Privacy Policy

AI Mastery (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect when you use the AI Mastery website, curriculum, tools, and related services (the “Service”), how we use it, and the choices you have.

1. Information we collect

Account information. When you create an account we collect your email address and a password. We do not support sign-up via Google or any other social login provider. Passwords are hashed and stored by our authentication provider (Supabase); we never see or store them in plain text.

Payment information. Payments are processed by Lemon Squeezy, our merchant of record. We receive a record of your purchase (order ID, product purchased, amount, status) but we do not receive or store your payment card details.

Content you create. Material you save within the Service — your daily progress, lesson notes, saved prompts, and deliverables — is stored in our database so we can sync it back to you on any device.

Analytics. We may use a lightweight analytics service (such as Vercel Analytics, Plausible, PostHog, or Google Analytics) to understand how the Service is used in aggregate — for example, which pages are visited, approximate geographic region, device type, and referring source — so we can improve the product. Analytics providers receive standard request metadata (IP address, user agent) and anonymised event data. We do not use analytics for targeted advertising, and we do not sell the data. If we add, change, or remove analytics providers, we will update the list below and the effective date at the top of this page.

Cookies and browser storage. We use strictly necessary cookies to keep you signed in (managed by our authentication provider), a short-lived session value in your browser’s sessionStorage during checkout, and an entry in localStorage to remember UI preferences like your chosen theme. We do not use advertising or cross-site tracking cookies.

2. How we use your information

We use the information we collect to:

• Provide and maintain the Service;
• Authenticate you and manage your account;
• Process purchases and grant access to the track you bought;
• Send transactional emails — specifically, a welcome email after free sign-up, and a setup or access email after a paid purchase;
• Sync your progress, notes, and prompts across devices;
• Respond to support requests;
• Detect and prevent fraud or abuse.

We do not sell your personal information. We do not use your data for targeted advertising, and we do not send marketing newsletters from the Service.

3. Third-party services

We rely on a small number of third-party services to operate:

• Supabase — authentication and database hosting. Your account, progress, notes, prompts, and payment records are stored in Supabase-managed infrastructure, with row-level security policies that restrict access to your own rows.
• Lemon Squeezy — payment processing and merchant of record. When you make a purchase, your payment details are handled by Lemon Squeezy under their own privacy policy.
• Brevo — transactional email delivery. Your email address is shared with Brevo solely to deliver the welcome and purchase emails listed above.
• Vercel — website hosting and edge delivery.
• Google Fonts — the web fonts used by the site are delivered from Google’s font CDN, which receives standard request metadata (IP address, user agent) when your browser loads a page.

Each provider processes data according to their own privacy policy. We only share the minimum information required for each service to function.

4. Data retention

For paid accounts (Level 1, Level 2, Bundle), we retain your account information and content for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required by law to retain certain records (e.g. payment records for tax or legal compliance).

Free-tier accounts expire automatically 7 days after sign-up. When a free-tier account expires, access is removed and material saved against the free tier (progress, notes, prompts) is deleted. You can sign up again for a fresh free tier at any time.

5. Data security

We use industry-standard measures to protect your data, including encrypted connections (TLS), row-level security policies on our database, and secure authentication tokens. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Request deletion of your data;
• Export your data in a portable format;
• Object to or restrict certain processing of your data.

To exercise any of these rights, contact us using the details in Section 10 below. We will respond within 30 days.

7. Children’s privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from anyone under 16. If we learn that we have collected data from a child under 16, we will delete it promptly.

8. International transfers

Our service providers may process data in countries other than your own. By using the Service, you consent to the transfer of your information to those countries. We ensure that appropriate safeguards are in place in accordance with applicable data protection laws.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

10. Contact

Questions about this Privacy Policy or your data? Reach us via the support channel linked from your account, or by replying to any email we have sent you about your purchase.