explains what we collect, how we use it, and the choices you have. We are committed to collecting as little personal information as we reasonably can.

Who we are

The Service is provided by Solurana LLC, located at [OWNER: business mailing address]. For any privacy question, or to exercise the rights described below, contact us at contact@solurana.com.

Information we collect

• Account information. You can use much of the Service with an anonymous device identifier — no name or email required. If you create an account or use Sign in with Apple or Google, we receive the basic identifiers that service provides (such as a user ID and, if you permit it, an email address).
• Study data. Your progress, answers, flagged items, notes, settings, and readiness score are stored on your device and, if account sync is enabled, associated with your account identifier so you can pick up across devices.
• Purchase information. Payments are processed by Apple, Google, or our web payment processor (Stripe); subscription state is managed through RevenueCat. We receive your purchase and entitlement status — we do not receive or store your full card number or bank details.
• Device and usage information. With your consent where required, we collect aggregate, de-identified diagnostics — app version, device type, crash logs, and feature usage — to fix bugs and improve the Service.
• Communications. If you email us or report a question error, we keep that correspondence to respond and to improve the content.

Cookies and analytics

Our website uses a small number of strictly necessary cookies to function. [OWNER: confirm analytics — if you run privacy-friendly, cookieless analytics (e.g. Plausible or Cloudflare Web Analytics), state that no advertising or cross-site tracking cookies are set; if you use Google Analytics or any advertising/retargeting pixel, you MUST name it here and present a cookie-consent banner before non-essential cookies load.] We do not use cookies to build advertising profiles. See our Cookie Notice for the full list and how to control them.

What we do not collect

• We do not require, request, or sell sensitive personal information.
• We do not collect financial account numbers, government identification numbers, precise geolocation, or biometric data.

How we use information

We use the information above to provide and operate the Service, personalize your study plan, process and restore purchases, respond to you, keep the Service secure, comply with law, and analyze and improve the product. We do not use your personal information for third-party advertising.

How we share information

We share personal information only with:

• Service providers acting on our behalf under contract — hosting, payment processing, subscription management, customer support, and analytics — and only as needed to perform those functions.
• App stores and platforms (Apple, Google) for purchases you make through them.
• Legal and safety recipients where we believe disclosure is required by law or necessary to protect rights, safety, or the integrity of the Service.
• Business transfers — if we are involved in a merger, acquisition, or sale of assets, your information may be transferred, and we will provide notice before it becomes subject to a different privacy policy.

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under California law.

Your privacy rights

Depending on where you live, you may have some or all of the following rights:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate information.
• Deletion — ask us to delete your information. You can delete your account and on-device data yourself at any time from Profile → Delete account & data in the app.
• Portability — request your information in a portable format.
• Opt out — opt out of any "sale" or "sharing" of personal information (we do neither) and of targeted advertising (we run none).
• Non-discrimination — we will not deny you service or charge you more for exercising these rights.

California residents (CCPA/CPRA): you have the rights above, including the right to know the categories of personal information collected and the purposes for which it is used, all of which are described in this policy. We do not sell or share personal information and do not knowingly process the sensitive personal information of California residents for purposes that would trigger a right to limit its use.

EEA/UK residents (GDPR/UK GDPR): our legal bases for processing are performance of our contract with you (providing the Service), your consent (for non-essential analytics/cookies), and our legitimate interests (securing and improving the Service). You also have the right to object to processing, to withdraw consent at any time, and to lodge a complaint with your local supervisory authority.

To exercise any right, email contact@solurana.com. We will verify your request and respond within the period required by applicable law. You may use an authorized agent where the law permits.

Data retention and security

We keep personal information only as long as needed to provide the Service and for legitimate legal, accounting, or security purposes, after which we delete or de-identify it. Deleting your account removes the study data associated with it. We use reasonable administrative, technical, and physical safeguards to protect your information, though no method of transmission or storage is completely secure.

International users

We operate from, and process information in, the United States. If you access the Service from outside the United States, you understand your information will be transferred to and processed in the United States and other countries whose data-protection laws may differ from your own. Where required, we rely on appropriate transfer mechanisms such as the Standard Contractual Clauses.

Children's privacy

The Service is intended for candidates preparing for a professional examination and is not directed to children under 13 (or the minimum age of digital consent in your country, such as 16 in parts of the EEA). We do not knowingly collect personal information from children under that age. If you believe a child has provided us personal information, contact contact@solurana.com and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice. Your continued use of the Service after an update means you accept the revised policy.

Contact us

Questions or requests: contact@solurana.com. Postal: [OWNER: business mailing address].

This document is a plain-language summary provided for transparency. It is not legal advice. Solurana should have these terms reviewed by qualified counsel and the bracketed details completed before relying on them.