Last updated: September 2026. Template — have a lawyer review it before relying on it, especially before you have paying customers in states other than California.
When you create an account we store your email address and a password (stored only as a secure hash by our authentication provider). As you use the course we store your progress: which lessons you've completed, quiz scores, XP, coins, badges, your equipped host and accessories, the name you enter for your certificate, your start date, and the reflections you write for missions. We also automatically receive standard technical information — IP address, browser type, and device type — through the services listed below, the way any website does.
Mission reflections are private to your account. They are never shown to other learners, never used for marketing, and never used to train any AI model. As the operator of the service we have technical access to the database in order to run it, and we do not read reflections except when you ask us to help with your account.
The app itself does not use AI to read, analyze, score, or make any decision about your personal data or reflections — the flashcards, scenarios, and quizzes run on fixed logic, not a model. If that ever changes — for example, an AI-assisted coaching feature — we'll describe it here, plainly, before it goes live. (Some of the course's written content was originally drafted with AI assistance and then edited; that's about how the lessons were written, not about how your data is processed.)
Payments and subscription billing are processed by Stripe. We never see or store your full card number. Stripe sends us your email address, the amount paid, and identifiers we use to keep your subscription status in sync — including to power self-serve cancellation from within the app. Stripe's own privacy policy governs the payment itself.
We share the minimum data each of these needs to do its job: Supabase (accounts, authentication, and the database that stores your progress), Stripe (payments and subscription management), Vercel (hosting), and Google Fonts (loads two typefaces used on this site; your browser requests them directly from Google, which can see the requesting IP address, the way any font or image hosted elsewhere would). None of these providers may use your data for their own purposes beyond providing their service to us.
We keep your account and progress for as long as your account is active, so your course history is there whenever you come back — including after a cancellation, in case you resubscribe later. If you ask us to delete your account (see "Your choices" below), we delete your progress and reflections; billing records that Stripe and tax law require us to keep are retained only as long as legally necessary.
We use browser storage to keep you signed in and to cache your progress on your device. We do not use advertising trackers or sell any personal information.
You can export your progress at any time from Settings, reset it, cancel your membership yourself from Settings (no email needed), or ask us to delete your account and all associated data by emailing us at the address below — we'll confirm deletion within 14 days. Depending on where you live, you may also have the right to know what personal information we hold about you and to correct it; email us and we'll handle the request directly, since we're a small team without a formal automated system yet.
Etiquette Trainer is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has created an account, email us and we'll delete it.
Questions about this policy, or to make any of the requests above: see below.