Privacy Policy.

Last updated: 9 October 2026

Who we are

Percept is operated by Riyansh Diwan, trading as Percept (“we”, “us”). We are the data controller for personal data processed through this service.
Contact: privacy@example.com (TODO — replace with the real privacy contact email). You can reach us at this address for any privacy question or rights request.

What we collect

Account data — email address, display name, and (if you sign in with Google) the name and avatar Google shares. Auth is provided by Supabase.
Learning data — lessons completed, quiz answers, XP, streaks, bookmarks, certificates earned, capstone checks and project links you submit.
Onboarding answers — level, goals and preferred daily study time, used to recommend a starting track.
Nova chat data — the messages you send the AI tutor, and the replies generated. Messages are forwarded to our AI providers (Google Gemini, with OpenAI as fallback) to produce an answer. Do not paste secrets or sensitive personal data into chat.
Technical & analytics data — only with your consent: page views, clicks and device/browser metadata via PostHog. Without consent, no analytics runs (see the Cookie Policy).
Error diagnostics — if enabled, crash reports via Sentry containing stack traces and coarse device info.
Transactional email — streak reminder emails via Resend, if enabled on your account.
We do not collect precise location, contacts, payment card numbers (payments, when live, are handled by the payment processor), or browsing history outside Percept.

Legal bases (UK GDPR Art. 6)

Contract — account, learning progress, certificates, Nova replies: processing needed to provide the service you signed up for.
Consent — analytics cookies/storage (PostHog) and optional marketing email. You can withdraw consent at any time via the Cookie Policy page.
Legitimate interests — security monitoring, error diagnostics (Sentry), preventing abuse, improving the curriculum. We balance these against your rights and keep the data minimal.
Legal obligation — records we must keep for tax, accounting or regulatory reasons.

Processors

Supabase — database, authentication and file storage (data hosting; region as configured at deploy).
Google Gemini / OpenAI — AI inference for Nova chat (your messages only).
PostHog — product analytics (consent-gated).
Sentry — error monitoring (no tracking cookies).
Resend — transactional email delivery.
Netlify — hosting and content delivery.
Each processor acts under a data-processing agreement and only on our instructions.

International transfers

Some processors are US-based. Where personal data leaves the UK/EEA we rely on adequacy regulations or the UK IDTA / EU SCCs with the UK addendum, as provided by each processor.

Retention

Account and learning data is kept while your account is active. Delete your account (Settings → Delete account) and your profile, progress, certificates and Nova history are removed; backups roll off within 30 days.
Nova chat rows are tied to your account and deleted with it.
Analytics data in PostHog is retained per our project settings (≤ 12 months) and is not sent if you decline analytics.
Account deletion removes the data in our database, but does not remove data already held by our processors: PostHog analytics events and Sentry error reports are retained under their own retention windows. Contact privacy@example.com (TODO — replace with the real privacy contact email) to request their removal.
Certificate verify links stay live while the certificate exists; account deletion invalidates them.

Your rights

Access — download a full JSON export of your data from Settings → Download my data.
Rectification — edit your name and preferences in Settings, or ask us.
Erasure — delete your account in Settings, or email us.
Portability — the Settings export is machine-readable JSON.
Restriction & objection — email privacy@example.com (TODO — replace with the real privacy contact email) to restrict processing or object to legitimate-interest processing; analytics consent can be withdrawn via the Cookie Policy.
Complaints — you can complain to the UK Information Commissioner's Office (ico.org.uk). We'd appreciate the chance to resolve it first.
We aim to answer rights requests within one month.

Children

Percept is intended for users aged 13 and over, in line with the UK Age Appropriate Design Code and the UK's age of digital consent. We do not knowingly collect data from children under 13.
Signup requires confirming you are 13 or older. If you believe a child under 13 has created an account, contact us and we will delete it.

AI tutor disclaimer

Nova's answers are AI-generated and can be wrong. They are educational suggestions, not professional advice. Your messages are processed by third-party AI providers to generate replies — see the processors list.

Changes

If this policy changes materially we'll update this page and, for significant changes, notify signed-in users in the app. The 'last updated' date always reflects the current version.

