1. Introduction
Welcome to Mooock. This privacy policy applies to all users of our Platform at Moock.com, including registered users, visitors, and administrators.
Privacy Policy
We respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information.
Last updated: November 16, 2025
Your Rights: You can export your data, delete your account, and manage your cookie preferences at any time.
2. Information We Collect
2.1 Information You Provide
Account Information: Name, email, password (encrypted), country, profile picture, communication preferences.
Exam Activity: Exam registrations, mock attempts, answers and scores, study plans, time spent, completion status.
User Content: Comments on questions, votes and feedback, certificate achievements.
2.2 Automatically Collected Information
Device & Usage: IP address, browser type, device type, pages visited, session duration, referral source.
Cookies: Session cookies (essential), analytics cookies (Google Analytics), preference cookies (theme, language), push notification subscriptions.
2.3 Third-Party Information
OAuth Providers: When you sign in with Google or GitHub, we receive your name, email, and profile picture.
3. How We Use Your Information
Service Delivery: Create and manage your account, provide access to exams, track progress, generate certificates, send service notifications.
Communication: Send exam results, inactivity reminders, subscription notices, support responses, important updates.
Analytics: Analyze usage patterns, monitor exam quality, identify technical issues, develop new features.
Security: Detect unauthorized access, monitor suspicious activity, enforce Terms of Service, comply with legal obligations.
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), we process your data based on:
- Contract Performance: To provide the services you requested
- Legitimate Interests: To improve our Platform and ensure security
- Consent: For marketing communications and optional analytics
- Legal Obligation: To comply with applicable laws
5. Data Sharing and Disclosure
We do not sell your personal data.
5.1 Service Providers
We use trusted third-party services to operate our platform:
- Cloudinary: Image hosting and optimization
- Resend: Transactional email delivery
- Google Analytics: Usage analytics (if enabled)
- Upstash (Redis): Caching for performance
- MongoDB Atlas: Database hosting
- Vercel: Platform hosting
- OpenAI: AI-powered mock exam generation (admin only)
All providers are contractually bound to protect your data and only process it as instructed.
6. Data Retention
We retain your personal data for as long as your account is active, needed to provide services, or required by law.
Specific Retention Periods:
- Account data: Until deletion + 30 days (for recovery)
- Exam results: Retained indefinitely (unless you request deletion)
- Email verification tokens: 24 hours
- Password reset tokens: 1 hour
- Login activity logs: 90 days
7. Your Rights (GDPR & CCPA)
Depending on your location, you have the following rights:
- Access & Portability: Request a copy of your personal data in JSON format via profile settings
- Correction: Update your account information at any time
- Erasure (Right to be Forgotten): Delete your account and anonymize your data
- Restriction: Limit how we process your data
- Withdrawal of Consent: Unsubscribe from emails or disable analytics
- Object: Object to processing for certain purposes
To exercise your rights: Email support@mooock.com or use your Privacy Settings.
8. Security Measures
Technical Safeguards: HTTPS/TLS encryption, password hashing with bcrypt, JWT authentication, rate limiting, input validation, regular security updates.
Organizational Safeguards: Access controls, regular audits, incident response procedures, staff training.
However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
9. Cookies and Tracking
We use essential cookies for authentication and preferences, and optional analytics cookies with your consent. Learn more in our Cookie Policy.
10. Children's Privacy
Our Platform is not intended for users under 16 years of age. We do not knowingly collect data from children. If you believe we have collected information from a child, please contact us at support@mooock.com.
11. International Data Transfers
Your data may be transferred to and processed in countries outside your residence (United States, European Union). We ensure appropriate safeguards including Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs).
12. California Privacy Rights (CCPA)
California residents have additional rights: right to know, right to deletion, right to non-discrimination.
California "Do Not Sell" Notice: We do not sell your personal information.
13. Changes to This Policy
We may update this policy from time to time. Changes will be posted with an updated date. For significant changes, we will email registered users and display a platform notice.
14. Contact Us
For privacy-related questions or to exercise your rights:
- Email: support@mooock.com
- Response Time: We aim to respond within 30 days
15. Supervisory Authority
If you are in the EEA and believe we have not addressed your privacy concerns, you have the right to lodge a complaint with your local data protection authority.
By using Mooock, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.
Version 1.0 • Effective Date: November 16, 2025