This policy applies when you visit or use Quantil Labs. “Quantil Labs,” “we,” and “us” refer to the operator of the service. Contact support@quantillabs.com for privacy or operator-identity questions.

• Account and profile: email address, Supabase user ID, authentication records, optional display name, locale preferences, and timezone.
• Learning activity: enrollments and entitlements, unit and section progress, notes, Quick Check answers and results, career-quiz results, earned Phase Badge records, and Certificates of Completion.
• Purchases: checkout reference, product, provider customer and transaction identifiers, status, amount, currency, tax amount, refund records, and limited webhook metadata. We do not store full card details.
• Support: messages and information you submit by email or through in-course issue reporting, together with the relevant account, course, locale, phase, unit, and page-route context.
• Technical and security data: request and authentication data, IP address and device or browser information available in infrastructure logs, security events, and redacted error details.
• Optional features: Study Squad membership and invite records, public Phase Badge and Certificate of Completion settings, and referral attribution and commission records only when those features are enabled or used.

We use necessary cookies or equivalent browser storage for authentication, security, locale selection, anonymous starter progress, progress migration, and optional Tutor state. If the referral program is enabled, referral attribution may also use a first-party identifier.

Quantil Labs does not use a product analytics platform or advertising tracker. Hosting and security providers may still create routine operational logs.

AI Tutor uses a supported API key you provide for OpenAI or Anthropic. The key, chosen model, Tutor conversation, and Tutor memory are stored in browser session storage for the signed-in user. Session storage is normally cleared when the browser session ends and can be cleared from Tutor controls.

For a Tutor request, the key is sent over an encrypted connection to Quantil Labs and used in memory to call your selected provider. Your prompt, recent conversation, relevant lesson context, and a pseudonymous safety identifier are forwarded to that provider. Quantil Labs does not persist the key or Tutor conversation in its database and instructs responses not to be cached. The AI provider processes the request under its own privacy policy and terms.

We use information to create and secure accounts; provide course access and learning features; save work and calculate progress; operate checkout, entitlements, refunds, and transaction history; answer support requests; prevent abuse and fraud; debug and improve reliability; comply with law; and establish or defend legal claims.

Depending on your location and the activity, these purposes may rely on performing our agreement with you, our legitimate interests in operating and securing the service, compliance with legal obligations, or consent where the law requires it.

• Supabase provides authentication, database, and related backend infrastructure, including configured authentication email delivery.
• Resend delivers configured authentication and support-notification email.
• Hosting infrastructure delivers the application and may process request and operational log data.
• Dodo Payments, the Merchant of Record and payment provider for current purchases, processes checkout, payment details, tax, transaction documents, payment status, and refunds under its own notices.
• OpenAI or Anthropic receives Tutor content only when you select that provider and submit a request with your own key.
• FirstPromoter processes referral attribution and promoter records only if the referral program is enabled.

We may also disclose information when required by law, to protect people or the service, in a business reorganization, or with your direction. We do not sell personal information.

We retain account and learning records while your account is active and as reasonably needed to provide the service. Commerce, tax, fraud-prevention, and legal records may be kept longer where required. Operational logs are kept for limited periods set by our providers. Tutor keys and conversations are not retained in our database. A refund revokes the corresponding paid entitlement but does not automatically delete progress or notes.

We use access controls, row-level database security, encrypted transport, secret redaction, signed payment notifications, and other reasonable safeguards. No internet service is completely secure. Do not email card details or AI API keys.

Our providers may process information in countries other than yours. Where required, the operator uses appropriate contractual or other transfer safeguards. Contact support@quantillabs.com for controller or transfer information relevant to your request.

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to complain to a regulator. You may change profile details, clear browser-local information, and choose not to use optional features.

Certificates of Completion are private by default. If you explicitly enable public verification, anyone with the link may see the name captured at issuance, course title, completion date, certificate ID, and validity status. You can disable public verification later.

To make a request, email support@quantillabs.com. We may need to verify your account. Some information may be retained where law or legitimate recordkeeping requires it.

The service is not directed to children who cannot legally consent to its use in their location. A parent or guardian should supervise use where local law requires it. Contact us if you believe a child submitted information without appropriate authorization.

We may update this policy as the service or law changes. We will post a new effective date and provide additional notice when reasonably required. Questions can be sent to support@quantillabs.com or through our contact page.