Privacy
SigmaPrep is run by Bear Infotech Pvt. Ltd. This page says what we collect, why we collect it, and how to have it removed. It describes what the product actually does today, and we update it when that changes.
Last updated 7 October 2026.
What we collect
Your account. An email address and a password. If you choose “Continue with Google”, Google tells us the email address on that Google account instead, and we never see your Google password.
What you tell us about your preparation. A display name, your country, the exam you are preparing for and its window, your time zone, and your study settings: whether you want difficulty badges, and whether the question bank marks answers as you go.
Your work in the product. The sessions you start, the answers you choose, how confident you said you were, how long you spent on each question, your scores by topic, and how you rated each flashcard along with when it is next due. In papers with written answers (CFA Level III essays and CMT Level III), also the answers you type and the marks and feedback each one is given. This is the material the results and review screens are made of; without it the product cannot tell you anything about your preparation.
If you use the chat on the site. Your name, email address and phone number, plus optionally your city and which attempt you are aiming for, and the identifier your browser sends about itself. We ask for these so a person can reply to you.
The country you are connecting from. Netlify, which hosts the site, tells us which country your internet connection is in; we use that to show and charge prices in your local currency, and we record it with a payment order when you start one.
If you start the free sample without an account. We create a guest account with no name and no email, so your answers, timings and score can be saved and shown back to you. It holds the exam you chose, where you arrived from (as described below) and the kind of device you used. If you add your email or sign in with Google afterwards, the guest account becomes your account. A guest account that is not saved this way is deleted, with everything in it, after 30 days.
Where you signed up from. When you first confirm your account, we record the city, state and country your internet connection appears to be in, as Netlify reports it, and the kind of device and browser you used. We use them only to see where our sign-ups come from, and they are kept with your account until you ask us to delete it.
In your browser, not on our servers. Whether you chose the light or dark theme. It stays on your device.
Where you arrived from. If you reach us from an ad, a search result or a link on another site, we keep a note of which campaign or site sent you and which page you landed on, and, when the ad adds one to the link, the click identifier Google or Meta gave that click. We use it to work out which ads are worth paying for, and for nothing else; the Google click identifier lets us tell Google Ads that a click led to an account, without telling Google anything else about you. We keep that note for ninety days; if you make an account or write to us through the chat in the meantime, it is kept with that account or that message for as long as we keep them, and asking us to delete your data removes it along with everything else.
What we do not do
We do not sell your data and we do not show advertising. We measure the site in two ways, both described in the next section: our own visit log, and Google Analytics. There are no advertising pixels on any page of this site. We do not use your answers or results to build a profile of you for anyone else.
Measurement
Our own visit log. For each page you open on the public pages of the site we record the page, how long it was on your screen, how far down you scrolled, the label of any link or button you pressed, and whether you sent the sign-up form or chose Google sign-in; with that, the campaign or site that sent you, whether the link carried an ad click identifier, and your kind of device and browser (for example “Chrome on Android”). Inside the signed-in product it records only which pages are opened. The entries of one visit are tied together by a random number your browser keeps for that tab and forgets when the tab is closed. It stores no cookie, no IP address, nothing you type, and nothing that names you. It is kept on our own database (Supabase) for twelve months, to see where visitors give up.
We use Google Analytics to see which pages people read and where they give up. It runs on every page of this site, including the signed-in product.
What Google is told. Which pages you open and the full address of each one, which includes the campaign or site that sent you when you arrived from a link or an ad; your browser and device type; and the town and country your connection appears to be in. The tag Google supplies also measures movement within a page by itself, such as how far you scroll and clicks that lead off the site. On top of that we send three moments and no others: when you create an account, when you start a mock, and when you send us a message through the chat.
What Google is never told. Your name, your email address, your answers, your scores, and how your flashcards are going. None of those are sent, and nothing we send names you.
What it sets. Google Analytics puts its own cookies in your browser, the ones whose names begin _ga, so that two visits from you are not counted as two people. They are set through our pages, but they belong to Google: how long they last, and what Google does with what it gathers, follow the rules Google sets as well as this page.
What you can do about it. Cookie consent on this site is handled by Cookiebot, which decides from the country your connection appears to be in whether to ask you first. Where it asks, Google Analytics stores nothing until you answer. Where it does not, as in India, Google Analytics runs when the page loads. Wherever you are, you can change or withdraw your choice at any time: . Google also publishes an opt-out at tools.google.com/dlpage/gaoptout, most browsers have a tracking-protection setting that stops it, and clearing your cookies removes what it has already set. Blocking third-party cookies on its own will not stop it, because the _ga cookies are set on our address rather than on one belonging to Google. Deleting your account, below, removes everything we hold about you here.
Why we hold it
To keep you signed in, to show you your own results and schedule your flashcards, to know which parts of the product your plan includes, and to reply when you contact us. Your answers also tell us which questions are unclear or wrong, so the material gets better.
Who else touches it
Supabase stores the database and runs sign-in. Netlify hosts and serves the site. Google runs Analytics on every page, as described above, and is also involved if you choose to sign in with Google. Cookiebot (run by Usercentrics) shows the cookie choice and keeps a record of the choice you made. Razorpay takes payments: when you buy a pass it is given your email address, and your card, UPI or bank details go to Razorpay and never to us; we keep the payment reference it gives us. Anthropic marks written answers: when you submit a paper with written answers, each answer you typed is sent to Anthropic’s AI model together with the question and its marking scheme, and the marks and feedback come back to us. We do not send your data anywhere else.
Cookies
We set a cookie that keeps you signed in. If you arrived from an ad or from another site we also set one called sp_attr, which holds the note described above and expires after ninety days. Those two are ours. Google Analytics sets its own as well, as the section above describes, and Cookiebot sets one called CookieConsent that remembers your cookie choice so you are not asked again. No other company sets a cookie through these pages.
Deleting your data
Email info@bearmedia.in and ask. We will delete your account and the study data attached to it. If you wrote to us through the chat and want that enquiry removed, ask for that too and say which email address you used.
How long we keep it
Your account and study data stay until you ask us to delete them. Enquiries from the chat are kept while we are dealing with them and are removed on request.
Children
SigmaPrep is built for adults preparing for a professional finance exam. It is not directed at children and we do not knowingly collect their data.
Contact
Bear Infotech Pvt. Ltd.: info@bearmedia.in. If something here does not match what you see in the product, tell us: that is a fault worth fixing.