Beauty Exam Ready Privacy Policy

Effective date: November 1, 2026

Apps covered by this policy

This privacy policy covers the four apps listed here and the website stateboardready.com. On Google Play, all four apps are published by the developer Red Seal Ready Canada. The App Store versions come from the same Operator. Certloom Learning is the brand name the Operator uses for the apps and the website.

Barber. Google Play title: Barber State Board Exam Prep. Android package: com.beautyexamready.barber. App Store title: Barber State Board Exam Prep. Spanish title on both stores: Examen de Barbero California. Vietnamese title on both stores: Thi bằng Thợ cắt tóc CA. Earlier name: Beauty Exam Ready: Barber.

Cosmetology. Google Play title: Cosmetology State Board Prep. Android package: com.beautyexamready.cosmetology. App Store title: CA Cosmetology State Board. Spanish title on both stores: Examen Cosmetología California. Vietnamese title on both stores: Thi bằng Thẩm mỹ California. Earlier name: Beauty Exam Ready: Cosmetology.

Esthetician. Google Play title: Esthetician State Board Prep. Android package: com.beautyexamready.esthetician. App Store title: CA Esthetician State Board. Spanish title on both stores: Examen Esteticista California. Vietnamese title on both stores: Thi bằng Chăm sóc da CA. Earlier name: Beauty Exam Ready: Esthetician.

Manicurist (nail technician). Google Play title: Nail Tech State Board Prep. Android package: com.beautyexamready.nailtechnician. App Store title: CA Nail Tech State Board Prep. Spanish title on both stores: Examen Manicurista California. Vietnamese title on both stores: Thi bằng Nail California. Earlier name: Beauty Exam Ready: Manicurist.

Who runs the apps

Beauty Exam Ready is operated by an individual under the Certloom Learning brand. Certloom Learning is a brand used by the Operator, not a corporation or separate legal entity. Red Seal Ready Canada is the name of the Operator's Google Play developer account. The Operator can be reached at certloomlearning@gmail.com.

Data in the apps

The apps do not require an account and do not include an advertising SDK. Starting with version 1.0.5, the apps offer optional app analytics, and starting with version 1.0.6 optional crash reports, both described below and both off unless you allow them. Your selected language, exam date, answers, scores, bookmarks, and active sessions are stored in a database on your device. A limited purchase-access status is stored on your device to allow temporary offline use. We do not receive your study history from the app.

When you make or restore a purchase, Apple or Google processes the transaction and provides the app with the product and entitlement information needed to unlock access. We do not collect your payment card number. Their privacy policies and store terms govern their own processing. We do not sell study data or use it for targeted advertising.

Optional app analytics

App analytics is optional and off until you choose Allow when the app asks (the button is labeled Allow analytics in version 1.0.5). If you choose Not now (Don't allow in earlier versions), or never answer, the app sends no analytics data. If you allow it, the app uses Google Analytics for Firebase, provided by Google LLC, to record how the app is used, so we can improve it and understand which features help learners, including which free features lead people to buy full access. The app records events such as screens opened; onboarding steps; study sets started and finished, with the type of set, a score range and a question-count range; progress milestones in the free sample; taps on locked features; views of the full-access screen, the plan selected, purchase and restore steps and their outcome (completed, cancelled, or failed with a general error category); how the full-access screen was closed and a time range spent on it; app language changes; one study-day marker per day you study; and, from version 1.0.6, the readiness range and number of weak areas shown after the free sample, a daily study-plan view with ranges for the days left before your exam, the daily goal and your study streak, the reminder hour you pick (or that reminders are off), and when the app asks the store to show its rating prompt. It also records app-level properties: which exam app you use, the app language, whether you have full access, the store (App Store or Google Play) and the week you first used the app. Google Analytics also receives an app instance ID created by the Firebase SDK, your device model, operating system version, app version, and an approximate location, such as country or region, that Google derives from your IP address. We send fixed labels and ranges only. We do not send your answers, question text, exam date, name, email address, payment details, purchase tokens, or precise location.

