Privacy Policy

Account: your email address, your display name, and — if you sign in with Google — the name and email your Google account shares. We never see or store passwords (sign-in is by email link or Google).

Learning data: which lessons and courses you’ve completed, assessment answers and scores, and certificates you’ve earned (including the name printed on them).

Purchase records: whether your account has Full Access and a Stripe customer reference. Payment details (card numbers) go directly to Stripe — they never touch our servers.

Security and product signals: an identifier of your active sign-in session (used to limit an account to one device at a time), anti-bot verification results, reports you submit through “Report an issue”, and product events (for example, that the upgrade screen was shown to your account) that we use to understand and improve the product.

To run the Service: sign you in, save your progress, issue and verify certificates, process purchases, prevent account sharing and scraping, answer your reports, and understand which parts of the product work. We do not sell your data, share it with advertisers, or use third-party ad tracking.

Like most software, AykoAI runs on infrastructure providers who process data on our behalf:

• Supabase (on AWS) — database, authentication, and hosting of your account and learning data
• Stripe — payment processing
• Cloudflare — website and app hosting, bot protection (Turnstile)
• Amazon SES — sending sign-in link emails
• Google — only if you choose “Sign in with Google”
• Zoho Mail — our support inbox, if you email us
• Google Analytics — website traffic statistics, only with your consent
• Microsoft Clarity — anonymised session replay and heatmaps on our public website, only with your consent

Each processes only what its role requires, under its own security and privacy commitments.

The app stores your sign-in session and a local cache of your progress in your browser’s storage — that’s what keeps you logged in. That storage is essential and isn’t used for tracking.

With your consent, our public website (aykoai.com) also uses Google Analytics to count visits and see which pages people find, and Microsoft Clarity to record anonymised sessions and heatmaps so we can see where a page confuses people. Both set cookies. Until you accept, analytics runs in a cookieless mode and session recording does not run at all. Neither runs inside the app itself, where your learning data lives.

We don’t use advertising cookies or cross-site ad tracking, and we don’t enable Google’s advertising signals even if you accept. You can change your choice at any time by clearing this site’s data in your browser.

We keep your data while your account exists. Deleting your account — Account → Delete account in the app — immediately and permanently erases your profile, progress, certificates, purchase entitlement, session records, and reports from our database. This cannot be undone, and a deleted purchase cannot be restored to a new account. Records that Stripe retains for financial compliance (e.g. the fact of a past payment) are governed by Stripe’s own policy.

Depending on where you live, you may have rights to access, correct, export, or erase your personal data, or to object to processing. Most of these you can exercise directly in the app (edit your name, delete your account); for anything else, email admin@aykoai.com and we’ll respond promptly.

The Service is not directed at children and requires users to be at least 16.

If this policy changes materially we’ll announce it in the app or by email; the date above always reflects the current version.