Privacy Policy

1. Information We Collect

Account Information: Email address, display name, and authentication credentials when you create an account.

Learning Profile: Quiz responses, learning style, pace preference, experience level, and goals.

Usage Data: Learning plans created, modules completed, progress events, notes taken, and resources accessed.

Technical Data: Browser type, device type, IP address, and interaction logs necessary to provide the Service.

2. How We Use Your Information

• To create and personalize your learning plans
• To adapt content and recommendations to your learning style
• To track your progress and improve plan effectiveness
• To process payments for paid subscriptions
• To communicate with you about your account and the Service
• To improve and optimize the Service

3. Data Storage & Security

Your data is stored in Supabase (PostgreSQL) hosted on AWS. All data is encrypted in transit (TLS) and at rest. Row Level Security policies ensure users can only access their own data. We implement industry-standard security measures to protect your information.

4. Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication (data storage)
• OpenRouter: AI plan generation (receives topic and learning preferences, does not store your data)
• YouTube, Wikipedia, arXiv: Content resource APIs (we search these services, your personal data is not sent to them)
• Stripe: Payment processing (we do not store your credit card information)
• Cloudflare: DNS and CDN
• Vercel: Application hosting

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We share data only with service providers necessary to operate the Service, as described above.

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Export your data in a portable format
• Opt out of non-essential communications

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete all associated data within 30 days, except where retention is required by law.

8. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising trackers.

9. Children's Privacy

LearnCurve is not intended for children under 13. We do not knowingly collect data from children under 13. If we learn we have collected such data, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or in-app notification.

11. Contact

For privacy-related inquiries, contact us at privacy@learncurve.app.