Privacy Policy

1. Introduction

ActiveSkill ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our coding learning platform, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using ActiveSkill, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Data Controller

The data controller responsible for your personal data is ActiveSkill. For any privacy-related inquiries, you can contact us at:

3. Information We Collect

3.1 Information You Provide Directly

• Account Information: Username, email address, password (encrypted)
• Profile Picture: Uploaded profile images (resized to 200x200 pixels, stored as JPEG) or profile picture URL from Google if you sign in with Google
• Payment Information: Stripe customer ID and subscription ID (credit card details are handled directly by Stripe and never stored on our servers)
• Learning Content: Code submissions, exercise answers, chat messages with our AI tutor
• Profile Data: Learning progress, points earned, achievements unlocked
• Social Data: Group memberships, groups you create (including group names and invite codes), and your participation in group leaderboards

3.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on platform
• Technical Data: Browser type, device information, IP address
• Cookies: Session cookies for authentication, preference cookies for theme settings
• Learning Analytics: Exercise completion rates, scores, submission timestamps
• Leaderboard Data: Your ranking position, points earned within time periods, and any leaderboard snapshots you choose to share
• Notifications: In-app notifications about achievements, leaderboard changes, and group activity

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contract Performance: To provide our learning services (Art. 6(1)(b) GDPR)
• Consent: For analytics and marketing communications (Art. 6(1)(a) GDPR)
• Legitimate Interest: To improve our service, prevent fraud, and ensure security (Art. 6(1)(f) GDPR)
• Legal Obligation: To comply with tax and accounting requirements (Art. 6(1)(c) GDPR)

5. How We Use Your Information

• Provide Services: Create and manage your account, track learning progress, evaluate code submissions
• Process Payments: Handle subscription billing through Stripe
• Improve Platform: Analyze usage patterns to enhance features and content
• AI-Powered Features: Use OpenAI's API to evaluate code quality, provide personalized tutoring, and offer AI mentorship for projects (subject to usage limits based on your subscription plan)
• Social & Community Features: Display your first name, last initial, profile picture, and achievement badges on leaderboards; manage group memberships and group leaderboard rankings; deliver notifications about your achievements, leaderboard changes, and group activity
• Communication: Send service updates, respond to inquiries, provide customer support
• Security: Detect and prevent fraud, abuse, and security incidents

6. Third-Party Service Providers

We share your data with the following third-party processors:

Data Transfer Outside EU: When data is transferred to processors outside the European Economic Area (EEA), we ensure adequate safeguards through Standard Contractual Clauses (SCCs) or adequacy decisions.

7. Data Retention

• Account Data: Retained while your account is active
• Learning Progress: Retained while your account is active
• Code Submissions: Retained for the duration of your account plus 30 days
• Profile Pictures: Deleted immediately upon removal or account deletion
• Social Data: Group memberships, notifications, and leaderboard shares are deleted when your account is deleted. Groups you created may be transferred to another member or deleted
• Payment Records: Retained for 7 years for tax and accounting purposes
• After Account Deletion: Personal data is permanently deleted within 30 days, except where we have a legal obligation to retain it

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

To exercise any of these rights, contact us at support@activeskill.dev. We will respond within 30 days.

9. Cookies and Tracking

We use the following types of cookies:

• Essential Cookies: Required for authentication and core functionality (cannot be disabled)
• Preference Cookies: Remember your settings (e.g., dark mode theme)
• Analytics Cookies: Help us understand how you use the platform (requires consent)

You can manage cookie preferences in your Privacy Settings. See our Cookie Policy for more details.

10. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Password encryption using industry-standard scrypt hashing
• Secure session management with HTTP-only cookies
• HTTPS encryption for all data in transit
• Regular security audits and updates
• Limited employee access to personal data
• Client-side code execution (Pyodide) to prevent server-side vulnerabilities

11. Public Visibility of Your Data

Certain information is visible to other users of the platform:

• Leaderboards: Your first name, last initial, profile picture, achievement badges, and points are displayed on global leaderboards (daily and weekly) and group leaderboards visible to other users or group members respectively
• Groups: Your first name, last name, profile picture, and learning points are visible to other members of groups you join
• Shared Leaderboard Snapshots: If you share your leaderboard position, a snapshot containing the top 10 users' names, points, and badges is accessible via a shareable link
• Profile Pictures: Your profile picture, if uploaded, is visible to other users via leaderboards and group pages

12. Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately at support@activeskill.dev.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a prominent notice on our platform. Changes become effective 30 days after posting unless stated otherwise.

14. Contact Us

For any questions about this Privacy Policy or our data practices, please contact: