Your data and privacy

What is stored

An account stores your name, email, language preference and authentication settings. Private learning records include reading/practice markers, resume positions, bookmarks, notes, and quiz attempts/results. Session cookies keep you signed in and protect forms; a guest session can remember a language choice.

Study plans keep your goal, budget, days and starting lesson. Starting-point checks keep your answers and recommendations without changing course grades. Both are private and included in your data download.

Who can see it

Public visitors can read published content. Your learning pages and export are scoped to your signed-in account. Administrators manage publication; this does not make your notes public. The server/database operator has infrastructure access. This build does not send lesson notes or quiz answers to a paid AI provider.

Download or delete

Download a JSON copy of your profile, learning records, and quiz attempts after confirming your password. It excludes passwords, security secrets, sessions and quiz answer keys. Keep the downloaded file private. This is a data copy, not an account restore/import feature.

Account deletion is available in profile settings and removes the account and its learning records. Publication audit history can remain without the deleted account reference. Server logs and any operator backups have separate retention; deployment must document that policy before launch.

Offline and email

The PWA caches only static icons and a generic offline screen. Private pages, notes and quiz submissions are not saved for offline use. Local development email is logged; production email delivery has not been verified. Do not put secrets or customer data in learning notes or exercises.

Revision queue

Recall is your own report. It never changes quiz grades or lesson completion.

Your revision queue and recall history are private. Due dates and ratings are included in your account export and removed when your account is deleted.

Practice journal

Project evidence, writing drafts, speaking reflections, self-reported minutes and rubric ratings are private. They are included in your account export and removed when you delete the record or account. Evidence links are not fetched or automatically verified.

Optional Google sign-in and reminders

Google sign-in shares your basic name, email and stable Google account ID with DevPath. Access tokens are not stored. Existing email accounts must connect Google after signing in and confirming their password.

Study push requires your permission and a saved enabled schedule. We store encrypted device endpoints and keys, your chosen days, time and timezone, and delivery-attempt history, pruned after 30 days when the scheduler runs. Generic messages pass through your browser push provider and may appear on your lock screen. Provider acceptance does not prove delivery. Turn reminders off or remove devices in settings; account deletion removes these records. Device keys and Google IDs are excluded from the account download.