Privacy Policy

Information you provide directly:

• Name and email address (provided during sign-in via Google OAuth)
• Learning goals and preferences set during onboarding
• Code you write in the interactive editor
• Messages sent to the AI tutor (Aria)

Information collected automatically:

• Learning progress (lessons completed, exercises solved, quiz scores)
• XP, badges, and gamification data
• Session activity (pages visited, time spent)
• Device type and browser information (for analytics)
• IP address (for security and rate limiting)

We use the information we collect to:

• Provide, maintain, and improve the Platform
• Personalize your learning experience and AI tutor interactions
• Track and display your learning progress and achievements
• Send you notifications about your account or learning activity
• Ensure platform security and prevent abuse
• Analyze usage patterns to improve our content and features
• Comply with legal obligations

When you interact with our AI tutor (Aria), your messages and code are processed by AI language models to generate personalized responses. Specifically:

• Conversation history is stored to maintain context across your session
• Your learning profile (completed topics, strengths, weak areas) is built over time to improve personalization
• Code submitted for review is processed by AI and not stored beyond what is needed for the response
• We use Google's Gemini API to power AI features. Your data is subject to Google's data processing terms when processed by Gemini

We use Google OAuth for authentication. When you sign in with Google:

• We receive your name, email address, and Google profile ID
• We do not receive or store your Google password
• Your Google account data is governed by Google's Privacy Policy
• You can revoke our access to your Google account at any time via your Google Account settings

We do not sell your personal data. We may share your information with:

• Service providers: Third-party services that help us operate the Platform (hosting, analytics, AI APIs)
• Legal requirements: When required by law, court order, or governmental authority
• Business transfers: In connection with a merger, acquisition, or sale of assets

Leaderboard data (username and XP score) is visible to all authenticated users of the Platform.

We retain your personal data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data by contacting us at [email protected]. We will process deletion requests within 30 days.

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data in transit
• HTTP security headers (X-Frame-Options, X-Content-Type-Options, etc.)
• Rate limiting to prevent abuse
• Session cookies with HttpOnly and Secure flags
• Regular dependency security updates

No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

We use a single session cookie to maintain your authenticated state. This cookie is:

• HttpOnly (not accessible to JavaScript)
• Secure (only sent over HTTPS)
• SameSite=None (required for cross-origin OAuth flows)
• Valid for up to 1 year

We also use analytics cookies (via Umami) to understand how users interact with the Platform. Umami is privacy-focused and does not track personal data.

The Platform is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability (receive your data in a machine-readable format)

To exercise these rights, contact us at [email protected].

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date. Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us: