noob→topro← Back to noobtopro
Draft template. This document is a starting point and has not yet been reviewed by legal counsel. Bracketed placeholders must be completed before launch. It is not legal advice.

Privacy Policy

Last updated: [Effective Date]

This Privacy Policy explains how [Company Legal Name]("noobtopro", "we", "us") collects, uses, and protects information when you use the noobtopro website and application (the "Service"). By using the Service you agree to this Policy.

1. Information we collect

  • Account information. If you sign in with Google, we receive your name, email address, and profile picture from your Google account.
  • Learning content you submit. The problems you answer, your written reasoning, and any photos of your handwritten work that you upload for grading.
  • Progress data. Your scores, per-subject ranks, reasoning rubrics, attempt history, and concept mastery.
  • Billing data. If you subscribe to Pro, payment is processed by our payment provider (Polar). We receive your subscription status and identifiers; we do not receive or store your full card details.
  • Technical/usage data.Aggregate, privacy-friendly analytics about page views and performance (see "Cookies and analytics" below).

As a guest (not signed in), your progress is stored only in your own browser's local storage and is not sent to our servers except when an answer is submitted for grading.

2. How we use your information

  • To provide the Service: grade your reasoning, compute your rank, and save your progress.
  • To operate the anonymous leaderboard (which shows rank distribution and your position, never names or emails).
  • To process and manage your Pro subscription.
  • To maintain security, prevent abuse, and debug problems.
  • To improve the Service.

3. Third-party processors

We share data with the following processors only as needed to run the Service:

  • Supabase — authentication and database (stores your account and progress).
  • Groq — the AI models that grade your work. The text of your answer, the question, and any photo of your work you upload are sent to Groq to produce a grade. Do not include personal or sensitive information in your answers.
  • Vercel — hosting and privacy-friendly analytics.
  • Polar — payment processing and subscription management (Merchant of Record).

We do not sell your personal information.

4. Cookies and analytics

We use Vercel Web Analytics and Vercel Speed Insights, which are designed to be privacy-friendly: they do not use advertising cookies and do not collect personally identifiable information for cross-site tracking. We use a small amount of browser storage strictly necessary to keep you signed in (via Supabase) and to remember preferences such as your theme. We do not use third-party advertising trackers.

5. Data retention

We keep your account and progress data while your account is active. You can delete your progress at any time from Dashboard → Reset my progress, and you may request full account deletion (see "Your rights"). We may retain limited billing records where required by law (for example, tax and accounting obligations) even after account deletion.

6. Your rights

Depending on where you live (for example, under the EU/UK GDPR or the CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. You can:

  • Delete your scores and history in-app via Dashboard → Reset my progress.
  • Permanently delete your entire account and all associated data (and cancel any Pro subscription) in-app via Dashboard → Delete account, or by contacting us at [privacy@your-domain].

We will respond to verified requests within the timeframe required by applicable law.

7. Children's privacy

noobtopro is intended for users aged 13 and older. Users under the age of digital consent in their jurisdiction may use the Service only with the involvement and consent of a parent or guardian. We ask for age at sign-up and do not knowingly collect personal information from a child under 13 without verifiable parental consent. If you believe a child has provided us personal information without such consent, contact us at [privacy@your-domain] and we will delete it.

8. Security

Data is encrypted in transit. Access to your account data is restricted to you through row-level security, and sensitive operations run server-side. No method of transmission or storage is perfectly secure, but we work to protect your information.

9. International transfers

Our processors may store and process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards for such transfers.

10. Changes to this Policy

We may update this Policy from time to time. We will update the "Last updated" date and, for material changes, provide a more prominent notice.

11. Contact

Questions about this Policy or your data: [privacy@your-domain], [Company Legal Name], [Registered Address].