Privacy

We keep as little as we can, and nothing about you until you sign in.

For Kay to confirm before launch.

Who runs the site as the data controller: a legal name and a postal address.
A contact email for privacy requests, for the Contact section below.
How long to keep accounts that stop being used. Today they stay until the person deletes them.
How long to keep the activity log. Today it stays as long as the account.
Whether to keep the name and picture link Google sends once Google sign-in is on. BUILD.md lists only email, progress, quiz results, waitlist consent and sessions.
The lawful bases under “Why we’re allowed to”, and Cloudflare’s and Google’s terms for data held outside the UK.
Whether an unsubscribed address is kept, marked unsubscribed, as now, or deleted.
How long to keep weekly-note sign-ups that are never confirmed. Today nothing removes them.

What we count when you’re signed out

When you open a page, start or finish a lesson, or answer a check, we add one to a daily total, such as “lesson 2 was started 12 times on 14 October”. Nothing is attached to the total: no name, no email, no cookie and no ID for your device.

To stop anyone flooding the site, we also count how often each internet address asks for a sign-in link, joins a list or sends those page and lesson counts, and how often each email address asks for a sign-in link or the weekly note. The address is scrambled with a secret key that changes every day before it’s stored, and the counts are deleted after a day.

What we keep in your browser

Your browser keeps these on this device. None of it reaches us unless you sign in, and there are no cookies until you do.

Your progress: Which lessons you started and finished, when, how long each was open, your check scores, and the screen you reached in a lesson you haven’t finished. It stays until you clear this site’s data in your browser.
Where you came from: The tags in the link that brought you (such as utm_source or ref), the site that sent you, and the first page you opened. It’s kept in this tab and empties when you close it. If you ask for a sign-in link, a copy stays for up to an hour, so the tab that opens the link can still send it.
Choices you tick before signing in: If you tick email choices on a lesson’s sign-up step, they wait here for up to an hour, so they can be saved once you’ve signed in.
After you sign in: A note that you’re signed in, so the header says My course at once, and your account’s ID once your arrival details have been sent, so they’re sent only once.
Site settings: Which ways to sign in are switched on, so a lesson or My course shows the right sign-in buttons straight away. Nothing about you.

What we store when you sign in

Signing in keeps your progress on every device. We store:

Your account: Your email address and when you made the account. With Google sign-in, also the name and picture link Google sends.
Your progress: When you started and finished each lesson, how long it was open, your check scores, and your lesson receipts.
What you do here: Each time you open a page, reach a lesson step, finish a lesson or answer a check (right or wrong), with the time. For a lesson we note which lesson; for any other page, only that you opened one. Kay uses it to see where lessons are hard to follow.
Where you came from: The link tags, the site that sent you and the first page you opened, sent once after you first sign in.
Your last visit: When you last opened My course, so it can show what changed since.
Your sign-in: A random session token, when it expires, and the line your browser sends to describe itself (its name, version and system), but not your internet address. Sign-in links are stored scrambled; each works once and expires after 15 minutes.

Signing in sets one cookie, which only this site can read. It keeps you signed in for 30 days, counted from when you last used the site.

Your email choices

Every email choice starts off. When you turn one on, we store the exact sentence you saw beside it and the time, as the record that you chose it. If you turn it off, the emails stop, and the earlier record stays as history.

You can change your choices at any time in My course, or with the unsubscribe link in any email.

You can also join a list without an account. Joining the waitlist stores your email address, the sentence beside the box, the time and the page you joined from. Asking for the weekly note stores your address, the words on the button and the time; nothing but the confirmation email is sent until you use the link in it.

The emails we send

Sign-in links: Only when you ask for one.
Confirming the weekly note: One email when you ask for the weekly note without an account. Nothing else is sent until you use its link, which works for 7 days.
The weekly x402 note: Once a week, if you chose it.
Lesson changes: When a lesson you started changes, or a new lesson arrives, if you chose it.
Kay’s AI school community: News about the community, if you joined the waitlist.

Every one of these except sign-in links and the confirmation has a one-click unsubscribe link. Links in our emails carry a tag that says they came from an email, so we can count visits that came that way. A copy of each email we send, with your address, is kept for 30 days and then deleted.

Who can see your data

Kay can see the account details above for each learner on the course’s admin board, and can download the email lists and the list of accounts as spreadsheets.

The site, its database and its emails run on Cloudflare. If you use Google sign-in, Google handles that step. We don’t sell your details or share them with anyone else.

How long we keep it

Your account, progress, activity and choices: Until you delete your account.
Sign-in sessions: 30 days after you last use the site.
Sign-in links: Until used, or soon after they expire at 15 minutes.
Copies of emails sent: 30 days.
Counts by internet or email address: One day.
Daily totals: Kept. They hold nothing about you.
The waitlist, and the weekly note without an account: Until you leave. Turning the waitlist off in My course deletes your entry. The unsubscribe link in an email keeps the address, marked unsubscribed, so it isn’t emailed by mistake; ask us and we’ll delete it.
Weekly-note sign-ups never confirmed: Kept for now, marked unconfirmed. Nothing more is sent unless the address is entered again. Ask us and we’ll delete yours.

How to delete everything

In My course, choose Delete my account. It removes your account, progress, receipts, activity, email choices and their records, where you came from, your sessions, a linked Google sign-in, unused sign-in links, and any emails waiting or kept for you, including a weekly-note sign-up on the same address. Your waitlist entry goes too, unless you choose to keep it. The progress on the device you use is cleared as well.

Without an account, use the unsubscribe link in any email, and ask us if you want the address deleted outright.

Why we’re allowed to

Your account and progress: You asked us to keep them, and we need them to do it.
Your activity, and where you came from: Our legitimate interest in making the lessons easier to follow.
Email lists: Your consent, which you can take back at any time.
Counts by internet or email address: Our legitimate interest in keeping the site safe from abuse.

Contact

Contact details for privacy requests will be added here before launch.

If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.