Privacy Policy

Data we collect

We collect the following categories of data when you use LearnZo:

• —Account information — your name, email address, and password (stored only as a secure hash). If you sign in with Google or GitHub, we receive your name, email address, and avatar from that provider instead.
• —Profile data — your username, avatar, bio, and any optional links (GitHub, X/Twitter, personal website) you choose to add.
• —Learning activity — lessons completed, XP earned, current and longest streak, hints used, exercise code you write, and capstone project submissions.
• —Community content — forum posts and replies, lesson questions, and reviews you submit.
• —Certificates — your name, the course title, and the completion date, as shown on the PDF certificate.
• —Security data — if you enable them: two-factor authentication (TOTP) secrets and passkey (WebAuthn) credentials. These are used solely to verify sign-ins.
• —Billing information — payments are processed by Stripe; we store only your Stripe customer reference and purchase history. We never see or store your card number.
• —Communications — any messages you send us via email or support channels.

How we use your data

We use your data to operate LearnZo: delivering lessons, running your code, saving your progress, and powering gamification (XP, streaks, badges, and titles). We also use it to process payments, send transactional email (such as a welcome message and purchase receipts), respond to support requests, and keep the platform safe through rate limiting and moderation.

We do not sell your personal data. We do not use it for third-party advertising. We do not run analytics trackers.

What is publicly visible

Some information is public by design, so other learners can find and recognise you:

• —Your public profile (learn-zo.com/u/your-username) shows your name, username, avatar, bio, optional links, XP, level, streak, badges, completed courses, and join date.
• —Forum posts, replies, and lesson questions are visible to other signed-in users, together with your name and avatar.
• —Reviews you submit may be shown on our homepage with your first name and avatar after approval.

Your email address, billing details, and security settings are never public.

AI features

When you request an AI hint on an exercise, we send your exercise code (truncated) and the type of error to Anthropic, whose Claude model generates the hint. This happens only when you actively ask for a hint — never in the background. Anthropic processes this data as our service provider and does not use API data to train its models. Your code is not stored by us beyond what is needed to show you the hint.

Code execution

Code you run in lessons is executed in an isolated sandbox on LearnZo's own infrastructure. It is not sent to any third-party execution service, and it is discarded after producing your output.

Who we share data with

We share data only with the service providers required to run the platform, each bound to process it solely on our instructions:

• —Supabase — database, authentication, and file storage.
• —Stripe — payment processing and receipts.
• —Anthropic — AI hint generation (only the code you ask a hint for).
• —Resend — transactional email delivery.
• —Vercel — application hosting.

Beyond these processors, we disclose personal data only if required by law.

Legal bases

Where the GDPR applies, we process your data on the following bases: performance of our contract with you (providing the platform you signed up for), our legitimate interest in keeping the service secure and improving it, legal obligations (such as tax records for purchases), and your consent where we ask for it explicitly.

Data retention & deletion

We keep your personal data for as long as your account exists. You can delete your account yourself at any time from Settings → Danger zone. Deletion removes your profile, learning progress, and community content association; we complete removal of remaining personal data within 30 days.

Purchase records are retained for as long as tax law requires, even after account deletion.

Your rights

Depending on your location, you have the following rights over your personal data:

• —Access — request a copy of the personal data we hold about you.
• —Rectification — correct inaccurate or incomplete data (most profile data you can edit yourself in Settings).
• —Erasure — delete your account yourself in Settings, or ask us to do it for you.
• —Portability — receive your data in a structured, machine-readable format.
• —Objection & restriction — object to or restrict certain processing.
• —Complaint — lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@learn-zo.com. We respond within 30 days.

Security

All traffic is encrypted with TLS. Passwords are stored only as secure hashes. Sensitive columns are protected server-side so they cannot be modified from the browser, and admin actions are logged. You can further protect your account with two-factor authentication and passkeys in Settings. No system is perfectly secure, but we treat your data as if it were our own.

Children

LearnZo is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has created an account, contact us and we will remove it.

Cookies

We use only essential cookies — the ones that keep you signed in. No analytics, no advertising, no cross-site tracking. Full details are in our Cookie Policy.

Changes to this policy

We may update this Privacy Policy as the platform evolves. When we do, we update the date at the top of this page, and for significant changes we will notify you by email where possible. Continued use of LearnZo after changes take effect constitutes acceptance of the updated policy.

Contact

Questions or concerns about your privacy? Contact us at support@learn-zo.com. For legal and privacy matters, the same address applies.