Privacy Policy

1. Who we are

Byter Academy is operated by Bloodstone Ltd (“we”, “us”, “our”), registered in England and Wales. Our registered address is 33 Cavendish Square, Mayfair, London W1G 0PW. For data protection queries, contact us at hello@byter.com.

2. What data we collect

We collect the following personal data:

• Account information: email address, full name, and profile data you provide when registering
• Authentication data: login method (magic link or Google OAuth), session tokens
• Learning progress: lesson completions, quiz scores, capstone submissions, bookmarks
• Payment data: processed securely by Stripe — we do not store card details
• Usage data: pages visited, features used, device type, and browser information

3. How we use your data

• To provide and maintain the Byter Academy platform
• To track your learning progress and issue certificates
• To process subscription payments via Stripe
• To send transactional emails (welcome, progress reminders, certificates) via Resend
• To provide AI-powered capstone feedback via our AI engine
• To improve the platform based on aggregated usage patterns

4. Legal basis for processing

We process your personal data under the following legal bases (UK GDPR):

• Contract: to provide the services you signed up for
• Legitimate interest: to improve our platform and communicate relevant updates
• Consent: for marketing communications (you can opt out at any time)

5. Data sharing

We share data with the following third-party services:

• Supabase (EU-West) — database and authentication
• Stripe — payment processing
• Vercel — hosting and analytics
• Resend — transactional email delivery
• Anthropic — AI-powered feedback (capstone submissions only)

We do not sell your personal data to any third party.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Anonymised usage data may be retained for analytical purposes.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your personal data (“right to be forgotten”)
• Restrict processing of your data
• Data portability — receive your data in a structured format
• Object to processing based on legitimate interest
• Withdraw consent for marketing communications at any time

To exercise any of these rights, email us at hello@byter.com.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies. Analytics data is collected via Vercel Analytics in an anonymised, cookie-free manner.

9. Changes to this policy

We may update this privacy policy from time to time. We will notify registered users of any material changes via email. The “Last updated” date at the top of this page indicates when this policy was last revised.

10. Contact

If you have any questions about this privacy policy or how we handle your data, please contact us at hello@byter.com or write to us at: Bloodstone Ltd, 33 Cavendish Square, Mayfair, London W1G 0PW.