Legal

Privacy Policy

At Codeance, your privacy matters. This policy explains what data we collect, how we use it, and the controls you have over your information.

Last updated: March 2026

1. Information We Collect

Account information — name, email address, and password (stored as a bcrypt hash) when you register.
Profile data — optional details such as your bio, avatar, and career interests.
Learning activity — course enrollments, lesson progress, quiz results, and code submissions.
Usage data — pages visited, features used, and time spent on the platform to improve our services.
Device & log data — IP address, browser type, and error logs for security and debugging purposes.

To create and maintain your account and provide access to our learning platform.
To personalise your learning experience through AI-driven recommendations and adaptive content.
To track your progress and generate performance analytics for you and your instructors.
To communicate important service updates, security alerts, and (with your consent) promotional content.
To improve platform features, fix bugs, and develop new AI capabilities.

We do not sell your personal data to third parties.
Instructors can view the progress of students enrolled in their courses.
We may share anonymised, aggregated analytics to demonstrate platform effectiveness.
We use trusted third-party services (Google Gemini AI, Cloudinary, Vapi) to operate the platform; they are bound by data processing agreements.
We may disclose data if required by law or to protect the rights, safety, or property of Codeance and its users.

All passwords are hashed using bcrypt before storage — we never store plain-text passwords.
Authentication sessions are managed via signed JWT tokens with a 7-day expiry.
Data in transit is encrypted using TLS/HTTPS.
Access to production databases is restricted to authorised personnel only.
We conduct periodic security reviews and promptly address identified vulnerabilities.

Access — you may request a copy of the personal data we hold about you.
Correction — you may update inaccurate or incomplete profile information at any time.
Deletion — you may request deletion of your account and associated data.
Portability — you may request your data in a machine-readable format.
Objection — you may opt out of non-essential communications at any time via your profile settings.

Codeance is not directed at children under the age of 13.
We do not knowingly collect personal data from children under 13.
If you believe a child has provided us with their information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or the law.
We will notify registered users of material changes via email or an in-app notification.
Continued use of the platform after changes are published constitutes acceptance of the updated policy.

Our team is happy to clarify anything about how your data is handled.