Privacy policy

Information we collect

We collect only the data necessary to operate and improve the platform.

• Account information: name, email address, and authentication data securely managed through Supabase.
• Learning data: practice and mock exam results, flashcard activity, analytics, and progress by certification domain.
• Billing information: subscription and payment status. Payments are handled by our payment provider and we do not store credit card information on our servers.
• AI usage data: request type and timestamps, used only for quality assurance, usage limits, and cost control. We do not train external AI models using your personal learning content.

How we use your data

We use your data to provide authentication, practice, mock exams, flashcards, and assistance features; personalize recommendations; enforce plan limits; prevent abuse; and communicate important service, security, or billing updates.

We do not sell your personal data.

Legal basis for processing

• Contractual necessity, to provide the service you requested.
• Legitimate interest, including platform security, improvement, and abuse prevention.
• Your consent where required, including for certain AI-related features.

Security and retention

We apply recognized security practices including encrypted HTTPS traffic, account isolation through Row Level Security, backups, access logging, and restricted access to sensitive credentials with periodic rotation.

Your data is retained while your account is active. You may request deletion of your account and associated data at any time, subject to legal requirements.

Sharing and service providers

We share data only with trusted providers required to operate DID-ACTE, including Supabase for hosting, database, and authentication services, and our payment providers.

These providers are contractually required to protect your data.

Your rights

Depending on your location, you may have the following rights:

• Access and correct your personal data.
• Export your learning data.
• Request deletion of your account and data.
• Opt out of AI-powered features and use non-AI learning paths.
• To exercise these rights, email support@us.did-acte.com.

International users

DID-ACTE is operated from the United States. If you use the platform from another country, your data may be processed and stored in the United States.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated through the platform or by email.

Contact

For privacy-related questions or requests, email support@us.did-acte.com.