Privacy Policy

1. Information we collect

We collect only the information needed to provide and improve the Service. The categories depend on how you use Chuck's Academy.

• Account and identity data: your email address, name, profile image, authentication identifier, chosen language, account status, and role. If you sign in through Google or another identity provider, that provider and Clerk handle the authentication process.
• Learning and career data: the goals, roles, technologies, seniority, and career directions you enter; the paths and topic maps generated for you; and your preferences for a training session.
• Questions, answers, and evidence: generated questions, your answers (including code), “I don't know yet” selections, AI evaluations, scores, feedback, challenges, reports, mastery estimates, confidence, and progress history.
• Credits and service records: credit balances, grants, deductions, adjustments, and any future purchase records. We do not currently collect payment-card details directly.
• Technical and device data: essential session cookies, local device preferences, browser and device information, IP address, timestamps, and server or security logs.
• Communications: information you send when you request support, report content, or challenge an evaluation.

2. How we use information

Where applicable, we process information to perform our agreement with you, with your consent, to meet legal obligations, and for legitimate interests such as security and improving the Service.

• Create and secure your account and keep you signed in.
• Generate learning paths, baseline assessments, adaptive questions, reference answers, documentation links, and feedback.
• Evaluate answers and update topic-level mastery, confidence, evidence, and progress.
• Maintain credit balances and prevent abuse, fraud, and unauthorized access.
• Respond to support requests, challenges, and reports.
• Debug, maintain, and improve the Service, including through aggregated or de-identified usage information.
• Comply with law, enforce our Terms of Service, and protect users, the Service, and others.

3. AI processing and automated feedback

Chuck's Academy uses the OpenAI API to create and refine paths, generate questions and learning resources, and evaluate answers. We may send OpenAI your goal, target level, topic map, prior learning evidence, generated questions, and the answer you submit. We intentionally exclude account identity fields such as your name and email from these prompts.

Before an answer is sent, we apply pattern-based redaction for common emails, phone numbers, API keys, tokens, and similar secrets. Automated redaction cannot identify every kind of personal or confidential information. Do not include real names, credentials, private source code, employer information, or other sensitive data in an answer.

API requests are configured with storage disabled. OpenAI states that business and API data is not used to train its models by default; you can read its business data commitments. The full answer you submit is retained in your Chuck's Academy learning history even when a redacted version is sent for AI processing.

AI scores and recommendations guide your learning only. They do not make employment, admission, credit, or other decisions with legal or similarly significant effects. AI can be incomplete or wrong, and the Service lets you challenge an evaluation or report a problem.

4. Cookies and device storage

We and our authentication provider use essential cookies or similar storage to authenticate sessions, prevent abuse, and keep the Service working. We also use local device storage for preferences such as language and sidebar behavior.

As of this policy's effective date, Chuck's Academy does not use behavioral advertising cookies or sell information for targeted advertising. Blocking essential storage may prevent sign-in or other portal features from working.

5. When we share information

We do not sell your personal data. We disclose information only as needed for the Service or for the purposes below:

• Clerk provides authentication and account management. Clerk acts as a service provider for customer data under its agreements; see Clerk's privacy information.
• MongoDB provides database infrastructure for account, learning, evidence, and credit records; see MongoDB's privacy information.
• OpenAI processes selected learning context as described in Section 3 to generate and evaluate content.
• Hosting and infrastructure providers process technical data required to deliver and secure the Service.
• Authorities or affected parties when reasonably necessary to comply with law, legal process, protect rights and safety, investigate abuse, or enforce agreements.
• A successor organization in connection with a merger, financing, reorganization, sale, or transfer of the Service, subject to applicable law.

6. International transfers

Some providers may process or store information outside Argentina, including in the United States or other countries whose data-protection laws differ from yours. We use provider contracts and other reasonable safeguards intended to protect information consistently with applicable law.

7. Retention and account deletion

We keep account and learning records while your account is active and as long as reasonably needed to provide the Service, preserve learning history, resolve disputes, secure the platform, comply with law, and maintain necessary business records. We may retain aggregated or de-identified information that can no longer reasonably identify you.

Deleting your sign-in account through Clerk disables access to Chuck's Academy, but it may not immediately erase the learning records stored by the Academy. To request deletion of your learning paths, answers, evaluations, and related account data, email support@chucksacademy.com from the address associated with your account. We will delete or anonymize eligible data within the period required by applicable law. Limited information may remain where retention is legally required, necessary for security or disputes, or present temporarily in protected backups.

8. Your privacy rights

Subject to applicable law, you may request access to your personal data, correction or updating of inaccurate data, deletion or suppression, and information about how it is processed. You may also withdraw consent where consent is the basis for processing, without affecting earlier lawful processing.

Send requests to support@chucksacademy.com. We may need to verify your identity before completing a request. Argentina's Agency for Access to Public Information (AAIP) explains these data-protection rights and accepts complaints as the supervisory authority.

9. Security

We use reasonable administrative and technical measures designed to protect information, including authenticated access and limited data sharing. No internet service or storage system is completely secure, so we cannot guarantee absolute security. Contact us promptly if you believe your account has been compromised.

10. Minors

The Service is not directed to children who cannot legally consent to the processing of their data. If you do not have legal capacity to agree to these practices, use the Service only with authorization from a parent or legal guardian. If we learn that we collected a child's data contrary to applicable law, we will take appropriate steps to delete it.

11. Changes and contact

We may update this policy as the Service or law changes. We will post the revised policy here with a new effective date and provide additional notice when required.

Questions, complaints, and rights requests can be sent to support@chucksacademy.com. Please do not email passwords, API keys, or other secrets.