Privacy policy
Plain language, because that's the point of a privacy policy.
What we collect
What you give us to run your account: email address, name, password (stored hashed — we can never see it), your skill level, lesson progress and notes, and anything you post in the forum. If you sign in with Google, we receive your name and email from Google.
What we don't do
We don't sell your data. We don't run advertising. We don't collect anything from children under 13 — accounts require you to be 13 or older.
Where it lives
Account data is encrypted at rest and protected by strict access controls — the database itself refuses to show your data to anyone but you. Transactional email (confirmations, password resets) is delivered from xpex.ai addresses.
Payments
Paid memberships aren't live yet. When they launch, payment details will be handled entirely by Stripe — card numbers never touch our servers.
Cookies
We use only essential cookies: the ones that keep you signed in. No tracking cookies, no third-party ad cookies.
Your controls
You can update your profile anytime. To delete your account and all associated data, email hello@xpex.ai — done within 30 days. Marketing email, when it exists, will be opt-in with one-click unsubscribe.
Changes
If our practices change materially, we'll say so on the site before the change takes effect. Last updated July 2026.