Privacy Policy
Last updated: May 25, 2026
Zimbabwe Compliance: This Privacy Policy complies with Zimbabwe's Data Protection Act (Chapter 11:22) and the Cyber Security Act (Chapter 12:07). We are committed to protecting your personal information and ensuring your rights under Zimbabwean law.
Account Information: When you sign in with Google, we collect your name, email address, and profile picture from your Google account.
Learning Data: We track your lesson progress, completed lessons, quiz answers, XP points, streaks, and AI tool usage to provide personalized learning experiences.
Usage Data: We collect anonymous usage statistics, page views, and feature interactions to improve the platform.
AI Queries: Questions you ask our AI tutor are stored temporarily for conversation context and quality improvement.
Advertising Data: We use Google AdSense to display advertisements. Google may use cookies and web beacons to serve ads based on your visits to this and other websites.
We use your data to:
- Provide and personalize your learning experience
- Track progress and award achievements
- Generate AI-powered explanations and feedback
- Improve our curriculum and platform features
- Display relevant advertisements (via Google AdSense)
- Send important account notifications
Firebase (Google): We use Firebase for authentication, database (Firestore), and storage. Firebase’s privacy policy applies to the data it processes on our behalf.
Google AdSense: We use Google AdSense to serve advertisements. AdSense uses cookies and tracking technologies. You can learn more about how Google uses data at Google’s Partner Sites Policy.
Google AI (Gemini): AI explanations are powered by Google’s Gemini API. Your queries are processed by Google under their privacy policy.
Sentry: We use Sentry for error monitoring. Sentry collects error reports and diagnostic data.
Your data is stored securely on Google Cloud Platform servers. We implement industry-standard security measures including encryption in transit (TLS) and at rest.
You can request deletion of your account and associated data at any time by contacting us.
Under Zimbabwe's Data Protection Act (Chapter 11:22), you have the right to:
- Access: Request access to your personal data held by us
- Correction: Request correction of inaccurate or incomplete personal data
- Deletion: Request deletion of your account and associated data (“right to be forgotten”)
- Portability: Receive your data in a structured, commonly used format
- Object: Object to processing of your personal data for direct marketing
- Withdraw Consent: Withdraw consent for data processing at any time
- Lodge Complaint: File a complaint with the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) if you believe your data rights have been violated
To exercise any of these rights, contact us via GitHub issues.
You may opt out of personalized advertising via Google Ad Settings.
For privacy-related inquiries, data access requests, or to report data breaches:
- GitHub: github.com/anomalyco/culturalcoder
- Submit an issue through our GitHub repository
For complaints about data protection violations under Zimbabwean law, you may contact:
Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ)
100 Golden Stairs Road, Harare, Zimbabwe
Website: www.psa.gov.zw
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:
- Account data: Retained until account deletion, plus 90 days for backup recovery
- Learning progress: Retained for 5 years after last activity for progress tracking
- AI conversation history: Retained for 30 days, then anonymized for training
- Analytics data: Anonymized after 26 months
After retention periods, data is securely deleted or anonymized.
Your data may be processed outside Zimbabwe by:
- Google (USA): Firebase, Gemini AI, AdSense — subject to standard contractual clauses
- Sentry (USA): Error monitoring — subject to appropriate safeguards
We ensure appropriate data transfer mechanisms are in place for international processing in compliance with the Data Protection Act.
Our Platform is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us immediately through GitHub.
This privacy policy complies with Zimbabwe's Data Protection Act (Chapter 11:22) and Cyber Security Act (Chapter 12:07).
View our related policies: Terms of Service, Disclaimer, Cookie Policy