Privacy Policy
Effective Date: May 5, 2025
1. Scope
This Policy applies to Tangent Global and any related sites, apps, or communications that link to it.
2. Information We Collect
| Category | Examples | Source |
|---|---|---|
| Account Data | name, e‑mail, password hash, profile image | User |
| Payment Data | last 4 digits, billing ZIP, Stripe customer ID | Stripe |
| Learning Activity | videos watched, quizzes taken, scores | Service (automatic) |
| Device/Usage Data | IP, browser, pages visited, cookies | Automatic |
| Marketing Data | opt‑in status, survey responses | User |
We do not collect full payment card numbers; Stripe handles that.
3. How We Use Information
- Provide and improve lessons, quizzes, and personalized word lists
- Process payments and manage subscriptions
- Send transactional e‑mails (receipts, progress reports, etc.)
- Conduct analytics and A/B testing
- Detect and prevent fraud or misuse
- Comply with legal obligations
4. Legal Bases (GDPR)
Where GDPR applies, we rely on contract performance, legitimate interests, consent, and legal compliance.
5. How We Share Information
| Recipient | Purpose |
|---|---|
| Stripe, Inc. | Payment processing & customer portal |
| Supabase, Inc. | Database hosting |
| Render, Inc. | Database hosting |
| Cloudflare, Inc. | Video streaming (Cloudflare Stream) |
We do not sell your personal data.
6. International Data Transfers
Data may be processed in the U.S. and other locations. We use Standard Contractual Clauses and other safeguards where applicable.
7. Data Retention
We keep data for as long as your account is active, or as needed to fulfill the purposes described. Aggregated/anonymized data may be retained indefinitely.
8. Security
TLS encryption in transit, Argon2‑hashed passwords, least‑privilege access controls, and periodic security audits are in place. No system is 100% secure—please keep your credentials safe.
9. Children's Privacy
If we learn we have collected data from a child under 13 without parental consent, we will delete it. Parents may contact us at legal@tangent.global.
10. Your Rights
Depending on your location, you may request access, correction, deletion, or portability of your data, or object to processing. E‑mail legal@tangent.global. We will respond within 30 days.
11. Do Not Track & "Do Not Sell"
We do not track users across third‑party sites for targeted ads, nor do we sell personal information as defined by the CCPA/CPRA. We honor Global Privacy Control signals where feasible.
12. Contact
E‑mail: legal@tangent.global
13. Changes to This Policy
We will post any material changes here and notify registered users at least 30 days before they take effect.