Privacy policy
Last updated: [date]
TechGradify ("we", "us") is operated by [Company name], [registered address] ("[Company name]"). We are the data controller for the personal data described here. Questions or requests: [privacy@yourdomain.com].
What we collect
| Data | Why | Kept for |
|---|---|---|
| Email address (and name/avatar if you sign in with GitHub or Google) | To create your account and sign you in | Until you delete your account |
| Profile and preferences — display name, timezone, daily goal, reminder settings | To run the product as you configure it | Until you delete your account |
| Learning activity — code you submit, test results, problems solved, XP, streaks, badges | To grade your work, track progress and show your dashboard | Until you delete your account |
| Billing details — handled by Stripe; we store only your Stripe customer ID and subscription status | To provide Pro | As required for tax and accounting (typically 6 years) |
| Push notification subscription (if you turn on reminders) | To send the reminders you asked for | Until you turn them off or delete your account |
| Basic server logs (IP address, browser, pages requested) | Security and debugging | Up to 30 days |
Your display name and weekly XP appear on the public leaderboard. You can change your display name in Settings at any time.
We do not sell your data or use it for advertising.
Legal bases (UK GDPR / EU GDPR)
- Contract — to provide the service you signed up for (account, grading, progress, Pro).
- Legitimate interests — keeping the service secure, preventing abuse and improving content.
- Consent — push notifications, and reminder emails (you can turn either off in Settings).
- Legal obligation — keeping billing records.
Who we share data with
We use trusted providers ("processors") who handle data on our behalf:
- Supabase — database and sign-in
- Stripe — payments (Stripe handles your card details; we never see them)
- Resend — sending emails
- Render — hosting the website
- jsDelivr — delivers the in-browser Python runtime and code editor (your browser requests these files directly, which shares your IP address with jsDelivr)
Some of these providers may process data outside the UK/EEA. Where they do, they rely on appropriate safeguards such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses. [Confirm each provider's region and safeguards.]
Cookies and browser storage
We use only what's needed to run TechGradify:
- Sign-in cookies (set by Supabase) keep you signed in.
- Local storage in your browser saves your in-progress code and any problems you solved before signing up, so they aren't lost. This stays on your device.
We don't use advertising or third-party analytics cookies. [If you add analytics later, update this section and add a consent banner where required.]
Your rights
You can ask us to access, correct, export or delete your data, or object to or restrict how we use it. Email [privacy@yourdomain.com] and we'll respond within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.
Deleting your account removes your profile, submissions and progress. Billing records we're legally required to keep are retained separately.
Children
TechGradify is not intended for children under [13/16]. We don't knowingly collect their data.
Security
Data is encrypted in transit, access is restricted, and submitted code is graded in an isolated sandbox. No system is perfectly secure, but we take reasonable steps to protect your information.
Changes
We'll update this page if our practices change, and tell you about significant changes by email or in the app.