Data minimization
If an account is created, the planned data is limited to authentication identifiers, a display name, preferences, your chosen selection profile and planned assessment date, training attempts and results, entitlements, and necessary security records. We do not need government identification numbers.
Local storage and consent
Privacy choices, and device-local training progress before you create an account, can be stored on the device. Essential storage supports the service; analytics, advertising, and preference categories are controlled separately and wait for your consent choice.
Accounts and rights
The architecture includes secure data export, correction, session revocation, and account deletion workflows. Retention periods and lawful exceptions will be documented and configurable.
Service providers
Planned providers include Supabase for database and authentication, Render for hosting, and a payment processor for hosted checkout once payments are enabled. Final production disclosures will identify configured providers and purposes.