Privacy Policy

1. What we store Account basics: email, optional name, birth date (age check), country, timezone, and settings like the daily-reminder opt-in. Learning records: your stage progress, self-view answers, plans, practice logs, reflections, and reports. Payment status: which plan is active - card details never touch our servers. 2. What we never do We don't sell your data. We don't run ads. We don't show your answers to other users. Self-view answers and practice logs exist so YOU can see your own path - they are never turned into public scores. 3. Who processes data for us Supabase (database, authentication, storage) · Vercel (hosting) · Resend (transactional email) · Lemon Squeezy (payments, as merchant of record) · Google (only if you choose Google sign-in). Each processor receives only what its job needs. 4. Emails We send account email (welcome, verification), a few gentle reminders about unfinished protocols, an optional daily practice reminder that is OFF unless you turn it on, and replies to your support messages. No spam ladders, no fake deadlines. 5. Under-18 learners Accounts require age 13+. Under-18 signups may leave a parent/guardian email; that address receives exactly one informational notice and is stored only for that record. 6. Cookies We use the cookies needed to keep you signed in. No third-party advertising cookies. 7. Your rights Ask through support (or info@tcplearn.com) and we will export your data as JSON or delete your account and its learner records. Deletion is real - append-only learning history included. 8. Retention Active accounts keep their records so your Living Report can be a history. Deleted accounts are purged from production systems within 30 days, allowing for backup rotation. 9. Changes If this policy changes in a way that matters, we tell you by email or in the app before it takes effect. Contact: info@tcplearn.com