Privacy Policy

Last updated: 23 September 2026

Army NCO Prep is a product of Tesserarius LLC, a Wyoming limited liability company. This page describes what we may collect, who else holds it, and what you can do about it.

This policy covers everything the app and the website are built to do. Some of it is not switched on yet. Where that matters to you, this page says so.

If you have any questions you may contact us at feedback@armyncoprep.com.

What we may collect

With an account, we hold your email address and, if sync is on, a copy of your study data. Your study data is your quiz scores, the questions you have missed, and your study history. Your notes, marks and favorites are not part of it today, and they stay on your device.

Without an account, we hold neither of those. There is nothing to sign in to, and what the app saves stays on the device you saved it on.

Usage and diagnostic information. How the app and the website are used: which screens are opened, which features are used, and how the app performs. This may include your device type, operating system, browser, language, approximate region, and an identifier for your device or your app install.

Crash and error reports, which describe what the app was doing when something went wrong.

Ordinary web traffic. Our servers and the services we use see the requests that fetch the app, a publication, a speech model or a sync update, along with the IP address and device details that come with any web request. Account activity such as sign-ins and two-step prompts may be logged with the IP address it came from.

Cookies and similar storage, described below.

Why we may collect it

To run the app and the website. To keep your studying in sync across your devices. To sign you in, reset a password, and manage two-step verification. To keep the service secure and working. To find and fix problems. To understand how the app is used so we can improve it. To measure and support our own marketing, and to reach people who might find the app useful.

Cookies and similar storage

The website and the app use cookies, local storage and similar technologies. Some are needed to keep the site secure and working. Others may be used to measure use or to support marketing.

Where a choice about non-essential cookies is required, we ask you first and we set none of them before you answer.

Analytics, advertising and other services

We may use analytics and similar services to measure how the app and the website are used, and advertising or marketing services to reach people who might find the app useful. Those providers may receive usage information, device and browser details, and identifiers associated with your device or your app install.

We do not sell your personal information, and we do not share it with data brokers.

Leaders' Hub: other Soldiers' details

Leaders' Hub holds details about other Soldiers: names, ranks, billets, duty assignments and absences, typed in by a leader. If you use it, the people in it are not you, and most of them will never open this app.

They did not create an account and they did not agree to anything. You decided what to put in, and we hold it because you asked us to.

You decide what goes in. We prompt for no Army field, we import from no Army system, and we ask you for nothing about anyone else. What is in there is what a leader typed.

We do not ask for any of these and no field in the Hub is for them: Social Security number, DoD ID or EDIPI, date of birth, home address, personal phone or email, family members, next of kin or emergency contacts, medical or profile codes, restriction reasons, legal or flag text, weapon serials, vehicle plates, bank details, or photographs of Soldiers. If you import a DA Form 6, the app reads it on your device and keeps only what the Hub has a field for. What a leader types here builds his roster and is used for nothing else.

Today this data is held only on the device where it was typed. It is encrypted there, and it opens with a PIN the leader sets or with the recovery code that comes with it. We hold no copy of it. If the Hub syncs to your account in future, the copy we hold is covered by everything this page already says about your account data.

We never use roster and counseling records for analytics, advertising or audience building. No usage event we collect carries a Soldier's name, a roster row, or anything typed into a counseling entry. That is a commitment about people who are not our users and who cannot decline, and it does not have an exception in it.

If one of those Soldiers asks us to delete them, here is the honest answer. We hold no copy of a leader's roster, so there is nothing on our side to delete. The leader who typed it is the only person who can remove that row. If you write to feedback@armyncoprep.com we will tell you what we can do and what we cannot.

Because the data is on the device, losing the device loses the data. Losing both the PIN and the recovery code loses it too, and so does entering too many wrong PINs, which erases it from the device. We have no copy to hand back and no way to restore it for you.

What leaves your device

The app downloads publications from our storage when you open or save one.

It downloads a speech model of roughly 40 MB the first time you use Recite the Creed on the web, or when you turn enhanced recognition on in Settings.

Recite the Creed is optional and you choose when to open it. When you start a recitation, the app asks your permission to use the microphone. The microphone is used only during a recitation, never in the background. If you decline it, every other part of the app works normally.

Recite the Creed turns what you say into text so it can be graded. With enhanced recognition on, the app uses the speech model it downloaded, and the grading happens on your device. With it off, the browser's own speech recognition handles it, which means your audio goes to whoever supplies that browser or operating system, under their terms and not ours. In both cases, the app itself never records, saves or transmits your audio.

With an account, the app also signs you in and manages the account itself: creating it, signing in, resetting a password, setting up or removing two-step verification, and deleting the account when you ask it to.

