Privacy Policy

Last updated: April 2026

1. Information We Collect

We collect information you provide directly (e.g., email address when you create an account) and information generated by your use of the service (practice attempt records, performance data, and session metadata).

2. How We Use Your Information

We use the information we collect to:

3. Data Storage & Security

Your data is stored in Supabase-hosted PostgreSQL databases protected by Row-Level Security (RLS). All data in transit is encrypted via TLS 1.2+. We do not sell your personal data.

4. Cookies

We use session cookies (via Supabase Auth) necessary for authentication. We do not use third-party advertising cookies.

5. Third-Party Services

We use Stripe for payment processing, Supabase for authentication and data storage, and Vercel for hosting. Each has its own privacy policy.

6. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting us at privacy@koydo.app.

7. Children

Our service is available to users of all ages. Users under 13 require parental consent. We do not knowingly collect data from children under 13 without parental consent.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or a prominent notice in the application.

9. Contact

Questions? Email us at privacy@koydo.app.