Our Commitment
CrunchCode is designed for learners of all ages. We take privacy seriously — especially for younger users. We collect the minimum data needed to run the platform.
What We Collect
Account Data
- Email address — for login (OTP authentication)
- Display name — optional, chosen by you
- Password — hashed, never stored in plain text
Usage Data
- Chat messages — your conversations with Spark (the AI mentor)
- Code and previews — projects you build during missions
- Progress data — XP, badges, milestones, mission completion
- Analytics events — page views, feature usage (anonymized)
Technical Data
- Browser type and device info (for responsive design)
- IP address — for rate limiting and security only
- Cookies — session authentication only, no tracking cookies
What We DON'T Collect
- Real names, addresses, or phone numbers
- School or classroom information
- Photos or videos
- Location data (GPS)
- Social media accounts
- Financial information
How We Use Your Data
- Running the platform — authentication, saving progress, displaying projects
- AI mentoring — your messages are sent to the AI to generate responses
- Improving the product — anonymized analytics help us make CrunchCode better
- Security — rate limiting, abuse prevention, session management
AI & Third Parties
- Chat messages are processed by Anthropic's Claude AI to generate mentor responses
- Anthropic's data practices: they do not train on API inputs
- Authentication is handled by Supabase (our database provider)
- Emails are delivered via Resend
Data Security
- All data encrypted in transit (HTTPS/TLS)
- Passwords hashed with bcrypt
- API keys stored server-side only, never in client code
- Row-Level Security on all database tables
- AI-generated content sandboxed in isolated iframes
Your Rights
- Access — request a copy of your data
- Delete — request deletion of your account and data
- Correct — update your email or display name anytime
- Export — download your projects and progress
To exercise any of these rights, email privacy@crunchcode.ai
Children's Privacy
CrunchCode is designed for users of all ages. We minimize data collection and never collect more than email + display name. We do not knowingly collect personal information beyond what is needed to operate the service. Parents/guardians can contact us to review, delete, or restrict their child's data.
Changes
We may update this policy. Significant changes will be communicated via email or an in-app notice.
Contact
Privacy questions? Email privacy@crunchcode.ai