1. Scope
This policy applies only to the SAT Prep & Practice: 1600.lol app for iPhone and iPad (the “App”). The App is operated by 1600.lol (“we,” “us,” or “our”). The separate website privacy policy applies when you use the 1600.lol website.
2. Information we collect
When you practice as a guest
The App creates a random app-specific device identifier. We use it to keep guest answers, bookmarks, game activity, practice-test activity, accuracy, streaks, preferences, and sync state available on that device. We do not access Apple’s advertising identifier (IDFA).
When you choose Sign in with Apple
We receive Apple’s unique user identifier and may receive your email address, including an Apple private-relay address if you choose Hide My Email. The App sends a one-time authorization code to our server. Our server may retain an encrypted refresh token to support account status and deletion; it is not used for advertising.
Gameplay and practice data
We collect questions attempted, answer choices, correctness, bookmarks, game results, practice-test progress, scores, time spent, streaks, and subject-level accuracy so the App can save progress and show useful feedback.
Operational data
Our service may process IP address, request time, app version, device and operating-system category, and security or error information needed to operate, diagnose, and protect the App. Optional study reminders are scheduled locally on your device.
3. How we use information
- Provide guest practice, games, question banks, and tests.
- Authenticate accounts, merge guest progress after sign-in, and sync progress across devices.
- Calculate scores, accuracy, streaks, and study history.
- Prevent abuse, investigate errors, secure accounts, and respond to support requests.
- Meet legal obligations and enforce our terms.
We do not sell personal information. The App contains no advertising, uses no advertising SDK, and performs no cross-app tracking. We do not share information with data brokers or advertising networks.
4. Service providers and separation
Apple supports authentication and app distribution. Microsoft Azure hosts the mobile API and mobile database. These providers process information for us under their service and security terms. Mobile account and progress records use app-specific schemas and collections separated from the website’s primary account and progress data.
We may disclose information if required by law, to protect users or the service, or as part of a business transfer where the recipient must honor this policy.
5. Retention
Guest progress remains associated with the random app-specific identifier while that guest profile is active, unless you request deletion or we remove inactive records under our operational retention process. Deleting the App removes the on-device copy but does not by itself request deletion of guest cloud data. Signed-in progress is retained while your account is active and for only as long as reasonably necessary to provide the App, resolve security or support issues, and satisfy legal duties. Short-lived security logs and backups may persist for a limited period before scheduled deletion.
6. Your choices and deletion
You can use the App without an account. A guest can choose Progress > Account > Delete guest progress and cloud data to delete local progress and cloud records tied to that anonymous app identifier. You can sign out at any time from Progress > Account. To delete a signed-in account and its cloud progress, choose Progress > Account > Delete account and cloud data and confirm. After the server confirms deletion, the App clears local progress. We may retain a limited technical deletion receipt containing opaque account and request identifiers so repeated deletion requests remain safe and idempotent; access is restricted and the receipt is removed when no longer needed for those purposes.
You may also email hi@1600.lol for privacy help. We may need to verify that you control the account before completing a request.
7. Children
The App is designed for SAT preparation and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. A parent or guardian who believes a child provided personal information should contact us so we can investigate and delete it.
8. Security
We use transport encryption, scoped credentials, access controls, token encryption, input validation, and operational monitoring intended to protect mobile information. No system is perfectly secure, but we review safeguards and limit access to what is needed to operate the App.
9. International processing and changes
Information may be processed in the United States and other locations where our service providers operate. Where required, we use appropriate safeguards for cross-border processing. We may update this policy as the App changes; the date above identifies the current version.
10. Contact
Questions or requests: hi@1600.lol.