Privacy policy

What we collect

When you sign up: email, name (if provided via Google), profile image (Google). When you practice: your attempts, scores, time stamps, mastery per topic, streak, and your self-reported confidence.

What we don't collect

We don't fingerprint you. We don't sell data. We don't run third party ad trackers. Our auth secrets stay server side. AI eval requests on short answer attempts go to our AI evaluation model; we cache the result but never share the raw text with any other vendor.

Cookies

We set: a session cookie (NextAuth JWT), a CSRF cookie, and a per session unlock tracking cookie for free tier users. No third party analytics cookies.

Subprocessors

• Supabase, database hosting (your account + attempt data)
• Vercel, application hosting (request logs)
• Resend, transactional email (sign in magic links, weekly digest)
• Our AI evaluation model: text only on short answer attempts; raw answer text is not shared with any other vendor
• Dodo Payments, subscription billing (no card data is stored on our side)
• Upstash, Redis for rate limiting (IP + counters; no PII)

Your rights

Email hello@zenaique.com to export or delete your data. We respond within 7 business days.