Privacy Policy

1. Scope

This Privacy Policy applies to personal information processed by us, including on our mobile application and other online or offline offerings (collectively, the "Services").

2. Personal Information We Collect

The categories of personal information we collect depend on how you interact with our Services and the requirements of applicable law.

A. Information You Provide to Us Directly

Account Creation. When you create an account, we collect your email address or phone number through our authentication provider, Clerk. You may optionally provide your name.

Profile and Onboarding Information. To personalise your learning experience, we collect information you provide during onboarding and in your profile settings, including:

• Age range (e.g., "18–24," "25–34," "35–44," "45–54," "55+")
• Gender
• Employment status
• Professional role and industry
• Leadership style
• AI skill level, usage frequency, and confidence level
• Primary goals and attitudes toward AI (e.g., excitement level, concern level, urgency)
• Display name and profile photo (optional; uploaded from your photo library)

Purchases and Subscriptions. We collect information associated with your in-app subscription, including subscription tier, status, and purchase history. Payments are processed entirely through the Apple App Store or Google Play Store. We do not directly collect or store payment card information. Subscription management is handled by RevenueCat. For more information, please see RevenueCat's Privacy Policy.

Project Completion Feedback. After completing a project, we may collect optional feedback including estimated time taken, difficulty rating, confidence level, and platform used.

Your Communications with Us. When you contact us for support or otherwise communicate with us, we may collect your name, email address, and the content of your communications.

B. Information Collected Automatically

When you use our Services, we automatically collect information about your learning activity, including:

• Courses started, completed, and saved, with timestamps
• Individual cards, insights, and quizzes viewed or completed
• Interactive AI prompts you run within lessons
• Your position and progress within courses and chapters
• Projects you unlock, view, or complete
• Learning plan settings (active plan, target dates, daily time goals)
• Daily activity summaries (total time spent, cards viewed, quizzes completed, prompts run, etc.)

We also collect certain device and session information necessary to operate the Services, including unique identifiers used by our backend provider (Convex) and push notification tokens used to deliver notifications via Expo.

We do not use web cookies, pixel tags, web beacons, or third-party advertising or analytics trackers.

C. Information Collected from Other Sources

We may receive information about you from third-party services, such as authentication data from Clerk when you sign in, or subscription status data from RevenueCat.

3. How We Use Your Information

A. Provide Our Services

• Creating and managing your account
• Personalising course recommendations, learning plans, and content based on your profile, role, and goals
• Tracking and displaying your learning progress, streaks, and activity history
• Managing your subscription and providing access to premium features
• Sending push notifications you have consented to receive
• Enabling you to upload and display a profile photo
• Answering customer or technical support requests
• Communicating with you about your account and policy changes

B. Administrative Purposes

• Improving, upgrading, and developing our Services
• Measuring engagement and understanding how users interact with content
• Detecting security incidents and protecting against fraudulent or illegal activity
• Debugging and repairing errors in our Services
• Enforcing our agreements and policies
• Complying with our legal obligations

C. Other Purposes

De-identified and Aggregated Information. We may create de-identified or aggregated data (such as aggregate learning statistics) that cannot reasonably identify you, and use it for product analysis and improvement.

Consent. We may use personal information for other purposes clearly disclosed at the time of collection, or with your consent.

4. How We Disclose Your Information

A. Service Providers

We share personal information with third-party service providers that help us operate our Services. These providers are permitted to use your information only as directed by us and in accordance with this Privacy Policy. Our primary service providers include:

• Clerk — authentication and identity management
• Convex — database, backend infrastructure, and data storage
• RevenueCat — subscription management
• Expo — push notification delivery

B. Disclosures to Protect Us or Others

We may disclose your information if we believe in good faith that doing so is required or appropriate to: comply with law enforcement or legal process; protect your, our, or others' rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation of suspected or actual illegal activity.

C. Disclosure in the Event of Merger, Sale, or Other Asset Transfers

If we are involved in a merger, acquisition, financing, reorganisation, bankruptcy, or sale of assets, your information may be sold or transferred as part of such a transaction, as permitted by law and/or contract.

5. Your Privacy Choices and Rights

Privacy Choices

Push Notifications. We may send you push notifications with your consent. You may opt out at any time by changing the notification settings on your mobile device.

Photo Library Access. We request access to your photo library only when you choose to upload a profile photo. You may revoke this permission at any time through your device settings.

Account Deletion. You may request deletion of your account and associated personal information through your account settings or by contacting us at the address below.

Privacy Rights

In accordance with applicable law, you may have the right to:

• Access personal information we hold about you, including obtaining a copy and requesting a portable electronic copy
• Request Correction of inaccurate or incomplete personal information
• Request Deletion of your personal information
• Request Restriction of or Object to our processing of your personal information
• Withdraw your Consent to our processing of your personal information

To exercise any of these rights, please contact us as set forth in "Contact Us" below.

6. Security of Your Information

We take reasonable steps to protect your personal information against unauthorised access, disclosure, alteration, or destruction. We use industry-standard measures, including encrypted authentication through Clerk and secure cloud storage through Convex. However, no system is 100% secure, and we cannot guarantee absolute security of your information.

If we learn of a security breach, we may notify you by posting a notice on our Services or by sending an email to you.

7. International Data Transfers

All information processed by us may be transferred, processed, and stored anywhere in the world, including the United States or other countries that may have data protection laws different from those where you live. We endeavour to safeguard your information consistent with the requirements of applicable laws.

8. Retention of Personal Information

We store your personal information for as long as your account is active or as necessary to provide our Services, resolve disputes, establish legal defences, enforce our agreements, and comply with applicable laws. When you delete your account, we will delete or anonymise your personal information unless retention is required by law.

9. Supplemental Notice for California Residents

This section applies to our processing of personal information subject to the California Consumer Privacy Act ("CCPA").

Sales of Personal Information. We do not "sell" personal information, nor do we have actual knowledge of any "sale" of personal information of minors under 16 years of age.

Non-Discrimination. You have the right not to receive discriminatory treatment for exercising your CCPA rights.

Authorised Agent. You may designate an authorised agent to make requests on your behalf by contacting us as set forth below and providing written authorisation signed by you and your designated agent.

Verification. We will verify your identity before fulfilling your request by confirming information associated with your account.

10. Supplemental Notice for Nevada Residents

Nevada residents have the right to opt out of the sale of certain personal information to third parties. We do not currently sell your personal information as defined under Nevada Revised Statutes Chapter 603A. If you have questions, please contact us as set forth below.

11. Children's Information

The Services are not directed to children under 13 (or other age as required by local law), and we do not knowingly collect personal information from children under 13 without verifiable parental consent.

If you are a parent or guardian and believe your child has provided personal information to us without your consent, please contact us as described in "Contact Us" below. If we become aware that a child has provided us with personal information in violation of applicable law, we will delete any personal information we have collected, unless we have a legal obligation to keep it, and terminate the child's account.

12. Other Provisions

Third-Party Services. Our Services integrate with third-party services including Clerk, Convex, RevenueCat, and Expo. These services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third parties.

Supervisory Authority. If you are located in the European Economic Area, Switzerland, the United Kingdom, or Brazil, you have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.

Changes to this Privacy Policy. We may revise this Privacy Policy from time to time. If there are any material changes, we will notify you as required by applicable law. Your continued use of our Services after the new Privacy Policy takes effect constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about our privacy practices or this Privacy Policy, or to exercise your rights as detailed in this Privacy Policy, please contact us at: