Privacy Policy

1. Information We Collect

Account data: When you create an account, we collect your email address, display name, and avatar URL from your authentication provider (GitHub or Google).

Usage data: We collect information about your learning progress, including lessons completed, exercise scores, and hints used.

Analytics data: When configured, we use privacy-focused analytics tools (PostHog and Plausible) to understand how the platform is used. These services are only active when explicitly enabled by our team. We do not sell your data to third parties.

2. How We Use Your Information

We use your information to: (a) provide and improve the Service; (b) track your learning progress; (c) process payments; (d) send transactional emails (account verification, purchase receipts); (e) analyze platform usage to improve the learning experience.

3. Data Storage & Security

Your data is stored in Supabase (PostgreSQL) with row-level security policies. Authentication tokens are handled securely via industry-standard OAuth 2.0 / PKCE flows. All data transmission uses TLS encryption.

4. Third-Party Services

We use the following third-party services:

• Supabase — Authentication and database
• Stripe — Payment processing
• PostHog — Product analytics (only active when configured; GDPR-compliant)
• Plausible — Marketing analytics (cookie-free, only active when configured)
• Vercel — Hosting and deployment

5. Cookies

We use essential cookies for authentication session management. When PostHog analytics is active, analytics cookies are only set with your explicit consent via our cookie banner. Plausible does not use cookies.

6. Your Rights (GDPR / CCPA)

You have the right to:

• Access and export your personal data
• Request correction of inaccurate data
• Request deletion of your account and data
• Opt out of non-essential analytics
• Withdraw consent at any time

To exercise these rights, email privacy@tensorcraft.app.

7. Data Retention

We retain your account data and learning progress for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Anonymized analytics data may be retained indefinitely.

8. Children's Privacy

Tensorcraft is not intended for users under the age of 16. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email. The "Last updated" date at the top reflects the most recent revision.

10. Contact

Questions about privacy? Contact our data protection team at privacy@tensorcraft.app.