Privacy Policy

This is a plain-language summary of how we handle your data, written to be readable rather than exhaustive. It reflects our current practices.

What we collect

Account email, OAuth identity (if you sign in with Google or Apple), study activity (questions answered, flashcards reviewed), and billing metadata required by Stripe.

What we don't do

We do not sell your data. We do not run ads. Analytics are opt-in only and use a privacy-respecting provider (PostHog).

Your rights

Export, delete, or rectify your data at any time from your account page. EU/UK users: you have full GDPR rights, email privacy@tieronedefense.com to exercise them.

Subprocessors

Supabase (database hosting), Vercel (web hosting), Stripe (billing), Resend (transactional email), Anthropic (AI tutor responses), PostHog (analytics, opt-in only).