Privacy policy
Last updated: November 1, 2026
This policy explains what personal information is used when you use the GED Free Android app (gedpre.com) and the website gedfree.com, why, who else receives it, and the choices and rights you have.
1. Who is responsible
GED Free is responsible for the personal information described here. For any privacy question or request, email info@gedfree.com. See the contact page.
2. Summary
- You do not need an account. We do not ask for your name, address, phone number or Social Security number.
- Your progress, test scores and settings stay on your device or in your browser. We cannot see them.
- The free app shows ads from Google AdMob and uses Google Firebase for usage statistics and crash reports. In the EEA, the UK and Switzerland these start only if you agree. In the United States and other regions they are on by default, and you can turn them off in the app's settings under "Your Privacy Choices".
- The website shows no ads and uses no advertising or tracking cookies.
- We do not sell personal information for money. Personalized ads in the app may count as "sharing" under some state laws, and you can opt out.
3. The app
Stored only on your device
Your learning progress, answers, scores, review list, credits balance and settings are stored on your device. They are not sent to us. Clearing the app's data or uninstalling the app deletes them.
Your choices for ads and statistics
In the EEA, the UK and Switzerland, the app shows a consent form from Google's User Messaging Platform the first time it opens; personalized ads, usage statistics and crash reports start only if you agree. In the United States and other regions no consent form is shown: ads may be personalized, and usage statistics and crash reports are sent by default. Everywhere, you can change your choices at any time in the app's settings under "Your Privacy Choices": turn on "Do not sell or share my personal information" to get only non-personalized ads, and turn off "Usage statistics and crash reports".
Ads (Google AdMob)
The free app shows banner ads and, if you choose, rewarded ads that give you credits. Google LLC processes device and advertising identifiers, IP address, device information and how you interact with ads in order to show ads, measure them and prevent fraud. Without personalization, Google shows non-personalized or limited ads. After the Premium purchase no ads are shown. You can reset or delete your advertising ID in Android settings. More: policies.google.com/technologies/ads.
Usage statistics and crash reports (Firebase)
The app uses Google Firebase Analytics to see which features are used (for example screens opened, app version, device type, approximate region and an app instance ID) and Firebase Crashlytics to receive technical crash reports (stack trace, device model, Android version, installation ID) so that we can fix errors. In the EEA, the UK and Switzerland both stay off unless you agree; elsewhere they are on until you turn them off under "Your Privacy Choices".
Learning content
Lessons, images, slides and videos are downloaded over HTTPS from our content servers on Cloudflare, and some videos are played from YouTube or Vimeo. These services receive the technical data every download needs (IP address, time, file requested, device and app information).
Purchases
The Premium purchase is handled by Google Play. We never see your payment details. We receive only a purchase confirmation (product, purchase status and a purchase token). To protect against fake purchases, the app sends the product and the purchase token to our verification server verify.gedfree.com (Cloudflare Workers), which checks the purchase with the Google Play Developer API. The token is not stored in any database; the server's technical logs (time, address called, result) are deleted automatically by Cloudflare within 7 days.
Starter credits (once per device)
New users get starter credits once per device. So that they cannot be claimed again by reinstalling, the app makes a one-way SHA-256 hash of the app's Android device ID (ANDROID_ID) and sends only this hash to verify.gedfree.com (Cloudflare Workers and a Cloudflare D1 database). The device ID itself never leaves your device. In the database we store only the hash and the time of the first request: no learning data, no name, no Google account. Each request also appears in the server's technical logs, which are deleted within 7 days. To have the entry deleted, email us the "Device code" shown in the app under "Your Privacy Choices"; the starter credits can then be claimed on that device again. Without the code we cannot tell which entry belongs to your device.
Translation and read-aloud
If the app offers translation or read-aloud, translation runs on your device with Google ML Kit (the language model is downloaded once; texts are not sent to us or to Google) and read-aloud uses your device's text-to-speech engine.
4. The website
Hosting and security
gedfree.com and its subdomains run on Cloudflare (Cloudflare, Inc.). To deliver pages and protect them from attacks, Cloudflare processes connection data such as IP address, time, the address requested and browser information. We do not keep visitor logs of our own.
Lesson videos and slides
Lesson videos, slide images and their text are loaded from a separate media server that we run on Cloudflare. Like any server, it receives your IP address, the time, the file requested and browser information in order to deliver the file.
Visitor statistics
We may use Cloudflare Web Analytics to count page views. It does not use cookies, does not store your IP address and does not follow you across other websites.
Progress in your browser
Practice answers, scores, your review list and settings are saved in your browser's local storage so that you can continue where you left off. They are not sent to us. "Delete all progress" on the progress page deletes your progress and review list; clearing the site's data in your browser deletes everything, settings included. If you used "Download backup", the downloaded file stays on your device until you delete it.
Machine translation
The site is written in English and Spanish. If you choose another language, the text of the page is sent to Google Translate (Google LLC) to be translated. Nothing is sent unless you choose a language.
Videos
Some lessons include videos from YouTube (in privacy-enhanced mode, youtube-nocookie.com) or Vimeo. When a page with a video is open, your browser connects to that service, which receives your IP address and browser information and may store data in your browser when you play the video.
Fonts, math rendering and scripts are served from our own servers.
