Privacy Policy

Effective Date: March 29, 2026

1. Information We Collect

Account data: When you register, we collect your name, email address, and a hashed version of your password. We never store plain-text passwords.

Usage data: We track your learning progress, completed lessons, quiz scores, and exercise completions to provide personalized learning experiences.

Technical data: We collect basic analytics (page views, device type) through Cloudflare Web Analytics, which does not use cookies or track individuals.

2. How We Use Your Information

We use your data to: provide and improve the learning platform, track your progress, personalize your experience, send verification emails, and communicate important updates.

3. Data Storage

Your data is stored securely on Cloudflare's global network using D1 (edge database). Passwords are hashed using PBKDF2 with SHA-256. Data is encrypted in transit via TLS.

4. Third-Party Services

We use the following third-party services:

• Cloudflare — hosting, CDN, database, analytics
• Resend — transactional emails (verification codes)
• ElevenLabs — AI audio narration generation

5. Cookies

We use a single httpOnly cookie ("auth-token") for authentication. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

6. Your Rights

You have the right to: access your personal data, request deletion of your account, export your progress data, and opt out of non-essential communications. Contact [email protected] for any of these requests.

7. Data Retention

We retain your account data as long as your account is active. If you delete your account, your data will be permanently removed within 30 days.

8. Children's Privacy

AIMAL is not intended for children under 13. We do not knowingly collect data from children under 13.

9. Changes to This Policy

We may update this policy as needed. We will notify registered users of significant changes via email.

10. Contact

For privacy-related questions, contact [email protected].