Privacy Policy

Information We Collect. We collect the following types of information about you:

(a) Information You Provide Us Directly. We may ask for certain information such as your name, email address, and other details when you register for an account or contact us. We also collect any messages you send us and information you provide.

Account and sign-in information. Password accounts use a stored password hash. If you choose Google sign-in when available, we use Google's account identifier and verified email information to connect that sign-in method to your account. Your Google name, photo, and email are not automatically published on a leaderboard. Authentication cookies and account security versions help verify sessions and revoke access after credential changes.

(b) Information We Collect Automatically. We collect certain information about your use of our services automatically, such as user activity, analytics data, and usage patterns. This helps us improve our services.

Practice and Daily Challenge records. We store the settings, dates, questions, submitted answers, timing, assistance state, and results needed for saved attempts, progress, daily eligibility, and result integrity. Guest attempts use a signed browser cookie and a pseudonymous guest identifier. Claiming an attempt after sign-in associates that attempt with the account you choose.

Security records. Sign-in records include the outcome, authentication method, timestamp, request identifier, internal account matching information, and a validated client IP address when the configured ingress provides one. Passwords, reset links, OAuth tokens, and session cookies are not included in these structured sign-in records. Security records are used to investigate unauthorized access and abuse.

(c) Cookies and Similar Technologies. We use cookies and similar technologies to enhance your experience, remember your preferences, and track usage patterns. You can control or reset your cookies through your web browser settings.

Limited first-visit attribution. A 30-day cookie remembers a fixed source category (such as Google, email, or a direct visit), the site design variant, and the type of page where your visit began. It does not store a raw referrer, campaign parameter, or full URL. These categories can accompany sign-up, practice, and billing events, including Checkout metadata, so we can understand which entry points lead to use of the service. The original categories stay the same until the cookie expires or you clear it.

How We Use Your Information

We use the information we collect about you to:

• Provide and improve our services
• Customize the service for you
• Communicate with you
• Promote and drive engagement with our services
• Ensure customer happiness and support
• Maintain safety, security, fraud, and abuse measures
• Comply with legal obligations

Sharing Your Information

(a) With Third-Party Service Providers. We share your information with third-party service providers to help us provide and improve our services.

Payments and billing. Stripe Managed Payments and Link process purchases and payment details. We retain customer, subscription, transaction and event identifiers, plan status, relevant amounts, dates and access grants to provide access, reconcile payments and handle cancellation. Card details are entered with the payment provider. Billing and receipt messages are separate from optional marketing communications.

Public results. Public Daily Challenge participation is optional. If you opt in, your chosen display name and eligible result can appear on the board. Your email and private practice history are not shown there. Changing public visibility does not require deleting your account.

(b) Business Transfers. We may share or transfer your information in connection with any merger, sale, or reorganization of our business.

(c) Legal Requirements. We may disclose your information to comply with legal obligations or to protect our rights and safety.

How We Transfer, Store, and Protect Your Data

Your information may be stored and processed in various countries where we or our service providers operate. We take steps to ensure your information is protected according to this policy and applicable laws.

Keeping Your Information Safe

We use industry-standard measures to protect your information. However, we cannot guarantee absolute security. You are responsible for maintaining the secrecy of your password and account information.

Your Choices About Your Information

You have control over your account information and settings. You can update your preferences, request access, correction, or deletion of your data by contacting us.

Settings provides an export of account data and server-saved practice, lesson, Daily Challenge and membership records. Practice saved only on your device is not included in that export. Settings also provides session revocation, billing management and account deletion. Deletion requires fresh identity proof and first stops recurring charges. If payment-provider or other required cleanup fails, deletion remains pending and you can retry. Public visibility and personal account information are removed or anonymized when deletion completes; records needed for financial reconciliation and legal obligations may be retained.

How Long We Keep Your Information

We retain your information for as long as necessary to provide our services and comply with legal obligations.

Links to Other Websites and Services

We are not responsible for the practices of websites or services linked to or from our services. Your interaction with these third parties is subject to their own policies.

Changes to This Policy

We may update this policy from time to time. We will notify you of any material changes by posting the new policy on our website or via email.

How to Contact Us

If you have any questions or concerns about this Privacy Policy or our practices, please contact us.