Legal
Privacy Policy
Last updated: July 12, 2026
This policy explains what AykoAI (“we”, “us”) collects when you use aykoai.com and app.aykoai.com, why we collect it, and how you can delete it. The short version: we collect what the product needs to work, we don’t sell or share your data for advertising, and you can erase your account yourself, instantly, from inside the app.
1. What we collect
Account: your email address, your display name, and — if you sign in with Google — the name and email your Google account shares. We never see or store passwords (sign-in is by email link or Google).
Learning data: which lessons and courses you’ve completed, assessment answers and scores, and certificates you’ve earned (including the name printed on them).
Purchase records: whether your account has Full Access and a Stripe customer reference. Payment details (card numbers) go directly to Stripe — they never touch our servers.
Security and product signals: an identifier of your active sign-in session (used to limit an account to one device at a time), anti-bot verification results, reports you submit through “Report an issue”, and product events (for example, that the upgrade screen was shown to your account) that we use to understand and improve the product.
2. What we use it for
To run the Service: sign you in, save your progress, issue and verify certificates, process purchases, prevent account sharing and scraping, answer your reports, and understand which parts of the product work. We do not sell your data, share it with advertisers, or use third-party ad tracking.
3. Who processes it for us
Like most software, AykoAI runs on infrastructure providers who process data on our behalf:
- Supabase (on AWS) — database, authentication, and hosting of your account and learning data
- Stripe — payment processing
- Cloudflare — website and app hosting, bot protection (Turnstile)
- Amazon SES — sending sign-in link emails
- Google — only if you choose “Sign in with Google”
- Zoho Mail — our support inbox, if you email us
Each processes only what its role requires, under its own security and privacy commitments.
4. Cookies and local storage
The app stores your sign-in session and a local cache of your progress in your browser’s storage — that’s what keeps you logged in. We don’t use advertising cookies or cross-site trackers. Page-view statistics, where enabled, use Cloudflare’s cookieless analytics, which doesn’t identify you.
5. How long we keep it, and how to delete it
We keep your data while your account exists. Deleting your account — Account → Delete account in the app — immediately and permanently erases your profile, progress, certificates, purchase entitlement, session records, and reports from our database. This cannot be undone, and a deleted purchase cannot be restored to a new account. Records that Stripe retains for financial compliance (e.g. the fact of a past payment) are governed by Stripe’s own policy.
6. Your rights
Depending on where you live, you may have rights to access, correct, export, or erase your personal data, or to object to processing. Most of these you can exercise directly in the app (edit your name, delete your account); for anything else, email admin@aykoai.com and we’ll respond promptly.
7. Children
The Service is not directed at children and requires users to be at least 16.
8. Changes
If this policy changes materially we’ll announce it in the app or by email; the date above always reflects the current version.
See also our Terms of Service.