Privacy policy

Challenge signup: first name, email address, phone number, and (optionally) your current role. Account data: name, email, and authentication details when you create a platform account. Payment data: handled by Stripe — we never see or store your card details, only subscription status. Usage data: lesson progress, feature usage, and analytics events.

Contract: delivering the challenge, curriculum, and subscription you signed up for. Legitimate interest: improving the programme, preventing abuse, and telling challenge participants about the paid programme. Consent: marketing emails and SMS follow-ups — withdraw at any time via the unsubscribe link, replying STOP, or emailing us.

We use a small set of processors to run the service: Supabase (database & authentication), Stripe (payments), Resend (transactional email), Kit (email sequences), HubSpot (CRM), Twilio (SMS), Mixpanel (product analytics), Mux (video delivery), Slack (community), and Cloudflare (hosting). Each processes data under a data processing agreement, and where data leaves the UK/EEA it is protected by appropriate safeguards such as the UK Addendum to Standard Contractual Clauses.

Challenge signups that never convert are deleted or anonymised within 24 months of the last interaction. Account and progress data are kept for as long as your account exists and deleted on request. Payment records are retained for 6 years as required by UK tax law.

You can ask us for access to, correction of, or deletion of your personal data; ask us to restrict or object to processing; and receive your data in a portable format. See GDPR & your data for how to exercise these rights. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Data questions and requests: privacy@codehance.com.