Authentication is handled by Supabase Auth. We do not store your password. Supabase processes login and account recovery on our behalf.
We store only what we need to deliver the learning experience: course enrollment, practice sessions, question progress, and optional profile metadata (email and display name).
Access is protected by row-level security (RLS) rules in the database. Your data is only visible to you, except where administrative access is required to manage course content.
You can delete your account at any time from the Progress page. This removes your account and associated data from our systems.
For privacy requests, contact: privacy@yourdomain.com. Replace this with your actual support email before production.
We will update this policy as our product evolves. Any material changes will be communicated in-app.