Privacy Policy

1. Information We Collect

We collect only the minimum information necessary to provide our services:

• Account information: email address, display name, and password (stored securely in hashed form)
• Usage and progress data: lessons completed, scores, learning progress (tied to your account)
• Technical and device information: IP address, browser type, device details, approximate location (from IP), pages visited, and time spent (via Google Analytics and our internal analytics)

We do not collect phone numbers, precise geolocation, payment details (platform is 100% free), user-generated content, or sensitive personal data.

2. How We Use Your Information

We use your data solely to:

• Create and manage your account and provide access to learning tools
• Track and display your learning progress and personalize your experience
• Analyze platform usage to improve content, features, and performance
• Maintain security, prevent abuse, and comply with legal obligations

We do not use your data for automated decisions with legal effects or for marketing emails (unless you subscribe separately in the future).

3. Data Sharing

We do not sell your personal information. We share data only with:

• Trusted service providers acting on our behalf (data processors): Firebase (for authentication and data storage) and Google Analytics (for usage insights)
• Authorities if required by law, to protect rights/safety, or in case of business transfer (merger/sale)

These providers may process data in the United States or other countries. We rely on appropriate safeguards (e.g., Google's standard contractual clauses and Data Privacy Framework where applicable).

4. Cookies & Tracking

We use essential cookies for site functionality (e.g., keeping you logged in). We also use Google Analytics cookies to understand how visitors use the platform and improve it. Currently, we do not use advertising cookies or third-party ad trackers. When we implement ads (e.g., Google AdSense) in the future, we will update this policy and provide relevant opt-out information.

5. Data Retention & Deletion

We keep your account data while your account is active. Analytics data is retained according to Google Analytics defaults (typically up to 26 months) or our internal needs for security and improvement. Upon request, we will delete your account and associated personal data.

To request deletion, email us at support@summage.org or message us via Telegram with your registered email. Deletion is handled manually and may take a few days.

6. Children's Privacy

Our platform welcomes learners of all ages, including children. However, we do not knowingly collect personal information from children under 13 without appropriate parental consent as required by laws such as COPPA (in the US). If you are a parent/guardian and believe we have collected data from your child under 13, contact us immediately at support@summage.org. We will investigate and delete such data if confirmed.

We recommend parental supervision for young learners. Note: Email is considered personal information under children's privacy laws.

7. Data Security

We use reasonable security measures, including HTTPS encryption, secure password hashing, and Firebase's built-in security features. However, no online service is 100% secure, and we cannot guarantee absolute protection against all risks.

8. Your Rights

Depending on your location (e.g., GDPR for EU users), you may have rights to access, correct, delete, or restrict your data. To exercise these, contact us at support@summage.org with your request and registered email. We will respond within applicable legal timeframes.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted here with a new "Last updated" date. For significant changes, we will notify you via email or a platform announcement.