Privacy Policy

1. Data we collect

Account data: email, username, hashed password, OAuth identifier (if you sign in with Google).

Usage data: lessons completed, XP, streak, Bug Hunt solves, flashcard reviews. We use this to power gamification.

Payment data: handled by Stripe — we never see your card number. We store a Stripe customer ID and subscription status.

Analytics: aggregated page views and events (via Google Analytics 4) to understand which features are useful.

2. How we use it

Provide the Service (track progress, unlock content, show your level and streak).

Process payments and manage your subscription.

Send transactional emails (welcome, receipts, password reset, re-engagement). We do not send marketing without opt-in.

Improve the platform — fixing bugs, prioritizing new content, debugging issues.

3. Who we share with

Stripe (payments), Google (analytics, sign-in), Supabase / Lovable Cloud (database and hosting), our AI tutor provider (only the question you submit). These processors are bound by their own privacy terms.

We do not sell or rent personal data. Period.

4. Cookies

We use cookies and local storage to keep you signed in, remember your language preference, and run analytics. You can clear them in your browser settings at any time.

5. Your rights

You can access, correct, export or delete your data at any time. To request deletion of your account and all related data, email luk14236@gmail.com. We honor GDPR and LGPD requests.

6. Data retention

We keep account and progress data while your account is active. If you delete your account, we remove personal data within 30 days, except for records we must keep for tax or legal reasons (e.g. invoices).

7. Security

Passwords are hashed. All traffic is encrypted in transit (HTTPS). Database access uses Row-Level Security so only you can see your data. We still recommend a strong, unique password and 2FA on your Google account if you sign in with Google.

8. Contact

Privacy questions or data requests? Email luk14236@gmail.com.