Legal

Privacy Policy

Last updated: [SEED, set on launch]

[SEED] Replace this with a real Privacy Policy reviewed by counsel. Below is a plain-language summary of our intent, not a legal document.

What we collect

Account email, OAuth identity (if you sign in with Google or Apple), study activity (questions answered, flashcards reviewed), and billing metadata required by Stripe.

What we don't do

We do not sell your data. We do not run ads. Analytics are opt-in only and use a privacy-respecting provider (PostHog).

Your rights

Export, delete, or rectify your data at any time from your account page. EU/UK users: you have full GDPR rights, email privacy@tieronedefense.com to exercise them.

Subprocessors

Supabase (database hosting), Vercel (web hosting), Stripe (billing), Resend (transactional email), Anthropic (AI tutor responses), PostHog (analytics, opt-in only).