Privacy Policy
Last updated: April 2025
1. Information we collect
We collect information you provide directly:
- Account data — email address, name, and authentication via Clerk (our third-party auth provider).
- Typing performance data — WPM, accuracy, session timestamps, and lesson completion records.
- Preferences — selected language, locale settings, and UI customization.
- Communications — any messages or feedback you send us.
We do not collect keystroke-level data beyond aggregated WPM and accuracy metrics.
2. How we use your information
- To deliver personalised adaptive lessons based on your detected weaknesses
- To track your progress and display analytics dashboards
- To authenticate you and manage your account
- To send you service-related notifications (account, billing, privacy updates)
- To improve our product through anonymised aggregated analytics
3. Data sharing
We never sell your personal data. We share data only in these cases:
- Auth provider — Clerk handles account management. Their privacy policy applies to auth data.
- Billing — Stripe processes payments. We never store card details.
- Legal obligations — if required by law or to prevent fraud/harm.
- Service providers — hosting (Cloudflare/Vercel) and analytics — bound by strict data processing agreements.
4. Data retention
Account data is retained until you delete your account or request deletion. Typing performance data older than 24 months is purged from our analytics pipeline. Deletion requests are processed within 30 days.
5. Your rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and all associated data
- Export your data in a machine-readable format (CSV)
- Object to certain processing
- Restrict processing in specific circumstances
To exercise any rights, email privacy@typingscholar.com with your request.
6. Cookies
We use cookies for:
- Authentication — session management via Clerk (essential)
- Preferences — locale and UI settings (functional)
- Analytics — anonymised usage stats (opt-in, never used for advertising)
You can manage or disable cookies via your browser settings.
7. Children's privacy
TypingScholar supports school accounts with COPPA-compliant features for users under 13. For school accounts:
- Parental consent is collected by the school before student accounts are created
- Data collection is limited to educational purposes only
- Parents can review, request deletion, or revoke consent at any time via privacy@typingscholar.com
8. Security
All data is encrypted in transit (TLS 1.2+) and at rest. We run regular security audits, use Cloudflare's DDoS protection, and follow OWASP guidelines. In the event of a data breach, affected users will be notified within 72 hours.
9. International transfers
Data may be processed on servers in the EU and US. For users in regions with specific data protection requirements (GDPR, CCPA), we apply appropriate safeguards including Standard Contractual Clauses.
10. Changes to this policy
If we change this policy, we will post the updated version here and update the "last updated" date. For significant changes, we will notify you via email or in-app notice at least 30 days before they take effect.
11. Contact
TypingScholar
Email: privacy@typingscholar.com
Address: Kinetic Foundry, Berlin, Germany