Privacy Policy

1. What We Collect

When you create an account, we collect:

• Username and full name (chosen by you)
• Email address (for authentication)
• Password (stored as a secure hash — we never see your plain password)

When you use the platform, we store:

• Lesson progress and quiz scores
• Red Flag Trainer scores and accuracy
• Badges earned and XP points

2. What We Do NOT Collect

• We do not track your browsing activity outside CyberEduc
• We do not use analytics tools like Google Analytics
• We do not use advertising trackers or pixels
• We do not collect your IP address for profiling
• We do not sell or share data with third parties
• We do not use cookies for tracking purposes

3. How We Use Your Data

Your data is used exclusively to:

• Authenticate you (login and account management)
• Track your learning progress and display it on your profile
• Award badges based on your achievements
• Generate your certificate when you complete all lessons

4. Where Your Data is Stored

Your data is stored securely on Supabase, a hosted PostgreSQL database service. Data is encrypted in transit (TLS) and at rest. Servers are located in the European Union.

5. Data Security

We implement the following security measures:

• Passwords are hashed using bcrypt (never stored in plain text)
• Authentication tokens (JWT) expire after 24 hours
• Row Level Security (RLS) ensures users can only access their own data
• All API communications use HTTPS encryption
• Admin access is restricted and monitored

6. Your Rights

You have the right to:

• Access your data — visible on your Profile page at any time
• Edit your data — via the Edit Profile feature
• Reset your progression — erases all lesson progress, scores, and badges
• Delete your account — permanently removes all your data from our servers

All of these actions are available in the Settings menu. No need to contact us.

7. Children's Privacy

CyberEduc is designed as an educational platform suitable for users of all ages. However, users under 13 must have parental consent to create an account. We do not knowingly collect personal information from children under 13 without parental consent.

8. Open Source Transparency

CyberEduc is fully open source. You can review exactly what data we collect and how we handle it by inspecting the source code on GitHub. Transparency is not just a policy — it's built into the code.

9. Changes to This Policy

We may update this Privacy Policy as the platform evolves. Changes will be posted on this page with an updated date. We will never retroactively reduce your privacy protections without notice.