The app does not collect advertising identifiers. Collection of the Apple identifier for advertisers (IDFA) and identifier for vendor (IDFV) and of the Android advertising ID and SSAID is turned off, advertising storage and ad personalization signals are denied, and the iOS apps use the Firebase build without advertising-ID support. App analytics is not used to track you across other companies' apps or websites. Google processes this data as our service provider (data processor) under the Google Analytics terms and may process it in the United States and other countries, which may be outside your own.

You can turn app analytics on or off at any time in the app, in the Privacy section at the bottom of Settings (in earlier versions, in Settings) or in the Privacy Center (App analytics in version 1.0.5; Usage statistics and crash reports from version 1.0.6). Turning it off stops collection and resets the analytics ID on your device; Delete my data in the Privacy Center also resets it. Turning analytics off does not delete data Google Analytics has already received; that data follows the retention described here. Our Google Analytics property is set to keep event-level data for 2 months and user-level data associated with the app instance ID for 14 months, and the 14-month period starts again when the same app installation sends new activity. Google deletes data automatically on a monthly cycle after it reaches the end of its retention period. These settings do not apply to standard aggregated reports, such as totals of screen views, which can be kept longer. Because the app has no account and we do not know who you are, the in-app reset is the most direct way to separate your device from data already collected. You can also email certloomlearning@gmail.com with questions or a deletion request.

Optional crash reports (Firebase Crashlytics)

Starting with version 1.0.6, the same choice also covers crash reports, sent through Firebase Crashlytics, provided by Google LLC. Crash reports are off until you choose Allow. If you choose Not now (Don't allow in earlier versions), or never answer, crash reports kept on your device are deleted and never sent, and development builds never send them. If you allow them, when the app crashes or hits a serious error it records a crash report: the stack trace (where in the app's code the problem happened), your device model, operating system version, app version, the time of the crash, technical device state such as available memory and storage, and an installation identifier created by Firebase. We add only three labels: which exam app you use, the app version and the app language. The Crashlytics SDK also marks when a crash happened and can attach the app analytics events recorded just before it, which exist only because the same choice allowed analytics. We never add a user ID, your answers, question text, exam date, name, email address, or payment details. We use crash reports only to keep the app stable and fix problems. Without a connection the report waits on your device and is sent the next time the app is open with a connection.

Google processes crash reports as our service provider (data processor) under the Firebase terms and may process them in the United States and other countries, which may be outside your own. Crash reports are not used for advertising or to track you across other companies' apps or websites. Firebase Crashlytics keeps crash reports for 90 days, after which Google starts deleting them. Turning the setting off in Settings > Privacy (Settings in earlier versions) or the Privacy Center asks Firebase Crashlytics to delete reports not yet sent, and crash reporting fully stops the next time the app opens. Reports already received follow that retention. You can also email certloomlearning@gmail.com with questions or a deletion request.

Export and delete

The Privacy Center lets you export local study data as a JSON file through your device's share sheet. The app deletes its temporary export file after the share action, but the destination you choose may retain a copy. The Privacy Center also lets you delete the app's local study history and settings. Your usage statistics and crash reports choice stays on the device, along with the date you first used the app and the last day a study-day marker was recorded, and the analytics ID is reset. Deletion does not cancel a subscription, revoke a store purchase, erase a file you previously shared, or remove information kept by Apple or Google. You can restore an eligible purchase through the store. Device backups are controlled by your operating system settings.

Website and contact

The website does not offer an account and does not set advertising cookies. Website analytics is on by default, because this website is for people in the United States. It uses Google Analytics 4, provided by Google, to count page views and clicks on App Store and Google Play buttons, and you can opt out at any time as described below. Google Analytics sets first-party cookies named _ga and _ga_ followed by an ID. We set these cookies to expire 61 days after they were last set or renewed; Google Analytics renews them when you view a page with analytics on. It receives the page address without any query string or fragment, the page title, the previous page on this website or only the domain of another referring website, which store and which app a store button opens, and technical information your browser sends, such as browser and device type, language, screen size, and time of visit. Google uses your IP address to estimate a general location; Google states that Google Analytics 4 does not log or store IP addresses. Google signals, advertising features, and ad personalization are turned off, we do not use this data for advertising, and we do not send your name, email address, practice answers, or scores.