Who we are

Percept is operated by Riyansh Diwan, trading as Percept (“we”, “us”). We are the data controller for personal data processed through this service.
Contact: privacy@example.com (TODO — replace with the real privacy contact email). You can reach us at this address for any privacy question or rights request.

What we collect

Account data — email address, display name, and (if you sign in with Google) the name and avatar Google shares. Auth is provided by Supabase.
Learning data — lessons completed, quiz answers, XP, streaks, bookmarks, certificates earned, capstone checks and project links you submit.
Onboarding answers — level, goals and preferred daily study time, used to recommend a starting track.
Nova chat data — the messages you send the AI tutor, and the replies generated. Messages are forwarded to our AI providers (Google Gemini, with OpenAI as fallback) to produce an answer. Do not paste secrets or sensitive personal data into chat.
Technical & analytics data — only with your consent: page views, clicks and device/browser metadata via PostHog. Without consent, no analytics runs (see the Cookie Policy).
Error diagnostics — if enabled, crash reports via Sentry containing stack traces and coarse device info.
Transactional email — streak reminder emails via Resend, if enabled on your account.
We do not collect precise location, contacts, payment card numbers (payments, when live, are handled by the payment processor), or browsing history outside Percept.

Legal bases (UK GDPR Art. 6)

Contract — account, learning progress, certificates, Nova replies: processing needed to provide the service you signed up for.
Consent — analytics cookies/storage (PostHog) and optional marketing email. You can withdraw consent at any time via the Cookie Policy page.
Legitimate interests — security monitoring, error diagnostics (Sentry), preventing abuse, improving the curriculum. We balance these against your rights and keep the data minimal.
Legal obligation — records we must keep for tax, accounting or regulatory reasons.

Processors

Supabase — database, authentication and file storage (data hosting; region as configured at deploy).
Google Gemini / OpenAI — AI inference for Nova chat (your messages only).
PostHog — product analytics (consent-gated).
Sentry — error monitoring (no tracking cookies).
Resend — transactional email delivery.
Netlify — hosting and content delivery.
Each processor acts under a data-processing agreement and only on our instructions.

International transfers

Some processors are US-based. Where personal data leaves the UK/EEA we rely on adequacy regulations or the UK IDTA / EU SCCs with the UK addendum, as provided by each processor.

Retention

Account and learning data is kept while your account is active. Delete your account (Settings → Delete account) and your profile, progress, certificates and Nova history are removed; backups roll off within 30 days.
Nova chat rows are tied to your account and deleted with it.
Analytics data in PostHog is retained per our project settings (≤ 12 months) and is not sent if you decline analytics.
Account deletion removes the data in our database, but does not remove data already held by our processors: PostHog analytics events and Sentry error reports are retained under their own retention windows. Contact privacy@example.com (TODO — replace with the real privacy contact email) to request their removal.
Certificate verify links stay live while the certificate exists; account deletion invalidates them.

Your rights

Access — download a full JSON export of your data from Settings → Download my data.
Rectification — edit your name and preferences in Settings, or ask us.
Erasure — delete your account in Settings, or email us.
Portability — the Settings export is machine-readable JSON.
Restriction & objection — email privacy@example.com (TODO — replace with the real privacy contact email) to restrict processing or object to legitimate-interest processing; analytics consent can be withdrawn via the Cookie Policy.
Complaints — you can complain to the UK Information Commissioner's Office (ico.org.uk). We'd appreciate the chance to resolve it first.
We aim to answer rights requests within one month.

Children

Percept is intended for users aged 13 and over, in line with the UK Age Appropriate Design Code and the UK's age of digital consent. We do not knowingly collect data from children under 13.
Signup requires confirming you are 13 or older. If you believe a child under 13 has created an account, contact us and we will delete it.

AI tutor disclaimer

Nova's answers are AI-generated and can be wrong. They are educational suggestions, not professional advice. Your messages are processed by third-party AI providers to generate replies — see the processors list.

Changes

If this policy changes materially we'll update this page and, for significant changes, notify signed-in users in the app. The 'last updated' date always reflects the current version.