Privacy Policy

1. Who We Are

CodeWeaver is a coding education platform that teaches beginners to build real software projects. We serve learners of all ages, including children. We take the privacy of young users very seriously and follow US and international laws designed to protect them.

2. What Information We Collect

We collect only what is needed to deliver the service:

• Account: Email address and display name when you create an account.
• Learning progress: Projects you create, code you write, sessions completed, and AI tutor conversations. This is used to track your progress and help you pick up where you left off.
• Learner profile: Your skill stage, preferred programming language, and completed project history.
• Technical: Log-in timestamps and browser information, used for security and to fix bugs.

We collect only what is necessary. We do not collect home addresses, phone numbers, or payment card details (payments are handled directly by Stripe).

3. How We Use the Information

• To run CodeWeaver and deliver your lessons and projects
• To save your progress so you can continue across sessions
• To power the AI tutor that guides you through each project
• To process subscription payments through Stripe
• To improve CodeWeaver using anonymized, combined data — never data linked to individual users

We do not use your data to show advertisements. We do not sell personal information to anyone.

4. Who We Share Data With

We share data only with the companies that help us operate the platform:

• Supabase — Secure database and authentication. Your data is stored in Supabase data centers in the United States.
• Stripe — Processes subscription payments. Stripe handles payment card data directly and does not receive your learning data.
• Anthropic — Powers the AI tutor. Code and questions you ask the tutor are sent to Anthropic for processing. Anthropic does not retain personal data after the session ends, per their enterprise data policies.

We do not share data with schools, advertisers, data brokers, or any other parties unless required by law.

5. Children's Privacy (COPPA)

CodeWeaver is used by learners of all ages, including children under 13. US law (COPPA) requires us to get a parent's or guardian's permission before we collect personal information from any child under 13.

When CodeWeaver is used inside BrightRoot: Parental consent is collected by BrightRoot as part of the enrollment process before any student under 13 accesses CodeWeaver.

For direct sign-ups: Users under 13 must have a parent or guardian create their account. By creating an account for a child under 13, the parent confirms they have read this Privacy Policy and consent to data collection as described.

Parents can review, correct, or delete their child's data at any time by emailing [email protected]. We do not use data from children for behavioral advertising. We do not allow third-party tracking on child accounts.

6. Your Rights (GDPR — UK and EU Users)

If you are in the UK or EU, you have the right to:

• Access: Request a copy of the data we hold about you.
• Correction: Ask us to fix any information that is wrong.
• Erasure: Ask us to delete your account and all associated data. We process deletion requests within 30 days.
• Portability: Request a copy of your data in a machine-readable format.
• Object: Object to certain types of data processing.
• Withdraw consent: Withdraw consent at any time if we are processing data based on consent.

To exercise these rights, email [email protected].

7. Cookies

We use essential cookies to keep you logged in. These cookies are necessary for the platform to work and do not track you across other websites. We do not use analytics cookies, advertising cookies, or third-party tracking. A banner on your first visit confirms this.

8. Data Security

We use encrypted connections (HTTPS), access controls, and secure infrastructure. No system is 100% secure, and we cannot guarantee absolute security. We will notify you if a breach affects your personal data.

9. How Long We Keep Data

We keep your account and learning data for as long as your account is active. If you delete your account, your personal data is removed within 30 days. Anonymized and aggregated data (no names or identifiers) may be retained indefinitely for program improvement.

10. Deleting Your Account

You can delete your account and all data at any time. Email [email protected] or use the Delete Account option in your account settings.

11. Changes to This Policy

We may update this policy. Important changes will be emailed to you at least 14 days before they take effect. The date at the top of this page shows the most recent update.

12. Contact

For privacy questions or data requests: [email protected]