Privacy Policy

1. Introduction

This Privacy Policy explains how Wasatch Web Studio LLC, the operator of Belay ("Belay", "we", "us"), collects, uses, and shares information when you use our websites, apps, and services (the "Service"), and it explains your privacy rights. By using the Service, you agree to this Policy.

2. Information we collect

Information you give us

• your name and email address;
• a password, which we store only as a secure hash (we never see it in plain text);
• your placement-quiz answers and profile preferences;
• payment details you enter, which are processed by our payment processor (we do not store full card numbers); and
• any messages you send us.

Information from Google sign-in

If you sign in with Google, we receive basic profile information from your Google account, such as your name, email address, profile picture, and a Google account identifier. We do not receive your Google password.

Information collected automatically

• learning activity and progress (lessons completed, XP, streaks, review schedule);
• device and log data (such as IP address, browser type, pages viewed, and timestamps); and
• cookies and similar technologies (see Section 7).

Information you send to the AI tutor

When you use the AI tutor, we process the messages you send and the related lesson context in order to generate responses. See Section 6 for how this is shared.

3. How we use your information

• to provide, personalize, and save your progress in the Service;
• to create and secure your account;
• to process payments and manage your subscription;
• to operate the AI tutor and other features;
• to communicate with you about your account, updates, and support;
• to improve and develop the Service;
• to detect, prevent, and address fraud, abuse, and security issues; and
• to comply with our legal obligations.

4. Legal bases (for EU and UK users)

Where the GDPR or UK GDPR applies, we process your information on these bases: to perform our contract with you (providing the Service you signed up for); our legitimate interests (keeping the Service secure and improving it), balanced against your rights; your consent (for example, for optional cookies or marketing, where required); and to comply with legal obligations.

5. How we share your information

We do not sell your personal information. We share it only as described here.

Service providers (sub-processors)

• authentication: Google, when you use Google sign-in;
• payments: our payment processor (for example, Stripe), to take payments;
• AI features: our AI provider (currently Anthropic), to power the AI tutor; and
• operations: hosting, storage, email, and analytics providers that help us run the Service.

These providers may use your information only to perform services for us.

Legal and safety

We may disclose information if required by law or to protect the rights, safety, and security of our users, the public, or Belay.

Business transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in who controls your personal information.

6. The AI tutor and third-party AI

The AI tutor is powered by a third-party AI provider (currently Anthropic). When you use it, the content of your messages and the relevant lesson context are sent to that provider so it can generate a response, and they are handled under that provider's terms and privacy commitments.

We access this provider under a commercial arrangement and do not permit your inputs to be used to train third-party AI models. AI responses can be inaccurate, so please verify anything important, and do not enter sensitive personal information (such as government IDs, or health or financial details) into the AI tutor.

7. Cookies and similar technologies

We use cookies and local storage to keep you signed in, remember your preferences (such as light or dark theme), save your progress, and understand how the Service is used. Essential cookies are required for the Service to work. You can control non-essential cookies through your browser or, where offered, our cookie settings. Blocking some cookies may affect how the Service works.

8. Data retention

We keep your information for as long as your account is active and as needed to provide the Service. We also keep some information for legal, accounting, or security reasons. When it is no longer needed, we delete or anonymize it. You can ask us to delete your account and associated data at any time (see Section 9).

9. Your privacy rights

Everyone

You can access and update most of your information in your account, and you can ask us to delete your account.

EU and UK (GDPR)

You have the right to access, correct, delete, restrict, or object to our use of your personal data, the right to data portability, and the right to withdraw consent at any time. You can also lodge a complaint with your local data protection authority.

California (CCPA and CPRA)

You have the right to know what personal information we collect and how we use and share it, to request deletion or correction, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined by California law. We will not discriminate against you for exercising your rights.

How to exercise your rights

Email us at hello@takebelay.com and we will respond within the time required by law. We may need to verify your identity first.

10. Security

We use technical and organizational measures to protect your information, such as encryption in transit, hashed passwords, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to notify you and the authorities of breaches where required.

11. International data transfers

We may process and store your information in countries other than where you live, including the United States. Where we transfer personal data from the EU, UK, or other regions, we use appropriate safeguards (such as standard contractual clauses) as required by law.

12. Children's privacy

The Service is not directed to children. You must be at least 16 to use Belay. We do not knowingly collect personal information from children under 13 (or under the minimum age in your country). If you believe a child has provided us information, contact us and we will delete it.

13. Links to other sites

The Service may link to third-party sites and resources. We are not responsible for their privacy practices, so please review their policies.

14. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you (for example, by email or an in-app notice) and update the "Last updated" date at the top.

15. Contact us

For any privacy question, or to exercise your rights, email hello@takebelay.com.