Privacy Policy

1. Information We Collect

We collect the following information when you use Manabu:

• Account information: email address, display name, and avatar (emoji)
• OAuth data: if you sign in with Google or X, we receive your name and email (or a platform identifier) from those providers
• Learning data: courses you generate, chapter completion status, XP, and streak
• Usage data: general app activity to improve the service

2. How We Use Your Information

• To provide and sync your learning progress across sessions
• To authenticate you and keep your account secure
• To personalise AI-generated course content
• To improve the platform

3. Third-Party Services

Manabu uses the following third-party services that may process your data:

• Groq: AI inference for course and lesson generation. Prompts include your selected topic but not personal account data.
• Google OAuth: if you choose to sign in with Google
• X (Twitter) OAuth: if you choose to sign in with X
• DuckDuckGo / Wikipedia: used to fetch context for lesson generation; no personal data is sent

4. Data Storage

Your account and progress data is stored in a secure SQLite database on our server. Lesson content is cached locally in your browser's IndexedDB storage and is not transmitted to third parties.

5. Cookies and Local Storage

We use short-lived HTTP cookies only during the OAuth login flow (to store PKCE state). After login, your session is maintained via a JWT stored in your browser's localStorage. We do not use tracking or advertising cookies.

6. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and associated data by contacting us through the app.

7. Security

Passwords are hashed using bcrypt and never stored in plaintext. JWTs are signed and have a 7-day expiry with automatic refresh. We take reasonable measures to protect your data but cannot guarantee absolute security.

8. Children's Privacy

Manabu is not directed at children under 13. We do not knowingly collect personal information from children under 13.

9. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. Contact us through the app to exercise these rights.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised date.

11. Contact

For privacy-related questions or data requests, please contact us through the Manabu app.