Privacy Policy

Last updated: March 2026

LearningTo.co is operated by RoboticForce, Inc., a company based in Kingston, Ontario, Canada ("RoboticForce", "we", "us", or "our"). We are committed to protecting the privacy of individuals who use our services in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy legislation.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the LearningTo.co platform and related services (the "Service"). By using the Service, you consent to the practices described in this policy.

1. Information We Collect

We collect the following categories of personal information:

Account information

When you create an account, we collect your email address and display name. If you authenticate through a third-party OAuth provider (GitHub or Google), we receive your name, email address, and profile information from that provider. We do not receive or store your OAuth provider passwords.

Training and usage data

We collect data about your interactions with the Service, including which scenarios you attempt, your scores, reasoning text you submit, flagged lines, hints used, streak data, completion times, and other usage metrics. Session data is retained for up to 12 months and is used to improve the training experience. This information is also used to power leaderboards, track your progress, and improve the Service.

AI-processed content

When you submit written reasoning as part of a training scenario, that text may be processed by third-party AI providers (Anthropic Claude API and xAI Grok API) to generate a score and feedback. This processing is described further in the Third-Party Service Providers section below.

Usage analytics

We use Vercel Analytics to collect anonymized usage data such as page views, referral sources, and general device information. Vercel Analytics does not collect personally identifiable information beyond what is described in Vercel's privacy policy.

Technical data

We automatically collect standard server log data including your IP address, browser type, operating system, pages visited, and timestamps. This information is used for security monitoring and service improvement.

Payment information

If you purchase a paid plan, payment processing is handled entirely by Stripe. We do not receive or store your full credit card number. We may receive limited billing details from Stripe, such as the last four digits of your card, billing address, and transaction history.

Local storage

Some data, such as scenario progress for unauthenticated users, is stored locally in your browser and is never transmitted to our servers.

2. Purposes for Collection and Use

Under PIPEDA, we collect and use your personal information only for the purposes that a reasonable person would consider appropriate in the circumstances. Specifically, we use your information to:

-Create and manage your account
-Operate, maintain, and improve the Service
-Track your training progress and display it on leaderboards
-Score your reasoning submissions using AI providers
-Send you transactional communications (account verification, password resets, important service updates)
-Process payments for paid plans through Stripe
-Detect and prevent fraud, abuse, and security incidents
-Analyze aggregated usage patterns to develop better features
-Comply with legal obligations under Canadian law

We do not sell, rent, or trade your personal information to third parties for marketing or any other purpose.

3. Consent

By creating an account and using the Service, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. Where required by law, we will obtain your express consent before collecting, using, or disclosing sensitive personal information.

You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. To withdraw consent, you may delete your account or contact us at contact@roboticforce.io. Please note that withdrawing consent may affect our ability to provide you with certain features of the Service.

4. Third-Party Service Providers

We use the following third-party service providers to operate LearningTo.co. These providers may process your personal information on our behalf and are contractually obligated to protect it:

Supabase

Used for authentication and user data storage. Supabase processes your account credentials and session data. Their privacy policy is available at supabase.com/privacy.

Vercel

Used to host and serve the web application, and to provide anonymized usage analytics. Vercel may log request metadata as part of normal infrastructure operation. Their privacy policy is available at vercel.com/legal/privacy-policy.

Turso

Used for edge database storage. Turso processes structured training data to enable fast queries and leaderboard functionality. Their privacy policy is available at turso.tech/privacy.

Stripe

Used for payment processing on paid plans. Stripe handles all credit card data directly and is PCI-DSS compliant. Their privacy policy is available at stripe.com/privacy.

Anthropic (Claude API)

Used to score and provide feedback on written reasoning submissions. Your reasoning text is transmitted to Anthropic for processing. Anthropic's privacy policy is available at anthropic.com/privacy.

xAI (Grok API)

Used to score and provide feedback on written reasoning submissions. Your reasoning text may be transmitted to xAI for processing. xAI's privacy policy is available at x.ai/privacy.

Some of these providers may store or process data outside of Canada. Where personal information is transferred outside of Canada, it remains subject to the legal requirements of the receiving jurisdiction. We take reasonable steps to ensure that your information is protected in accordance with this Privacy Policy and applicable law.

5. Data Retention

We retain your personal information only as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specifically:

-Account data is retained for as long as your account is active
-Training data, scores, and reasoning submissions are retained for as long as your account exists to support leaderboard and progress features
-Server logs and technical data are retained for up to 90 days for security and diagnostic purposes
-Payment records are retained as required by applicable tax and financial reporting laws

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

6. Cookies and Tracking Technologies

We use cookies and similar local storage mechanisms to maintain your authentication session and to store scenario state in your browser. These are essential cookies required for the Service to function properly.

We do not use third-party advertising or tracking cookies. Vercel Analytics collects anonymized usage data and does not use cross-site tracking cookies.

You can configure your browser to refuse cookies, but doing so may prevent certain features of the Service from working correctly.

7. Your Rights Under PIPEDA

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy legislation, you have the following rights:

-Access the personal information we hold about you and receive an account of how it has been used and disclosed
-Request correction of any personal information that is inaccurate or incomplete
-Request deletion of your personal information, subject to legal requirements
-Withdraw your consent to the collection, use, or disclosure of your personal information
-File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

To exercise any of these rights, contact us at contact@roboticforce.io. We will respond to your request within 30 days, as required by PIPEDA.

8. Safeguards

We protect your personal information using physical, organizational, and technological security measures appropriate to the sensitivity of the information. These measures include:

-Encryption of data in transit using TLS (Transport Layer Security)
-Encryption of sensitive data at rest where applicable
-Access controls limiting data access to authorized personnel only
-Regular security reviews of our infrastructure and third-party providers

9. Children's Privacy

The Service permits use by individuals aged 13 and older, including CS students. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at contact@roboticforce.io and we will take steps to delete such information. Users between 13 and the age of majority in their jurisdiction should use the Service with parental or guardian awareness.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. If the changes are significant, we may also notify you by email. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our handling of your personal information, please contact our Privacy Officer:

RoboticForce, Inc.

Kingston, Ontario, Canada

Email: contact@roboticforce.io

If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

These pages are also governed by our Terms of Service.