Privacy Policy

1.1 Authentication Information

When you sign in through third-party providers, we collect:

• Third-party authentication provider: Name, email address, profile picture
• Account identifiers: Unique provider IDs for account linking
• Authentication tokens: Secure tokens for maintaining sessions

1.2 Learning Progress Data

To track your educational progress, we store:

• Game scores and completion rates
• Learning streaks and achievement unlocks
• Time spent on different activities
• Experience points (XP) and level progression
• Lesson and category preferences
• Difficulty settings and language preferences

1.3 Usage Analytics

We may collect anonymized data about:

• Feature usage patterns
• Game performance metrics
• Session duration and frequency
• Device and browser information (non-identifying)

1.4 Billing Information (Premium users only)

If you purchase a Premium subscription or Streak Tokens, we collect and store:

• Customer reference ID: A reference identifier assigned by the payment provider that processed your purchase.
• Subscription state: Plan type (monthly or annual), status (active, past due, cancelled), and renewal date.
• Token balance: Current Streak Token balance and a ledger of grant and consume events.

We do not store card numbers, CVV codes, or full payment details. All sensitive payment data is held exclusively by the payment provider that processed your purchase (see Section 4.2 for the providers we work with and links to their privacy policies).

2.1 Account Management

• Creating and maintaining your user account
• Authenticating your identity for secure access
• Providing customer support when needed
• Sending important service updates

2.2 Service Improvement

• Analyzing usage patterns to improve features
• Identifying and fixing technical issues
• Developing new educational content
• Optimizing game mechanics and difficulty curves

3.1 Database Storage

Your data is stored securely using:

• Cloud Database: Enterprise-grade security and reliability
• Encryption: Data encrypted in transit and at rest
• Access Controls: Strict authentication and authorization
• Regular Backups: Automated backup systems for data protection

3.2 Security Measures

• Secure HTTP (HTTPS) for all communications
• JSON Web Tokens (JWT) for session management
• Regular security updates and monitoring
• Limited access to data on a need-to-know basis

4.1 Data Sharing

Your personal data is only shared with the trusted service providers listed below, solely to operate the service. We do not share your information with any other third parties, except when required by law.

4.2 Service Providers

We work with the following trusted third-party services:

• Authentication providers (Google, Apple, Discord): For secure sign-in. They receive only the data necessary to verify your identity.
• MongoDB Atlas: Cloud database provider for secure data storage and management.
• Payment providers: Premium subscriptions and Streak Token purchases are handled by a payment provider depending on where you purchase — Stripe, Inc. for purchases made on the web (see the Stripe Privacy Policy), or Apple for purchases made through the iOS app (see Apple's Privacy Policy). The provider receives the details needed to process your payment; we never see your full payment details.
• Vercel: Hosting platform. Request logs may include IP addresses and user-agent strings for operational purposes.

5.1 Data Access and Control

• Access: View all personal data we have about you
• Deletion: Permanently delete your account and all associated data
• Export: Download your learning progress and statistics

5.2 Account Deletion

You can permanently delete your account and all associated data at any time through your dashboard settings. This action is irreversible and will immediately remove:

• Your profile information and authentication data
• All learning progress, scores, and achievements
• Your account history and preferences

Data is removed within 30 days, except where retention is required by law.

We use minimal data storage:

• Session Cookies: For maintaining your login status
• Local Storage: For temporary game state and preferences
• Analytics: Google Analytics with consent mode for usage insights

Your data may be stored and processed in different countries where our service providers operate. We ensure appropriate safeguards are in place to protect your information according to applicable privacy laws.

We retain your data for as long as:

• Your account remains active
• You continue to use our services
• Required by law or legitimate business interests
• Necessary for dispute resolution or legal proceedings

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated "Last Modified" date. Your continued use of the service after changes constitutes acceptance.

If you have questions about this Privacy Policy, please use the contact form on our About page.