Privacy Policy

This page explains how we handle your data in Live Code Tutor.

What we collect

Account data: email, display name, age bracket, optional phone number, and a hashed password or OAuth subject when those sign-in methods are used.
Learning profile: your progress by topic, common difficulties, preferred examples, and teaching preferences. Built from your activity in the app.
Sessions & chat: the code you write, the test results, and your chat with the AI tutor. These records let you resume lessons and review earlier work.
Billing: Razorpay customer ID, subscription & invoice IDs. Card brand + last 4 cached for UI. We never see or store full card numbers.
Study and preparation: your learning goal, daily time preference, personal notes, and saved interview approaches, reflections, and self-reviews. Your coach can use your personal note when helping with that concept. Account code drafts save independently of watch mode. Notes and rehearsals are included in your data export and removed when you delete your account; you can also edit or clear a personal note. We also store the coaching preferences you choose, feedback on tutor replies, saved explanations, your own takeaways and recall dates. Relevant saved insights and preferences can inform future coaching. These are included in your export and removed on account deletion. You can remove feedback or notebook entries individually. Understanding checks also store your prediction, stated confidence, optional reasoning, and the checked result. Relevant results guide your next practice and tutor explanations. These records are included in your data export and removed when you delete your account.
Account activity: sign-in, sign-out, billing events, and account deletion. This helps you review activity and helps us investigate account problems.

How we use your data

We use learning records to provide and personalise the service. Live Code Tutor does not use them to train its own AI model. AI provider processing is described below.
We do not sell or rent your data.
Account activity uses a one-way hash of your IP address. Hosting and delivery services may also process network information to operate and protect the website.
We do not use third-party advertising trackers.

Third-party processors

Xiaomi MiMo processes relevant chat, code and lesson context to generate tutor responses. If you choose to attach an image or record a voice question, that image or recording is sent for image understanding or transcription. Spoken tutor replies use its speech service. Provider processing is subject to the provider's terms and privacy policy.
OpenAI, when configured, processes text embeddings for search and recommendations. It is not the current tutor chat provider.
Razorpay handles all card data via their PCI-DSS-compliant hosted checkout. We never see full card numbers.
Resend sends sign-in codes and transactional emails. AhaSend or Postmark can serve as alternative delivery providers when configured.
Sentry & PostHog, when enabled, provide error monitoring and product analytics. We do not use them for advertising.
Cloudflare for DNS + CDN + WAF.

Manage your data

Access: Settings → "Export your data" downloads a single JSON file with your profile, settings and saved learning records.
Rectification: update your display name, age range, and optional phone number from Settings.
Deletion: Settings → "Delete my account" disables your account, revokes sign-in sessions, cancels your subscription, and removes learning memory, notes, interview attempts and saved coach feedback. Other session, account activity, billing and backup records may remain for recovery and recordkeeping. Contact us to request review or removal of remaining records.
Portability: the export JSON is the canonical machine-readable format.
Object: contact us by email to object to processing on legitimate-interest grounds.

Data residency

Account data is stored in the service's PostgreSQL database. Restricted backups are made for recovery. Our AI, email and payment providers may process data in other countries. Contact us if you need information about the current hosting location.

Security

The website uses HTTPS. Authenticated access is required for personal learning data. Sign-in codes expire, access tokens are short-lived, and refresh tokens are rotated. Payment webhooks are verified before they change access. Backup and configuration files have restricted access.

Children

The Service is not intended for users under 16.

Changes

Material changes are notified by email at least 14 days in advance.

Contact

Privacy questions / data-subject requests: admin@kshurikaacademy.com.

What we collect

Account data: email, display name, age bracket, optional phone number, and a hashed password or OAuth subject when those sign-in methods are used.

Learning profile: your progress by topic, common difficulties, preferred examples, and teaching preferences. Built from your activity in the app.

Sessions & chat: the code you write, the test results, and your chat with the AI tutor. These records let you resume lessons and review earlier work.

Billing: Razorpay customer ID, subscription & invoice IDs. Card brand + last 4 cached for UI. We never see or store full card numbers.

Study and preparation: your learning goal, daily time preference, personal notes, and saved interview approaches, reflections, and self-reviews. Your coach can use your personal note when helping with that concept. Account code drafts save independently of watch mode. Notes and rehearsals are included in your data export and removed when you delete your account; you can also edit or clear a personal note. We also store the coaching preferences you choose, feedback on tutor replies, saved explanations, your own takeaways and recall dates. Relevant saved insights and preferences can inform future coaching. These are included in your export and removed on account deletion. You can remove feedback or notebook entries individually. Understanding checks also store your prediction, stated confidence, optional reasoning, and the checked result. Relevant results guide your next practice and tutor explanations. These records are included in your data export and removed when you delete your account.

Account activity: sign-in, sign-out, billing events, and account deletion. This helps you review activity and helps us investigate account problems.

How we use your data

We use learning records to provide and personalise the service. Live Code Tutor does not use them to train its own AI model. AI provider processing is described below.

We do not sell or rent your data.

Account activity uses a one-way hash of your IP address. Hosting and delivery services may also process network information to operate and protect the website.

We do not use third-party advertising trackers.

Third-party processors

Xiaomi MiMo processes relevant chat, code and lesson context to generate tutor responses. If you choose to attach an image or record a voice question, that image or recording is sent for image understanding or transcription. Spoken tutor replies use its speech service. Provider processing is subject to the provider's terms and privacy policy.

OpenAI, when configured, processes text embeddings for search and recommendations. It is not the current tutor chat provider.

Razorpay handles all card data via their PCI-DSS-compliant hosted checkout. We never see full card numbers.

Resend sends sign-in codes and transactional emails. AhaSend or Postmark can serve as alternative delivery providers when configured.

Sentry & PostHog, when enabled, provide error monitoring and product analytics. We do not use them for advertising.

Cloudflare for DNS + CDN + WAF.

Manage your data

Access: Settings → "Export your data" downloads a single JSON file with your profile, settings and saved learning records.

Rectification: update your display name, age range, and optional phone number from Settings.

Deletion: Settings → "Delete my account" disables your account, revokes sign-in sessions, cancels your subscription, and removes learning memory, notes, interview attempts and saved coach feedback. Other session, account activity, billing and backup records may remain for recovery and recordkeeping. Contact us to request review or removal of remaining records.

Portability: the export JSON is the canonical machine-readable format.

Object: contact us by email to object to processing on legitimate-interest grounds.