Privacy Policy

This Privacy Policy explains how Leveling Up AI, operated by Senergy Solutions (“we”, “us”), collects, uses, and protects your information when you use www.levelingupai.com(the “Service”). By using the Service you agree to this policy.

Information we collect

Information you give us

• Account details — your name, email address, and (if you sign up with a password) a securely hashed password. If you sign in with Google, we receive your name, email address, and profile picture from Google.
• Content you post — community posts, comments, direct messages, and any other material you submit.
• Waiting list — the email address you provide to be notified about upcoming courses.
• Support correspondence — messages you send us.

Information collected automatically

• IP address — recorded when you sign up and when you log in. We use it to detect and block spam, fraudulent signups, and abuse.
• Learning activity — lessons and steps you complete, XP earned, badges, streaks, and progress. This powers your dashboard and the leaderboards.
• Essential cookies — we use cookies to keep you signed in and to keep your session secure. We do not use advertising or cross-site tracking cookies.

Payment information

Payments are processed by Stripe. We never see or store your full card number, CVC, or expiry date. We store only your Stripe customer and subscription identifiers, your plan, its status, and the renewal date.

How we use your information

• To create and operate your account and deliver the courses.
• To track your learning progress, XP, badges, and streaks.
• To process subscriptions, renewals, and cancellations.
• To send service messages such as email confirmation, password resets, and important account notices.
• To keep the platform safe — preventing spam, bot signups, and abuse, and enforcing our Terms of Service.
• To send course announcements and marketing emails if you asked for them (you can unsubscribe at any time).

We do not sell your personal information, and we do not share it with advertisers.

Service providers we share data with

We share the minimum information necessary with the providers that run our infrastructure:

• Supabase — database, authentication, and file storage.
• Vercel — website hosting and delivery.
• Stripe — subscription payments and billing.
• Resend — transactional email (confirmations, resets).
• Mailchimp — waiting-list and marketing email.
• Cloudflare Turnstile — bot and abuse protection at signup.
• Vimeo and YouTube — video hosting and playback. Watching an embedded video may allow those providers to set their own cookies; we use privacy-enhanced YouTube embeds where possible.
• Google — only if you choose to sign in with Google.

We may also disclose information if required by law, or to protect our rights, users, or the security of the Service.

What other members can see

Your display name, profile picture, level, and XP are visible to other signed-in members through the members directory and leaderboards, as is anything you post publicly in the community. Your email address is never shown to other members. Direct messages are visible only to you and the person you are messaging.

Data retention

We keep your information for as long as your account is active. If you delete your account, we remove your profile, progress, posts, and messages from our live systems. Limited records may be retained where required for legal, tax, accounting, or fraud-prevention purposes — for example, billing records held by Stripe, and email addresses or IP addresses retained on our ban list to prevent repeat abuse. Backups are overwritten on a rolling schedule.

Security

We protect your data with encryption in transit (HTTPS), database-level row security so members can only access their own data, hashed passwords, and restricted administrative access. No online service can promise perfect security, but we work hard to protect your information and will notify you of any breach affecting your personal data as required by law.

Your rights and choices

• Access and correction — view and update your details on your account page.
• Deletion — request deletion of your account and personal data by emailing us.
• Marketing opt-out — unsubscribe from any marketing email using the link in the message. Service emails about your account will still be sent.
• Regional rights — depending on where you live (for example under GDPR or the CCPA), you may have additional rights including data portability, restriction of processing, and the right to object. We honour these requests regardless of location. We do not sell personal information.

To exercise any of these, email support@levelingupai.com.

Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it. Members under 18 should use the Service with a parent or guardian's involvement.

International users

We operate in the United States, and your information is processed and stored there and in other countries where our service providers operate. By using the Service you consent to this transfer.

Changes to this policy

We may update this policy from time to time. We will change the “Last updated” date above and, for significant changes, notify you by email or through the Service.

Contact us

Questions about privacy? Email support@levelingupai.com.