Privacy Policy

Last updated 8 September 2026

OREeasy is the trading name of an independent sole trader established in Egypt, who is the data controller for the information described here. Contact: support@oreeasy.com. If you need the operator's full registered identity — to exercise a data protection right, or to bring a complaint to a supervisory authority — write to that address and we will provide it.

What we collect

• Your email address — needed to create an account, confirm it, sign you in and reset your password.
• An encrypted form of your password — stored by our authentication provider as a one-way hash. We never see or store your actual password.
• Your study activity — which questions you have attempted, whether you got them right, bookmarks, mock exam results and streaks. This is what makes progress tracking work.
• Your subscription status — whether your account is free or premium, and until when.
• Basic technical data — the ordinary server logs our hosting provider keeps, such as IP address and browser type, used for security and to diagnose faults.

We do not ask for your name, address, date of birth, GDC or registration numbers, or any health information. We do not need them.

What we do not collect

• No payment card details, ever. When premium goes on sale, card details will be entered on Paddle's checkout and handled by them; they are never sent to us and we never see them.
• No advertising or third-party tracking cookies. There is no ad network on this site.
• No analytics product profiling your behaviour across the web.

Cookies and local storage

We use browser storage for two things only: keeping you signed in, and remembering your study state and display preferences on your own device. Both are strictly necessary for the service to work. There are no marketing or tracking cookies, which is why you are not being shown a cookie banner asking to set any.

Why we are allowed to hold it

• To perform our contract with you — you cannot have an account, saved progress or a subscription without us storing the data above.
• Our legitimate interests — keeping the service secure, preventing abuse, and fixing faults.
• Legal obligation — retaining transaction records where tax or accounting law requires it.

Who processes it for us

We keep this list short deliberately. These are the only third parties involved:

• Supabase — database and authentication. Your account and study data are stored here. Hosted in the EU (eu-west-1).
• Vercel — hosting and content delivery for the website and application.
• Paddle.com Market Ltd — reseller and merchant of record for payments, once premium is on sale. Paddle will hold your billing information under its own privacy policy and act as the seller of record.

Each acts on our instructions to deliver the service. None of them is permitted to use your data for their own marketing.

International transfers

We are established in Egypt and our providers operate infrastructure in the EU and elsewhere, so your data may be transferred and stored outside your own country. Where that involves personal data of people in the UK or EEA, our providers rely on recognised transfer mechanisms such as the Standard Contractual Clauses.

How long we keep it

• Account and study data: for as long as your account exists.
• After you ask for deletion: removed within 30 days, other than anything we must keep for legal or tax reasons.
• Server logs: kept for a short period by our hosting provider for security and diagnostics.

Your rights

Depending on where you live, you may have the right to ask for a copy of your data, correct it, have it deleted, restrict or object to how it is used, or receive it in a portable format. To exercise any of these, email support@oreeasy.com from your account address. We respond within 30 days and do not charge for it.

If you are in the UK or EEA and are unhappy with how we have handled a request, you may complain to your national data protection authority.

Security

Data is transmitted over HTTPS and stored in a database with row-level security, so an account can only read its own records. Passwords are hashed by our authentication provider and are not recoverable by us — which is why a forgotten password is reset rather than looked up.

No system is perfectly secure. If a breach affecting your personal data occurs, we will tell affected users and any regulator we are required to notify, without undue delay.

Children

OREeasy is intended for qualified dentists preparing for a professional registration examination, and is not directed at children. We do not knowingly collect data from anyone under 18.

Changes

If this policy changes, the date at the top is updated. Where a change materially affects how we use your data, we will notify account holders by email.

Contact

Any privacy question, or a request to delete your account: support@oreeasy.com.