A minimal-data approach.
We store account identity supplied by your OAuth provider, learning activity needed for progress, bookmarks, reports, and answers you choose to save. We do not sell learning data. Account deletion removes identity and learner records; required security events are retained only in de-identified form.
Operational privacy
Structured logs exclude access tokens, passwords, private answer text, and OAuth credentials. Production retention periods and a data-controller contact must be finalized before public deployment.