With sync on, your study data and your app settings travel to your account, so the work you do and the way you have set the app up are there on your other devices. What that covers grows as the app does. Your downloaded publications and the speech model are not sent, and a new device downloads its own.

That copy travels over an encrypted connection, and our database provider encrypts it at rest. We can read your study data. We do not: it is not used for anything except handing it back to you.

Usage, diagnostic and crash information, where collected, goes to us and to the providers described above.

On pages our servers deliver, Cloudflare's bot-detection script also gathers information from your browser for Cloudflare, as described under "Who else is involved, and sharing."

How long we keep it

The copy of your study data we can read is kept for up to a year. The year runs from the last time the app sent an update, and when it runs out the copy is deleted.

Account records last as long as the account does and go when the account goes.

Ordinary server logs, account activity logs, and usage and diagnostic information are kept for as long as we need them to run, secure and improve the service.

Who else is involved, and sharing

Cloudflare provides our hosting and file storage. They operate the servers that deliver the app and the publications, and like any web host they see the requests that reach them.

Cloudflare also adds a small script of its own to every page our servers deliver, including the web app and Leaders' Hub. It is Cloudflare's bot detection: it gathers information from your browser to tell people apart from automated traffic. Cloudflare describes that information only as "client-side signals" and does not list them. It records the result in a cookie in your browser. Because the script runs inside the page, it runs alongside whatever the page is showing, including Leaders' Hub records while the Hub is open, and we do not control what it reads. The encryption described under Leaders' Hub protects those records while they are stored on the device, not while the Hub is open.

Supabase holds your account and, if sync is on, the copy of your study data. That includes your email address, your password in a form it cannot be read back from, your study state, and, if you turn on two-step verification, the secret that generates your codes. Their service also records account activity such as sign-ins and two-step prompts, including the IP address each one came from.

Resend delivers the emails you need to verify your account, change your password, and handle anything else about the account itself.

Your browser or operating system provider transcribes your recitation, but only if you use Recite the Creed with enhanced recognition off, and only while you are reciting.

We may add or change service providers, including analytics, advertising and crash-reporting providers. We may also share information where the law requires it, to protect the service or someone's safety, or as part of a sale or transfer of the business.

Children's privacy

Army NCO Prep is not directed to children under 13. It is a study aid for U.S. Army personnel, its subject is Army doctrine, its readers are serving Soldiers and the leaders who counsel them, and the minimum age to enlist in the Army is 17.

You must be 13 or older to create an account.

We do not knowingly collect personal information from a child under 13. If you believe a child under 13 has given us personal information, write to feedback@armyncoprep.com and we will look into it and delete what we find. If we learn that an account belongs to a child under 13, we delete it, and the copy of the study data goes with it.

Your choices

Creating an account is what gives us your email address. Turning sync on is what gives us a copy of your study data. Both are yours to choose, and you can undo either one.

You can clear what the app has saved from Settings, or by clearing the app's storage in your browser.

With an account, you can correct your data by editing it in the app, and you can delete the account and the copy of your study data from Settings, without sending a request and without waiting.

Turning sync off, without deleting the account, deletes the server copy of your study data straight away. Either way, we do not delete what is on your device. It can still be lost if you clear your browser, delete the app or lose the device.

Where a choice about non-essential cookies, analytics or marketing is offered, you can change it from the same place you set it.

Where the law gives you rights over your personal information, such as access, correction, deletion, objection or portability, write to feedback@armyncoprep.com and we will tell you what we can do and what we cannot. With an account, here is where each one stands today.

• Erasure: answered in full, by you, from Settings, with no request and no waiting.
• Access: with an account we hold your email address and a copy of your study data, which includes working values the app keeps for itself and does not display. Write to feedback@armyncoprep.com and we will tell you what we hold for your account.
• Correction: you edit your data in the app, and the corrected version replaces our copy the next time it syncs.
• Objection: where a choice about analytics or marketing is offered, you can change it from the same place you set it.
• Portability: the app cannot hand you your study data as a file.

Changes to this policy

We may update this page. The date at the top says when it last changed.

Contact

Questions about this policy? Email feedback@armyncoprep.com, or see the support page.

Army NCO Prep is a product of Tesserarius LLC, a Wyoming limited liability company, which is responsible for the information described on this page. Company mailing address: 30 N Gould St, Ste N, Sheridan, WY 82801, US

Army NCO Prep is an independent study aid. It is not affiliated with, endorsed by, or sponsored by the U.S. Army, the Department of Defense, the U.S. Government, or any government agency. It is not an official product of any of them.