Privacy Policy

1. What we collect

We collect the information you give us when you create an account (email address, password hash) and the study data you generate while using Probie (answers, session results, SRS progress). We also collect basic analytics — page views, session durations — via Vercel Analytics, which is cookieless and GDPR-compliant by default.

2. What we do not collect

Probie is not a HIPAA-covered entity. We do not collect protected health information (PHI). We do not sell your data to third parties. We do not use your study data to train AI models.

3. How we use your data

• To operate the service — authenticate you, serve questions, track progress
• To improve the platform — aggregate analytics on question quality and feature usage
• To communicate with you — account confirmation, password reset, optional study reminders
• To process payments — via Stripe; we never store raw card numbers

4. Third-party services

• Supabase — authentication and database hosting (EU and US regions)
• Stripe — payment processing; governed by Stripe's privacy policy
• Anthropic (Claude) — AI-powered rationale explanations on Pro tier; prompts include anonymized question text only, never your personal information
• Resend — transactional and marketing email delivery; your email address is shared with Resend only to send emails on our behalf
• Sentry — error monitoring; stack traces do not include personal data
• Vercel — hosting and analytics

5. Data retention

We retain your account data as long as your account is active. You can request deletion at any time from your Account settings. On deletion, all personal data is removed within 30 days. Anonymized aggregate statistics (e.g. question difficulty ratings) are retained indefinitely.

6. Your rights

You have the right to access, correct, export, or delete your data. Use the Account page to export your data as JSON or delete your account. To unsubscribe from marketing emails, use the unsubscribe link in any marketing email or visit /unsubscribe. Transactional emails (receipts, account alerts) are unaffected by unsubscribe requests. For other requests, email us at privacy@probie.io.

7. Cookies

We use a single session cookie for authentication (Supabase Auth). We do not use advertising cookies or tracking pixels. Vercel Analytics is cookieless.

8. Changes to this policy

Material changes will be communicated by email and by updating the date above. Continued use of the service after changes take effect constitutes acceptance.

9. Contact

Questions? Email privacy@probie.io.