Privacy Policy

KumaDeck is run by [legal name of the business] ("we"), [address]. This policy explains what personal data we collect when you use KumaDeck, why, and your choices. Questions: [contact email].

What we collect

• Account details: your email address, a securely hashed password (we never see the password itself), and the display name you choose.
• Google sign-in (optional): your name, email address and profile photo from your Google account.
• Learning data: the lessons and reviews you complete, your answers' results, your level and your study settings.
• Payment status: if you subscribe, Stripe processes your payment. We store only your Stripe customer ID and subscription status. Your card details go to Stripe and never reach us.
• Technical data: standard server logs (IP address, browser, pages requested), kept for [30] days for security and troubleshooting.

Why we use it

• To run your account and your study schedule (performing our contract with you).
• To send account emails such as address confirmation and password resets.
• To take payments and manage your membership.
• To keep the service secure and fix problems (our legitimate interest).

We don't sell your data, and we don't use it for advertising.

Cookies

We only use cookies that the site needs to work: one keeps you signed in, and another protects forms against misuse. We don't use advertising or tracking cookies. If you join the weekly leaderboard, other learners see your display name, level and weekly points (never your email); you can leave it any time. To count visits we may use a privacy-friendly analytics service [Plausible / Umami: name it here, or delete this sentence] that sets no cookies and stores no personal data.

Services we rely on

• Stripe for payments: stripe.com/privacy
• Google for optional sign-in, and for web fonts (your browser requests fonts from Google's servers)
• [Email provider] for sending account emails
• [Hosting provider], where the site and its database run ([region])

How long we keep it

We keep your account and learning data while your account exists. When you delete your account, it is removed from our live database straight away and from backups within [7 days]. Payment records may be kept longer where the law requires it.

Your rights

You can download or delete your data at any time under Settings → Account → Personal data. Depending on where you live, you may also have the right to correct or restrict your data, object to its use, or complain to your data protection authority. Contact us at [contact email] for anything else.

Children

KumaDeck is not intended for children under [13/16]. If you believe a child has given us their data, contact us and we'll delete it.

Changes

If we change this policy in a meaningful way, we'll let you know by email or on the site before the change takes effect.