Privacy Policy

1. Data Controller Information

2. Information We Collect

2.1 Personal Information (When You Register)

• Name and email address (via Replit authentication)
• Profile information you choose to provide
• Typing practice preferences and settings

2.2 Usage Data (Automatically Collected)

• Typing performance metrics (WPM, accuracy, session duration)
• Subject preferences and lesson progress
• Device information and browser type
• Anonymous analytics data for platform improvement
• IP address (anonymized for security and analytics)

2.3 Cookies and Local Storage

• Essential Cookies: Session management, user preferences, authentication
• Analytics Cookies: Usage patterns, performance tracking (with consent)
• Preference Cookies: Theme selections, language settings

3. Legal Basis for Processing (GDPR)

• Legitimate Interest: Platform functionality, security, anonymous analytics
• Consent: Marketing communications, non-essential analytics
• Contract Performance: Providing educational services you request
• Legal Obligation: Compliance with applicable laws

4. How We Use Your Information

• Provide personalized typing practice and education
• Track your progress and achievements
• Improve platform functionality and user experience
• Ensure platform security and prevent abuse
• Communicate important service updates
• Generate anonymous usage statistics

5. Data Sharing and Disclosure

We do not sell your personal information.

We may share data only in these limited circumstances:

• Service Providers: Replit (authentication), hosting providers (anonymized data only)
• Legal Requirements: When required by law or to protect rights and safety
• Anonymous Analytics: Aggregated, non-identifiable usage statistics

6. Data Retention

• Active Accounts: Data retained while account is active
• Inactive Accounts: Deleted after 3 years of inactivity
• Anonymous Analytics: Retained for 2 years maximum
• Cookies: Expire based on type (session to 1 year)

7. Your Rights (Global)

7.1 EU/UK Users (GDPR Rights)

• Access: Request copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Delete your account and data
• Portability: Export your data
• Restriction: Limit processing of your data
• Objection: Object to data processing
• Withdraw Consent: For consent-based processing

7.2 California Users (CCPA Rights)

• Know: Categories of personal information collected
• Delete: Request deletion of personal information
• Opt-Out: Sale of personal information (we don't sell data)
• Non-Discrimination: Equal service regardless of privacy choices

7.3 Canadian Users (PIPEDA Rights)

• Access to personal information we hold about you
• Correction of inaccurate personal information
• Withdrawal of consent for non-essential processing

7.4 Australian Users (Privacy Act Rights)

• Access and correction of personal information
• Complaints process for privacy concerns
• Notification of data breaches affecting you

8. International Data Transfers

Your data may be processed in countries outside your residence. We ensure appropriate safeguards:

• EU Standard Contractual Clauses for EU data
• Adequacy decisions where available
• Encryption and security measures during transfer

9. Children's Privacy

Our service is intended for users 13 years and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, please contact us immediately.

10. Data Security

• Industry-standard encryption (HTTPS/TLS)
• Secure authentication via Replit
• Regular security audits and updates
• Access controls and monitoring
• Data breach notification procedures

11. Contact Us

For privacy-related questions, concerns, or to exercise your rights:

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via:

• Prominent notice on our website
• Email notification to registered users
• Updated "Last Modified" date above

13. Regulatory Authorities

You have the right to lodge complaints with relevant data protection authorities:

• EU: Your local Data Protection Authority
• UK: Information Commissioner's Office (ICO)
• California: California Attorney General
• Canada: Office of the Privacy Commissioner
• Australia: Office of the Australian Information Commissioner