Privacy Policy

Data we collect

• Account data: your email address, used for sign-in (via Supabase Auth) and support.
• Learning data: the questions you answer, your scores, streaks, progress through skills and guides, and your coin-ledger balance and transactions.
• Subscription data: your plan status (free or Premium), trial state, and renewal dates.
• AI tutor inputs: the questions you type into the AI Tutor.
• Support data: anything you email us, including pass-guarantee claim materials (e.g. score reports).

Who processes your data

• Supabase hosts our database and authentication. Your email and learning data live in Supabase-managed infrastructure.
• Stripe processes web payments. Apple processes iOS In-App Purchases. We never see or store your full card number — only your subscription status and a payment-provider customer ID.
• OpenRouter processes AI Tutor requests: the question you ask is sent to OpenRouter to generate an answer. Do not include other people’s personal or health information in tutor questions.
• Cloudflare serves the site and provides privacy-friendly, cookieless web analytics (see Cookies below).

Cookies & analytics

We use Cloudflare Web Analytics, a lightweight beacon that collects aggregate, anonymized page-view metrics without tracking cookies and without identifying individual visitors. Authentication cookies/local storage are used by Supabase to keep you signed in. We do not run advertising trackers or third-party marketing pixels.

Retention & deletion

We keep your account and learning data while your account is active so your progress, streaks, and coins persist across devices. Subscription records are retained as required for accounting and tax purposes.

You can request deletion of your account and associated personal data at any time by emailing [email protected] from your account email. We delete or anonymize personal data within 30 days, except records we must keep for legal or accounting reasons.

Security & children

Data is transmitted over HTTPS and stored with access controls. No system is perfectly secure, but we limit collection to what the product needs. The service is not directed at children under 13 and we do not knowingly collect their data.

Changes to this policy

If we change this policy, we will update the effective date above and, for material changes, notify active subscribers by email.