Privacy Policy

1. Introduction

TypeBlossom ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our typing tutor application.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Email address
• Password (encrypted and never stored in plain text)
• Display name or username (optional)
• Payment information (processed securely through Stripe)

2.2 Usage Data

We automatically collect information about your use of the Service:

• Typing speed (WPM) and accuracy statistics
• Lesson and game progress
• Practice session duration and frequency
• Error patterns and improvement metrics
• Device type and operating system
• IP address and general location (country/region)

2.3 Optional Data

With your explicit consent, we may collect:

• Profile photo or avatar
• Analytics data (page views, feature usage) - can be disabled in settings
• Custom practice text and challenges you create

3. How We Use Your Information

We use collected data to:

• Provide and maintain the Service
• Track your progress and personalize your learning experience
• Process payments and manage subscriptions
• Send service-related notifications and updates
• Improve and optimize the Service
• Provide customer support
• Detect and prevent fraud or abuse

4. Data Storage and Security

4.1 Cloud Storage

Premium users' data is stored securely on Supabase (PostgreSQL) with encryption at rest and in transit. Servers are located in secure data centers with industry-standard physical and digital security measures.

4.2 Local Storage

The desktop app offers local-only storage using IndexedDB. When local mode is enabled, your data never leaves your device. You control when and if data syncs to the cloud.

4.3 Security Measures

• Passwords are hashed using bcrypt with salt
• HTTPS/TLS encryption for all data transmission
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Automated backups with encryption

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data in limited circumstances:

• Service Providers: Stripe (payments), Supabase (hosting), Resend (email delivery)
• Legal Requirements: When required by law or to protect our rights
• Anonymized Data: Aggregated, anonymized usage statistics for research
• With Your Consent: When you explicitly authorize sharing

6. Your Privacy Rights

You have the right to:

• Access: Request a copy of all data we have about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your data in a portable format (JSON)
• Opt-Out: Disable analytics and marketing communications
• Withdraw Consent: Revoke permissions at any time

To exercise these rights, contact us at privacy@typeblossom.app

7. Children's Privacy

TypeBlossom is designed for users of all ages, including children. We comply with COPPA (Children's Online Privacy Protection Act) requirements:

• Parental consent required for children under 13
• Minimal data collection for child accounts
• No behavioral advertising for children
• Parents can review and delete child account data

8. Cookies and Tracking

We use essential cookies for:

• Authentication and session management
• Remembering your preferences (theme, font, etc.)
• Security and fraud prevention

Optional analytics cookies can be disabled in Settings. We respect Do Not Track browser signals.

9. International Data Transfers

Your data may be transferred to and stored in countries outside your residence. We ensure adequate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (EU approved)
• GDPR compliance for European users
• Equivalent protection measures for all jurisdictions

10. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion:

• Personal data is deleted within 30 days
• Anonymized statistics may be retained for research (non-identifiable)
• Backup copies deleted within 90 days
• Legal retention requirements take precedence

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification. Your continued use after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or concerns:

Email: privacy@typeblossom.app

Data Protection Officer: dpo@typeblossom.app