Privacy Policy
Last updated: July 2026
1. Information We Collect
When you create an account, we collect your email address and, optionally, your display name. If you sign in through Google or Apple, we receive identity information that provider shares, which may include your email and public profile details.
When you use account learning tools, we store lesson and practice completion, learning plan choices, bookmarks, lesson notes, and quiz results so they can sync across devices. We also collect usage data such as pages visited and feature interactions to improve the Service.
If you enable lesson personalization, we store your teaching-style preferences, context you enter about your experience, resume-derived learning context, and generated lesson versions. Resume upload is optional.
2. How We Use Your Information
We use your information to:
- Provide and maintain the Service
- Manage your account and saved progress
- Send you service-related communications
- Improve and personalize your experience
- Analyze usage patterns and optimize performance
3. Data Storage & Security
Account data is stored using Supabase with row-level security policies that restrict each learner's saved study data to that account. Local study state may also be stored in your browser until it syncs or you clear site data.
When you upload a resume for personalization, LeetLLM sends file bytes to Google's Gemini API to extract teaching-relevant experience. LeetLLM doesn't store original resume bytes. It stores only filename and derived learning context, which you can review and clear in personalization settings.
When you personalize a lesson, LeetLLM sends lesson content and saved learner preferences to OpenAI Codex first, with Google Gemini as fallback. Generated lessons remain private to your account and can be reset from lesson controls.
4. Third-Party Services
We use the following third-party services:
- Supabase: Authentication and database
- Google Cloud: Application hosting
- Google: OAuth authentication, site analytics, and optional Gemini-powered resume and lesson personalization
- OpenAI: Optional Codex-powered lesson personalization
- Apple: OAuth authentication
5. Cookies
We use httpOnly cookies for session management. These are essential for authentication and cannot be used to track you across other websites.
6. Your Rights
You have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your account and data
- Export your data in a portable format
- Clear resume-derived context and personalized lessons from personalization controls
7. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where required by law.
8. Contact
For privacy-related questions, please contact us at [email protected].