Privacy Policy

Last updated: February 17, 2026

What we collect

When you create an account, we collect your email address and optionally your name. During onboarding, we ask about your build goals to personalize your learning path. As you use AI Solo, we track lesson progress, quiz scores, and streak data to show your dashboard.

AI tutor conversations

When you use the AI tutor, your messages are sent to OpenAI (gpt-4o-mini) to generate responses. We do not store conversation history on our servers — conversations exist only in your browser session. OpenAI's API data usage policy applies to these interactions.

How we use your data

To provide and personalize your learning experience
To track your progress and streaks
To send transactional emails (welcome, milestones, streak reminders)
To process payments via Stripe

We do not sell your data. We do not run ads. We do not share your information with third parties except as needed to operate the service (Supabase for auth/database, Stripe for payments, OpenAI for the tutor, Gmail SMTP for emails).

Payments

Payments are processed by Stripe. We never see or store your credit card number. Stripe's privacy policy governs payment data.

Cookies

We use essential cookies for authentication (Supabase session). We use Vercel Analytics for anonymous page view data. We do not use tracking cookies or advertising pixels.

Data retention

We retain your data for the following periods:

Account data — Retained while your account is active, plus 30 days after deletion request
AI tutor conversations — Retained for 90 days for service improvement, then deleted
Payment records — Retained as required by tax and financial regulations (typically 7 years)
Usage analytics — Aggregated and anonymized after 12 months
Email preferences — Retained until account deletion

Your rights (GDPR)

If you're in the European Economic Area, you have the following rights:

Right to access — Request a copy of your personal data
Right to rectification — Correct inaccurate personal data
Right to erasure — Request deletion of your account and data (completed within 30 days)
Right to restrict processing — Limit how we use your data
Right to data portability — Receive your data in a structured, machine-readable format
Right to object — Object to processing based on legitimate interests
Right to lodge a complaint — Contact your local data protection authority

Legal basis for processing: We process your data based on (1) consent for marketing emails, (2) contract performance for service delivery, and (3) legitimate interest for analytics and service improvement.

Data Protection Officer: Contact support@aiblitz.ai with any privacy concerns or to exercise your rights.

California residents (CCPA/CPRA)

If you're a California resident, you have the following rights:

Right to know — Request disclosure of personal information we collect, use, and share
Right to delete — Request deletion of your personal information
Right to opt-out of sale — We do NOT sell your personal information
Right to non-discrimination — We will not discriminate against you for exercising your rights

Categories of personal information collected:

Identifiers (email address, name)
Commercial information (subscription plan, payment history)
Internet activity (lesson progress, quiz scores, page views)
Inferences (learning path recommendations based on your goals)

To exercise these rights, email support@aiblitz.ai with your request. We will respond within 45 days.

Changes

We may update this policy. Changes will be posted on this page with an updated date.

Contact

Questions? Email support@aiblitz.ai