Plain-language summary
- We store the minimum needed to give you progress tracking and analytics.
- We do not store the raw stream of keys you press — only aggregate stats per session.
- We do not sell or share your data with advertisers.
- You can delete your account at any time — all your data is deleted within 30 days.
What we collect
Account data
Name, email address, and a hashed password (or your Google account ID if you sign in with Google). Layout preference (Avro / Bijoy / English) and daily goal.
Practice data
Per session: the lesson or game ID, start and end timestamps, total characters typed, error count, words-per-minute, accuracy percentage, and a per-finger error histogram. We do not log the actual sequence of keys you pressed.
Technical data
IP address (used only for rate limiting and abuse prevention, not stored long-term), browser user-agent (used to load the right keyboard hints), and a session cookie for login.
What we don't collect
- Raw keystrokes or the text you type.
- Cross-site tracking cookies. We don't use Google Analytics or Facebook Pixel.
- Microphone or camera. We never request these permissions.
- Location beyond country-level inferred from IP for choosing default language.
How we use your data
- To show you your progress, leaderboard rank, and personalized practice suggestions.
- To run the multiplayer typing race feature (your name and avatar are visible to other racers in the same room).
- To debug and improve the product (aggregated stats only — never linked to individuals in our analysis).
Data sharing
We do not sell or share personal data with third parties for advertising or marketing. We share data only with:
- Cloud infrastructure — DigitalOcean (server hosting) and Cloudflare (DNS, DDoS protection).
- Google OAuth — only if you choose to sign in with Google. Google receives your interaction with their login screen; we receive your email and name.
- Legal compliance — if compelled by valid legal process, we will comply with the minimum necessary scope.
Cookies
We use one session cookie for login (`better-auth.session_token`) and a theme preference cookie. No third-party tracking cookies. See cookie policy.
Your rights
- Access — see all the data we have on you on your profile page.
- Export — email us and we'll send you a JSON dump within 30 days.
- Delete — delete from the profile page, or email us. Account and all related data is removed within 30 days.
- Correct — fix your name or email from the profile page.
Children
LearnType is suitable for users 13 and over. We do not knowingly collect data from children under 13. If you believe a child has created an account, email us and we'll delete it.
Changes to this policy
We'll post the date of the most recent change at the top. Material changes (new categories of data, new sharing partners) will be announced via email to all registered users at least 14 days before they take effect.
Contact
Questions about privacy? Contact us or email hello@learntype.app.