Our "get the app" link page (/app) is counted the same way: it sends one request straight from your browser to Google Analytics and loads no Google script. The request carries the same technical information, the page address without any query string, the campaign tag of the link, which app it opens, our brand name, and whether your device is iOS, Android, or a computer. The page reads your existing _ga cookie ID if you have one; otherwise it uses a random ID that exists only while the page is open and is not stored. It writes nothing to your device and sends nothing if you opted out or your browser sends a Global Privacy Control or Do Not Track signal.

How long Google Analytics keeps this data depends on its data retention settings, which are separate from how long the cookies last on your device. Our Google Analytics property is currently set to keep event-level data, such as individual page views and store button clicks, for 2 months, and user-level data associated with the _ga cookie identifier for 14 months. Because the setting to reset user data on new activity is on, the 14-month period starts again each time the same browser sends new analytics activity, so user-level data for a returning visitor can be kept for more than 14 months after the first visit. Google deletes data automatically on a monthly cycle after it reaches the end of its retention period. These retention settings do not apply to the standard aggregated reports in Google Analytics, such as totals of page views and store button clicks, so those summarized figures can be kept longer. Opting out stops further collection but does not delete data Google Analytics has already received; that data follows the retention described here.

You can opt out of website analytics at any time with the switch under Privacy settings (linked in the website footer and from the notice at the bottom of each page). Opting out turns analytics off, deletes the _ga cookies on this website, and applies to the app link page too. A Global Privacy Control or Do Not Track signal from your browser is treated as an opt-out: nothing is sent to Google Analytics and any _ga cookies are deleted, for as long as your browser sends the signal. If you declined analytics on this website earlier, we keep that choice as an opt-out. Your choice is stored in your browser's local storage on this website. The notice at the bottom of each page tells you about analytics once; closing it does not change your setting.

Firebase Hosting, provided by Google, processes technical requests and may retain access or security logs, including an IP address and browser information, under its own service terms. If you email us, Google Gmail processes the address and message you send so we can answer your request. We do not add you to a marketing list. We retain support correspondence only as long as needed for the request and ordinary legal or recordkeeping needs. To request deletion of correspondence, email certloomlearning@gmail.com.

Sharing, security, and location

We use Apple and Google for app distribution and purchases, Google Analytics for Firebase and Firebase Crashlytics for app analytics and crash reports only when you allow them in the app, Google Firebase Hosting for the website, Google Analytics for website measurement, which you can turn off in Privacy settings, and Google Gmail for support email. We do not transfer app study history to our servers. We use platform storage and reasonable safeguards, but no device or internet service is perfectly secure. The products are offered in the United States; service providers may process technical data in other countries.

Children and rights

The service is intended for people aged 13 or older and is not directed to children under 13. If you believe a child under 13 has sent us personal information, email us so we can address it. Depending on your location, you may have rights to access, correct, or delete personal information held by us. The app's export and delete controls address device-held study data; email us about support correspondence or other data we may hold.

California privacy

If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you rights to know what personal information we collect and how we use it, to access, correct and delete it, and to opt out of its sale or sharing. We do not sell personal information and do not share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We do not use or disclose sensitive personal information for purposes that would require a right to limit its use. App analytics and app crash reports are opt-in. Website analytics is on by default and you can opt out at any time in Privacy settings; a Global Privacy Control or Do Not Track signal from your browser is treated as an opt-out. When analytics is on, we collect identifiers (the app instance ID or the Firebase installation identifier, or the website's _ga cookie identifier), internet or other electronic network activity information (the app interactions, crash reports, or page views and store button clicks described in this policy), and approximate location derived by Google from your IP address. We use this information for analytics and app stability, to improve the apps and website, disclose it only to Google as our service provider, and keep it for the periods described in this policy. Neither the apps nor the website record the content of your communications, keystrokes, or screen sessions, and we disclose the website notice and opt-out described in this policy. The website honors the Global Privacy Control signal and Do Not Track by keeping website analytics off. The app works the same whether or not you allow analytics, and we will not treat you differently for exercising your privacy rights. To make a request, email certloomlearning@gmail.com. We may need to verify a request before acting on it, and an authorized agent may make a request for you with your signed permission.

Changes and contact

We will update this page and its effective date if our data practices materially change. Contact certloomlearning@gmail.com with privacy questions.