Privacy Policy

• Account and authentication: email address, password authentication handled by Supabase Auth, confirmation status, session identifiers, and authentication timestamps.
• Profile: a profile record linked to the account and any display name previously supplied.
• Learning activity: module and lesson progress, completed lab steps, quiz answers and scores, streak/activity records, and timestamps.
• AI Tutor: questions, selected learning context, conversation history, generated answers, citations, and source metadata.
• Technical diagnostics: request outcomes, random request IDs, error categories, and operation durations. Beebtical is designed not to log full tutor prompts, secret keys, or sensitive request headers.

Please do not submit passwords, credentials, personal records, confidential business information, or information about an unauthorized target to the AI Tutor or other free-text fields.

Information is used to create and secure accounts, maintain sessions, save learning progress, provide quizzes and labs, retrieve relevant curriculum passages, generate grounded tutor responses, preserve conversation history, prevent misuse, diagnose failures, and maintain service security.

The appropriate legal basis depends on where a learner is located and may include performing the requested service, legitimate interests in operating and securing the platform, and consent where applicable.

• Supabase: authentication, database storage, row-level access controls, and vector retrieval.
• Google Gemini API: processes tutor questions, limited recent conversation context, and retrieved curriculum passages to create query embeddings and grounded answers.
• Vercel: hosts the application and may process request, deployment, and technical log data.

These providers may process information in countries other than the learner’s country. Deployment regions, provider account settings, contractual transfer safeguards, and processor retention settings must be confirmed before launch.

Beebtical currently uses essential Supabase authentication cookies to maintain and refresh signed-in sessions. No analytics, advertising, marketing, social-media, or preference cookies were detected in the production code audit. The app does not currently use browser localStorage or sessionStorage.

See the Cookie Policy for more detail.

Account, profile, progress, quiz, and tutor data are currently retained while the account remains active or as needed to operate, secure, and troubleshoot the service. Hosting and service-provider logs may follow separate retention periods configured by those providers.

Depending on local law, learners may have rights to access, correct, delete, restrict, or obtain a copy of personal information, and to object to certain processing or complain to a regulator. Identity may need to be verified before a request is fulfilled.

Beebtical uses authenticated sessions, server-side secrets, and owner-scoped database policies for learner records. No online service can guarantee absolute security. Learners are responsible for protecting account credentials and reporting suspected unauthorized access.

Beebtical is not intentionally designed to collect personal information from children below the applicable digital-consent age. A parent or guardian should supervise use where required by local law.

This policy may be updated when the product, providers, or legal requirements change. Material changes should be communicated appropriately.