Privacy Policy

BITELRN is the data controller for the personal data described in this policy. You can reach us at privacy@bitelrn.com.

We have not appointed a Data Protection Officer, as we are not required to under Article 37. Privacy questions go to the address above.

• Account data — your email address and display name. Passwords are hashed by Supabase Auth; we never see or store your password in readable form.
• Learning activity — which topics and lessons you open, quiz attempts and scores, confidence ratings, review counts, time spent per lesson, and the resulting progress state (your tile colours and review schedule).
• Subscription data — your plan, status, renewal or expiry dates, and identifiers issued by our payment provider. We do not collect or store your card details at any point.
• Promotional codes — codes you redeem and when.
• Technical data — aggregate, cookieless page view and visitor counts from Vercel Web Analytics. This does not identify you individually and sets no tracking cookies.
• Support correspondence — messages you send us and our replies.

We do not collect special category data (health, biometrics, political or religious views), and we ask that you do not send it to us.

We do not sell your personal data, and we do not share it for advertising. We use the following processors, each under a data processing agreement:

• Supabase — database, authentication and storage. Holds your account and learning data.
• Vercel — application hosting and cookieless analytics.
• Dodo Payments — payment processing. Dodo acts as Merchant of Record, meaning they are the seller of record and handle card data, billing and tax. Your card details go to Dodo directly and never pass through our systems. Dodo is a separate controller for the payment data it collects; see their own privacy notice.
• Google (Gemini API) — used to generate the lesson content in the library. Prompts contain topic and curriculum material only. No personal data, learning history or account information is sent to Google.

We may also disclose data where legally required, or to establish or defend legal claims.

Our processors may store or process data outside the UK and European Economic Area, including in the United States. Where that happens, transfers are covered by UK International Data Transfer Agreements, the EU Standard Contractual Clauses, or an adequacy decision, as applicable to the provider.

• Account and learning data — for as long as your account is open. Delete your account and we delete it, other than anything we must retain by law.
• Billing and tax records — retained for the period required by tax law in the relevant jurisdiction, typically six years, even after account closure.
• Support correspondence — up to two years after the matter is closed.
• Aggregate analytics — retained indefinitely in non-identifying form.

Under the UK and EU GDPR you have the right to access your data, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and withdraw consent where consent is our basis (for example, review reminder emails).

To exercise any of these, email privacy@bitelrn.com. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

If you are unhappy with our response you can complain to your local supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk).

We use strictly necessary cookies only — the session cookies that keep you signed in. We do not use advertising or cross-site tracking cookies, and our analytics are cookieless. Because we set no non-essential cookies, no consent banner is required. See our Cookie Policy for detail.

Bitelrn schedules your reviews automatically, based on your quiz scores, self-reported confidence and elapsed time. This decides when a topic is shown as due for revision. It has no legal or similarly significant effect on you, and you can ignore or override any suggestion at any time.

Bitelrn is intended for working professionals and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

Data is encrypted in transit and at rest by our infrastructure providers. Access to your data is restricted at the database level by row-level security policies, so one account cannot read another's. Administrative access is limited to those who need it. No system is perfectly secure, but we will notify you and the relevant supervisory authority of any breach that meets the statutory threshold.

We will update the date at the top when this policy changes. For material changes affecting your rights we will notify you by email or in the application before the change takes effect.

Privacy: privacy@bitelrn.com
General support: support@bitelrn.com

Grievances: grievance@bitelrn.com

Governed by the laws of India.