Privacy policy

Who is responsible

Alep is operated by —, —. For anything about your data, write to —.

What we store

Your account: name, email address, a hash of your password (never the password itself), and whether you use two-factor sign-in. If you sign in with Google we receive your name, email and profile picture from Google.

Your learning: lessons completed, the letters and words you have studied and when they are next due for review, your answers (right or wrong), XP, streak, daily goal and preferences such as language. We use this to run the course and, in aggregate, to see which exercises are hardest so we can improve them.

Payments

Payments are processed by Stripe. Your card details go directly to Stripe and never reach our servers; we store only your Stripe customer id and the status of your subscription.

Service providers

Neon (database hosting), Stripe (payments), Resend (sending sign-in and verification email), Google (optional sign-in, and optional Analytics only with your consent) and Upstash (rate limiting against abuse). Each processes data only on our behalf.

Cookies

We use one cookie to keep you signed in and one to remember your language. Google Analytics is loaded only if you accept it in the cookie notice, and you can change your mind at any time by clearing the cookie.

Your rights

You can see and change your data in your profile, and delete your account there at any time: deletion removes your account, your learning history and any active subscription. You also have the right to access, correct, restrict or port your data and to complain to a data protection authority.