5. Cookies and browser storage
gedfree.com sets no cookies of its own and uses no advertising or tracking cookies. It uses browser storage only for the features below.
| Name | Purpose | Kept for |
|---|---|---|
gedpath.v1 | Your progress, answers, scores and review list | Until you delete your progress or clear your browser data |
gp_theme, gedpath_language, gedpath_translation_notice, gp_app_bar_closed | Light or dark mode, chosen translation language, translation notice shown, app banner closed | Until you clear your browser data |
gedpath_tr:* (session storage) | Translations already fetched, so they are not requested again | Until you close the tab |
6. Service providers
- Google LLC: AdMob, User Messaging Platform, Firebase Analytics and Crashlytics, Google Play, ML Kit, Google Translate, YouTube.
- Cloudflare, Inc.: hosting, the lesson media server, content delivery, Web Analytics, email forwarding and the purchase and starter credits verification server (Workers, D1).
- Vimeo, Inc.: some lesson videos.
These providers process data in the United States and other countries under their own privacy policies and contracts. We share personal information only with these providers, when the law requires it, or to protect the service against fraud and abuse.
7. How long we keep data
- Data on your device or in your browser: until you delete it, clear the app's or browser's data, or uninstall the app.
- Starter credits device hash: while we offer starter credits, then deleted.
- Technical logs of the verification server: deleted automatically within 7 days.
- Crashlytics reports: 90 days. Firebase Analytics: up to 14 months. Other Google services: as set out in Google's policies.
- Emails you send us: as long as needed to answer you, and at most 12 months after the conversation ends, unless the law requires longer.
8. Your rights and choices
- Delete local data at any time: see Delete your data.
- Change your ad and statistics choices under "Your Privacy Choices" in the app's settings; reset or delete your advertising ID in Android settings.
- Ask us to access, correct or delete the personal information we hold (in practice, the starter credits hash and your emails) by writing to info@gedfree.com. For the starter credits hash, include the Device code shown in the app. We reply within 45 days.
Because there are no accounts, we cannot link data stored on your device to you, and we will never ask for your password or payment details.
9. State privacy laws (including California)
Residents of California and other states with consumer privacy laws (such as Colorado, Connecticut, Virginia, Texas and others) have the right to know what personal information is collected, to access and delete it, to correct it, and to opt out of its "sale" or "sharing" for targeted advertising, without being treated differently for using these rights.
- What we or our providers collect, from where, why, and who receives it (past 12 months): (1) Identifiers: advertising ID, app instance and installation IDs, the starter credits hash, IP address and, if you write to us, your email address. Sources: your device, the Google SDKs in the app, and you. Purposes: showing and measuring ads, usage statistics, fixing crashes, preventing starter credits and purchase fraud, answering you. Recipients: Google (AdMob, Firebase, Google Play) and Cloudflare (hosting, verification server, email forwarding). (2) Internet or other electronic network activity: screens used, ad interactions, crash reports and device information (model, Android version, app version). Sources: your device and the Google SDKs. Purposes: ads, statistics, fixing errors. Recipients: Google. (3) Approximate location derived from IP address. Source: your connection. Purposes: ads and statistics. Recipients: Google and Cloudflare. (4) Commercial information: Premium purchase status and purchase token. Source: Google Play. Purposes: unlocking Premium, preventing fake purchases. Recipients: Google and Cloudflare. (5) Content of emails you send us. Source: you. Purpose: answering you. Recipients: Cloudflare (email forwarding) and our email provider. Only categories (1) to (3) may be "shared" with Google for personalized ads in the app, and you can opt out. We do not collect sensitive personal information, and we have no actual knowledge that we sell or share the personal information of consumers under 16.
- Do not sell or share my personal information: we do not sell personal information for money. When ads in the app are personalized, Google receives your advertising ID, ad interactions and approximate location, and some state laws call this "sharing" for targeted advertising. To opt out, open the app's settings, tap "Your Privacy Choices" and turn on "Do not sell or share my personal information". The app then shows only non-personalized ads and stops sending ad-personalization signals to Firebase. You can also delete your advertising ID in Android settings (Settings > Privacy > Ads). Because the app has no accounts, we cannot apply an opt-out sent by email to your device, but you can email info@gedfree.com and we will help you do it. The website has no ads, does not sell or share personal information, and treats a Global Privacy Control signal as an opt-out.
- Do Not Track and tracking by others: we do not track you across other websites or apps, so the website does not change its behavior when your browser sends a "Do Not Track" signal; we treat a Global Privacy Control signal as a request to opt out of sale and sharing. In the app, Google (AdMob and Firebase) may collect information about your activity over time and across other apps and websites when personalized ads or usage statistics are on; you can turn this off under "Your Privacy Choices". On the website, embedded YouTube or Vimeo videos may let those services collect information about you as described in their own policies.
- How to make a request: email info@gedfree.com. An authorized agent may make a request for you. We may ask for information to confirm the request comes from you.
- Appeals: if we decline your request, in whole or in part, you can appeal by emailing info@gedfree.com with the subject "Privacy appeal". We will tell you in writing what we decided on your appeal, and why, within 45 days. If we deny your appeal, you can file a complaint with your state Attorney General.
10. Children
GED Free is for adults and older teens preparing for the GED test. It is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, email us and we will delete it.
11. Security
All connections use HTTPS. The verification server only accepts requests from the app and stores no learning data. No system is perfectly secure, but we keep the data we hold to a minimum.
12. Changes
We update this policy when the app, the website or the law changes. The version on this page applies; the date at the top shows when it last changed.