Privacy Policy

Concept Mode ("Concept Mode," "we," "us," or "our") operates the learning platform available at https://conceptmode.io (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

If you have questions about this policy, contact us at hello@conceptmode.io.

Account information you provide: email address, password (stored as a salted hash), display name, and optional profile details.

Learning activity: modules viewed, sections completed, progress timestamps, badge and certificate status.

Payment information: when you subscribe, our payment processor (Stripe) collects your billing details directly. We receive a customer ID, subscription tier, subscription status, and the last four digits of your payment method. We do not store full card numbers.

Communications: messages you send us, support requests, and email delivery events (opens, bounces, unsubscribes).

Technical data: IP address, browser type, device information, timestamps, and pages visited. This is collected automatically when you use the Service.

To provide and operate the Service, including authentication, saving your progress, and issuing badges and certificates.

To process payments, manage subscriptions, and send transactional messages (welcome emails, payment confirmations, password resets).

To improve the Service, understand which content is effective, and fix bugs.

To respond to your requests and provide customer support.

To comply with legal obligations and enforce our Terms of Service.

We process personal data on the following legal bases: performance of a contract (delivering the Service you signed up for), legitimate interests (improving the Service, security, fraud prevention), consent (optional marketing communications), and compliance with legal obligations.

We do not sell your personal information. We share data only with the following categories of service providers, under contractual data-protection commitments:

• Hosting and database infrastructure (Cloudflare, Supabase) — to run the Service.

• Payment processing (Stripe) — to process subscriptions.

• Email delivery (Resend, via our email infrastructure) — to send transactional and account emails.

• Analytics and error monitoring — to understand usage and diagnose problems.

We may also disclose information when required by law, to protect our rights, or in connection with a business transfer (e.g., merger or acquisition), in which case we will notify you.

We keep your account data for as long as your account is active. If you delete your account, we remove personal data within 30 days, except where we are required to retain records for legal, tax, or accounting purposes (typically up to 7 years for payment records).

Anonymised or aggregated data that cannot identify you may be retained indefinitely.

Depending on where you live, you may have the right to: access the personal data we hold about you; correct inaccurate data; delete your data; export your data in a portable format; object to or restrict processing; and withdraw consent for marketing emails at any time.

To exercise these rights, email hello@conceptmode.io. We will respond within the timeframes required by applicable law (typically 30 days).

California residents have specific rights under the CCPA/CPRA, including the right to know what personal information we collect and the right to opt out of any sale or sharing (we do not sell personal information).

We use strictly necessary cookies to keep you signed in and to remember your preferences. We may also use analytics cookies to understand usage. You can control cookies through your browser settings; disabling essential cookies may prevent the Service from functioning.

We use industry-standard measures to protect your data, including encryption in transit (TLS), encrypted password hashing, role-based access controls, and row-level security on our database. No system is perfectly secure, and we cannot guarantee absolute security.

Our providers may process data in the United States and other countries. Where required, we rely on Standard Contractual Clauses or equivalent safeguards to protect data transferred outside your region.

The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service. The date at the top of this policy indicates when it was last revised.

Questions or requests: hello@conceptmode.io

General contact: hello@conceptmode.io