Privacy policy
We collect what helps you learn, nothing more. Here is what, why, with whom and for how long.
Draft: the “[to be completed]” fields await the publisher’s details, and the text must be reviewed by a lawyer before going live.
Controller
[to be completed], [to be completed]. Contact for your data: [to be completed].
The data we process
- Account: name, e-mail address, password (stored hashed, never in clear).
- Learning profile: goal, job or field, level, and what you choose to tell us about your project.
- Progress: lessons taken, quiz answers, submitted exercises and their results.
- Tutor conversations: your questions, attached code and the answers.
- Projects: files created in the workspaces, backed up between sessions.
- Payment: handled by Stripe; we only receive the subscription status and invoices, never your card numbers.
- Audience measurement: only with your consent, see the Cookies page.
Why, and on what basis
- Providing the service, building and personalising your path, grading your exercises: performance of the contract.
- Billing the subscription and keeping accounts: legal obligation.
- Securing the service and preventing abuse: legitimate interest.
- Audience measurement with Google Analytics or Microsoft Clarity: your consent, which you can withdraw at any time.
Artificial intelligence
To answer a question or rewrite a lesson, the text needed (your question, your code, your profile context) is sent to an AI model: either a model hosted on our own servers, or Anthropic’s Claude API. Anthropic does not use data sent through its commercial API to train its models.
No AI call is made from your browser: everything goes through our servers, which log each call to track usage and cost.
Our processors
- Stripe: subscription payment.
- Anthropic: AI models (United States), when the external model is used.
- Cloudflare: website delivery and file storage (lesson audio, project backups).
- Application and database hosting: [to be completed].
- E-mail delivery: [to be completed].
- Google (Analytics) and Microsoft (Clarity): only if you accept them.
Transfers outside the European Union
Some processors are based in the United States. These transfers rely on the EU–US Data Privacy Framework or on the European Commission’s standard contractual clauses.
Retention
- Account, profile, progress, conversations and projects: while the account is active; deleted when the account is deleted.
- Audience measurement: 13 months at most.
- Invoices and accounting records: 10 years (legal obligation).
Your rights
You can access, correct and erase your data, ask for portability, restrict or object to some processing, withdraw consent and set instructions for after your death. Write to [to be completed]; we answer within one month.
You can also complain to the CNIL, the French data protection authority (cnil.fr).
Security
Encrypted connections (HTTPS), hashed passwords, API keys kept server-side, isolated execution environments with no access to our internal networks.
Last updated: