Privacy Policy
What we collect
- Account data: email address, optional display name, and a salted password hash (we never store your password itself).
- Training progress: your drill answers, stats, settings and review queue, so they sync across devices.
- Session data: a session cookie, plus the IP address and browser user-agent tied to each session, used for security and rate limiting.
- Waitlist: your email if you join the mailing list.
- Billing (when launched): handled by our payment processor (e.g. Stripe). We store a customer ID and subscription status, never full card numbers.
How we use it
To run your account, sync your progress, send service emails (like password resets) and, if you opted in, occasional product emails. We don't sell personal data.
Cookies
One strictly necessary, httpOnly session cookie for login. [Analytics, if any, to be listed.]
Service providers
[To list: hosting (e.g. Vercel), database (e.g. Neon), email delivery (e.g. Resend), payments (e.g. Stripe).]
Retention and deletion
You can ask us to delete your account and data at any time. [Retention periods to be finalised.]
Your rights
[GDPR/CCPA language to be drafted by counsel, if applicable.]
Contact
[Contact email to be added.]