At deciMate, we take your privacy seriously. This Privacy Policy explains what data we collect, how we use it, and what rights you have regarding your personal information. By using deciMate, you agree to the practices described in this policy.
1. Information We Collect
We collect the following types of information when you use the Service:
- Account information: Your email address, display name, and password (stored securely as a hash).
- Learning progress: Lesson completions, quiz scores, module progress, achievement data, XP, streaks, and leaderboard standings.
- Decision practice data: Your responses to practice scenarios, case studies, journal entries, bias assessments, and synthesis exercises.
- Usage information: Session duration, features used, and general interaction patterns to help us improve the Service.
- Onboarding preferences: Your selected goals, experience level, and areas of interest provided during account setup.
2. How We Use Your Data
We use the information we collect to:
- Provide and operate the Service, including personalized learning paths and progress tracking.
- Generate AI-powered feedback and analysis on your decision-making practice.
- Track your progress across frameworks, quizzes, and practice sessions.
- Power gamification features such as XP, streaks, achievements, and leaderboards.
- Improve the Service through aggregated, anonymized usage analysis.
- Communicate with you about your account, service updates, and (with your consent) educational content.
3. AI-Powered Features and Your Data
deciMate uses AI to analyze your responses to practice scenarios, case studies, and other exercises in order to provide personalized feedback and recommendations. When you use AI-powered features:
- Your responses are sent to our AI processing systems solely to generate feedback for you.
- Your data is not used to train AI models.
- AI-generated feedback is provided for educational purposes and should not be treated as professional advice.
4. Data Storage and Security
Your data is stored securely using Supabase, which provides enterprise-grade security including encryption at rest and in transit. We implement row-level security policies to ensure that users can only access their own data. While no system is perfectly secure, we take reasonable measures to protect your information from unauthorized access, alteration, or destruction.
5. Data Sharing
We do not sell, rent, or trade your personal information to third parties. We may share data only in the following limited circumstances:
- Service providers: With trusted third-party services that help us operate the platform (such as hosting and AI processing), under strict data-processing agreements.
- Legal requirements: If required by law, regulation, or valid legal process.
- Aggregated data: We may share anonymized, aggregated statistics that cannot be used to identify individual users.
6. Your Rights
You have the following rights regarding your personal data:
- Access: You can view your personal data through your account settings and profile page.
- Correction: You can update your account information at any time through the settings page.
- Deletion: You can request complete deletion of your account and all associated data by contacting us.
- Export: You can request an export of your personal data in a portable format.
- Opt-out: You can opt out of non-essential communications and notifications through your account settings.
7. Cookies
deciMate uses cookies strictly for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. The cookies we use are essential for the Service to function and keep you securely logged in.
8. Children's Privacy
The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take steps to delete that information.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. Material changes will be communicated to you via email or an in-app notification. We encourage you to review this policy periodically.
10. Contact Us
If you have questions about this Privacy Policy or want to exercise your data rights, please contact us at support@decimate.app.