Pinnacle Prep ("Pinnacle", "we", "us") is an AI-powered adaptive exam-prep platform for CFA, FRM, ACCA, and CPA candidates, trading as Pinnacle Prep, from Johannesburg, South Africa.
Contact: support@pinnacle-prep.org
Study data powers your adaptive coaching and spaced repetition schedule — we can't personalise your prep without it. Analytics help us improve the product. Error tracking helps us fix bugs faster.
We send Anthropic only the topic and difficulty parameters needed to generate questions — no user PII is transmitted. We do not sell your data. We do not share your data with advertisers.
All third-party vendors are contractually bound as Data Processors under Data Processing Agreements (DPAs) compliant with GDPR Article 28 and POPIA. For details on sub-processors used by our vendors, contact support@pinnacle-prep.org.
For users in the EU, we transfer your personal data to the United States under the Standard Contractual Clauses (SCCs) adopted by the European Commission as permitted under GDPR Article 46. By using Pinnacle, you consent to the transfer of your data to the US and other countries as described in this policy. We rely on adequacy determinations and appropriate safeguards maintained by our service providers.
Under POPIA and GDPR you have the right to: access your data; correct inaccurate data; request deletion; restrict processing; and data portability. Email support@pinnacle-prep.org — we respond within 30 days.
In the event of a data breach involving your personal data, we will notify affected users and relevant authorities within 72 hours (GDPR) or as required by law. Notifications will be sent to the email address associated with your account. We will provide details of the breach, the data affected, and steps you should take. Breach notification may be delayed if required by law enforcement.
Pinnacle uses machine learning algorithms to personalise your study schedule and question selection based on your performance data. These decisions are automated but are not legally binding and do not produce significant effects on your rights. The algorithms determine question difficulty, topic sequencing, and review timing using your accuracy, response time, hesitation patterns, and retry behavior. You have the right to request explanation of any algorithmic decision by contacting support@pinnacle-prep.org. You can opt out of personalization, though this may reduce the platform's effectiveness.
Data is retained while your account is active. Delete your account via Settings and all personal data is permanently removed within 30 days. Anonymised aggregate statistics may be retained.
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Passwords are hashed using bcrypt. Row-Level Security is enforced at the database layer — users can only access their own data.
Essential cookies only (authentication). Analytics cookies (PostHog) are set only after you consent via the cookie banner on first visit.
Pinnacle is directed at users 18 and above. We do not knowingly collect personal data from children under 13.
For users aged 13–17: Parental or guardian consent is required to create an account and use Pinnacle. Parents/guardians may contact support@pinnacle-prep.org to verify, request, or delete their child's data.
If we discover we have collected data from a user under 13 without parental consent, we will delete it within 30 days.
Material changes will be communicated via email or in-app notification at least 14 days before they take effect.
Pinnacle Prep · Johannesburg, South Africa
support@pinnacle-prep.org