Last updated September 10, 2026

Privacy Policy

cain (cainsat.org) is a student-built project, not a company. If you have a question about this policy or your data, contact stas.grushetzky@gmail.com.

cain is not affiliated with or endorsed by College Board. SAT® is a trademark registered by College Board.

How you sign in

You sign in with Google only. cain receives your name, email address, and profile picture URL from Google and stores those three fields. cain does not store your Google password, and does not keep your Google access or refresh tokens.

What else is stored

  • Every lesson you complete
  • Every practice and test answer you submit, along with the time it took you
  • Your XP and streak records
  • Your full-test scores
  • Planner tasks and settings, if you use tasks.cainsat.org
  • A push-notification subscription, if you turn on reminders

cain does not collect your date of birth, grade, school, or location.

Where it is stored

The app runs on Vercel, in the United States. The database runs on Supabase, in the ca-central-1 region (Canada). Question content for the full test is fetched by cain's own server from College Board's public question bank; no information about you is sent to College Board.

What it is used for

Your data is used only to run the app for you: to track your progress, score your tests, and remind you about planner tasks if you opt in. cain does not run advertising, does not sell or rent your data, and does not share it with anyone except the hosting providers named above. cain does not build a profile of you for anything beyond running these features.

Deleting your data

You can delete your account and everything tied to it at any time from the sidebar (Delete my account). You can also email stas.grushetzky@gmail.com to request deletion.

Age

cain is intended for high-school students. If you are under 13, you need a parent's permission before creating an account, and should not sign up without it.

Security

cain is served over HTTPS, uses secure session cookies, and restricts database access to the app itself.