Effective date: July 4, 2026
Bengos (the "Service") is operated by Bengos LLC. This policy describes what personal information we collect, how we use it, and the choices you have. This policy is part of, and incorporated into, our Terms of Service. By using the Service, you consent to the collection and use of information as described in this policy.
Account information. Username, email address, legal first and last name, and an optional preferred first name.
Study profile. The exam you are studying for, jurisdiction, exam date, study program, and practice goals you enter during onboarding.
Waiver record. When you sign the injury waiver during onboarding, we record the name you typed, the date and time, and your IP address.
Practice data. Typing performance (speed, accuracy, errors and corrections, session duration, and cumulative practice time), confidence ratings, tags, notes, annotations, bookmarks, and supplemental passages you write.
Profile photo. Optional; stored with our image hosting provider.
Technical data. Session cookies, security (CSRF) cookies, browser localStorage for interface preferences, standard server logs including IP address, and the analytics data described in Section 4.
We use your information to operate the Service: authenticate you, schedule your practice queue, compute your progress statistics, send transactional email (such as verification and password reset), enforce trial and subscription access, prevent abuse and unauthorized copying of our content, and comply with law.
We also use practice data to develop and improve the Service. This includes building, training, and refining the algorithms and statistical models that select, order, and schedule passages, measure progress, and generate practice recommendations.
We track the time you spend practicing to encourage healthy use. The Service may remind you to take rest breaks and may discourage or limit practice beyond healthy daily amounts.
We may send you occasional email about new features or changes to the Service. You can opt out of these messages at any time; we will still send email needed to run your account.
We do not use your personal information for third-party advertising.
We use Google Analytics to understand how visitors use the Service, such as which pages are visited and how visitors arrive. Google Analytics sets cookies and collects device and usage information, including a pseudonymous identifier and general location derived from IP address. We have turned off Google's optional data-sharing settings and do not use Google Analytics advertising features. This means a third party, Google, may collect information about your online activity when you use the Service, and Google may associate that information with activity on other websites that use Google Analytics. You can block Google Analytics with Google's browser opt-out add-on at tools.google.com/dlpage/gaoptout.
The Service also uses cookies that are necessary for it to function (login sessions and security) and browser localStorage to remember interface preferences. These are not used to track you across other sites.
Some browsers send "Do Not Track" or Global Privacy Control signals. Because we do not sell personal information or share it for cross-context behavioral advertising, the Service treats all visitors the same and does not respond differently to these signals.
We use a small number of processors to run the Service: a cloud hosting platform, an image hosting service for profile photos, an email delivery service for transactional email, and Google Analytics as described above. Each receives only the data needed to perform its function. If we add payment processing, payment card data will be collected and processed by the payment processor under its own privacy policy and will not be stored by us.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined in California law. We share personal information only: with the service providers described above; in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case personal information may be transferred as part of that transaction; when required by law or legal process; and to protect the rights, safety, or property of Bengos, our users, or others. Your supplemental passages, tags, notes, and annotations are private to your account and are not visible to other users. If our practices change, we will update this policy and provide any opt-out that applicable law requires.
We may de-identify or aggregate information so that it can no longer reasonably be linked to you, including the typing performance and review history used to build the models described in Section 3. We may use, retain, and share de-identified or aggregated data for any lawful purpose. We maintain such data in de-identified form and do not attempt to re-identify it.
We retain account and practice data while your account is active. If you close your account, we delete or anonymize personal data within a reasonable period, except records we must keep for legal purposes (such as waiver records), backups that expire on a rolling schedule, and de-identified or aggregated data, which we may retain without time limit.
We use HTTPS throughout, hashed passwords, and access controls that restrict content and personal data to your authenticated session. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The Service is operated from the United States and is built around United States bar examinations. Our servers and service providers process and store data in the United States. If you use the Service from outside the United States, you understand and agree that your information will be transferred to and processed in the United States, where privacy laws may differ from those of your country. Where the law of your jurisdiction gives you rights in your personal information, you may exercise them as described in Section 11.
You may access and correct your profile information in the Service. You may request a copy, correction, or deletion of your personal data by contacting us at legal@bengos.io. We will verify that a request comes from the account holder before acting on it, and we respond as applicable law requires. California residents may have additional rights under the CCPA, including the right to know, correct, and delete; we honor those requests at the same address and will not discriminate against you for exercising them.
The Service is intended for adults and is not directed to anyone under 18. We do not knowingly collect personal information from children.
We may update this policy from time to time. Material changes will be posted on this page with a new effective date.
Privacy questions or requests: legal@bengos.io.