Privacy Policy

The short version

We collect what we need to run the Service — your account details, the Dives and chats you create, your activity in the app, and payment metadata. We do not sell your personal information, we do not serve ads, we do not do cross-site behavioral tracking, and we do not use your private Library to train publicly released AI models.

Age (18+)

The Service is intended only for users 18 and older. Our 18+ requirement is self-declared at sign-up — we do not currently run third-party age verification. If we have reason to believe an account holder is under 18, we review the account and will terminate it and delete the associated personal information. A parent or guardian can report a suspected minor account to privacy@speedlearning.com or trust@speedlearning.com.

What we collect

Account and profile (name, email, authentication identifiers via Auth0, optional phone, and optional public-profile fields you add — handle, bio, avatar, social links); content you create (topics and prompts, the Dives in your Library, AI-librarian chat messages, notes, bookmarks, quiz responses); and usage, device, and log data collected automatically. For card payments, FanBasis handles card entry and we receive only metadata (for example card brand and last four digits, transaction IDs, amounts) — never full card numbers. We do not ingest your external social-media accounts — “social links” are simply URLs you choose to display.

Avatars are public

Uploading a profile image — including a photo of your face — is optional. If you upload one, it is served from a public, unauthenticated URL so creator profiles and Marketplace cards can display it without a login; anyone with that URL can view it. You can remove your avatar at any time in Settings.

Seller banking and tax data

If you sell on the Marketplace and set up payouts, you provide full bank routing and account numbers (or a PayPal email). This payout information is collected and stored by SpeedLearning itself — it is not handled by FanBasis and it is not tokenized; we show only the last four digits back to you. Where you sell above applicable thresholds, you upload government tax identifiers via W-9 / W-8BEN documents (the SSN/EIN/TIN lives inside the uploaded PDF), and we generate forms such as the 1099-K where required.

Data about non-users (gifts)

When a user sends a gift Dive, the sender provides the recipient’s email address. We collect that address only to send a single one-time redemption email (via Resend) and apply a short retention period — the recipient need not have a SpeedLearning account.

How we use it

To provide the Service (create and store Dives, run the librarian chat, maintain your Library and the Marketplace); process payments, payouts, and taxes and prevent fraud; provide security, troubleshooting, and support; send service messages (and, where you opt in, product updates); enforce our Terms and Acceptable Use Policy and comply with law; and improve the Service in aggregate. Analytics is opt-in and off unless you consent in the cookie banner. Where GDPR/UK GDPR applies, we rely on contract, legitimate interests, consent, and legal obligation depending on the data.

How AI generation affects your data

Generating a Dive sends your topic/prompt and publicly sourced material to third-party AI model providers (currently Anthropic for text and ElevenLabs for optional video narration) via their APIs, and renders video on Amazon Web Services. Each AI-librarian message re-transmits your conversation history and the relevant Dive content to Anthropic to produce the next reply. Video narration is synthetic speech from licensed stock voices — we do not collect, record, or clone your voice or any biometric data. As of the date of this Policy, our text model provider does not use API inputs or outputs to train its models, and we do not use your private Library to train publicly released models.

Who we share with

We share personal information only with service providers that operate the Service on our behalf, under contract and limited to that purpose: Auth0 (authentication), FanBasis (card payments, merchant of record, sales-tax collection — not seller payout banking), Anthropic (AI text generation + chat), ElevenLabs (text-to-speech, narration text only), Amazon Web Services (hosting, storage, video rendering, database), Resend (transactional email, including gift-redemption messages), and a network-egress proxy provider (tcp.ac) for retrieving public source material. We also share content you choose to make public with other users, disclose information for legal and safety reasons, and may transfer information in a merger or sale of assets. We do not sell personal information and do not share it for cross-context behavioral advertising.

Retention

We keep personal information only as long as we need it for the purposes in this Policy, then delete or de-identify it, except where longer retention is required for legal, tax, accounting, fraud-prevention, or dispute-resolution purposes (for example, transaction and tax records). Tax documents supporting a 1099 we issued are retained for the IRS-required period even after account deletion, and are otherwise deleted with your account; gift-recipient emails are purged after redemption or expiry (and within 90 days of sending). We respond to privacy-rights requests within 45 days of a verifiable request, extendable where the law permits.

Security

We use technical and organizational measures designed to protect personal information, including encryption in transit, need-to-know access controls, and tokenized card handling (we never store full card numbers; card tokenization applies to payment cards, not to seller payout banking, which we store directly). If a security incident affects your personal information, we will notify affected users and regulators within the windows required by law. See our Security Policy at /legal/security for more detail, and report issues to security@speedlearning.com. No method of transmission or storage is perfectly secure.

Your rights and choices

Depending on where you live (including under GDPR/UK GDPR and US state laws such as the CCPA/CPRA), you may have rights to access, correct, delete, port, or restrict/object to processing, and to withdraw consent. In-product: edit your information in Settings, and delete your account in Settings → Danger Zone (see the Data deletion page). There is no self-service “download my data” button today — to export your data, email privacy@speedlearning.com and we will provide a copy in a portable format. We honor browser Do-Not-Track signals for optional analytics; we do not yet detect Global Privacy Control (see US state rights below for our GPC commitment).

Your US state privacy rights

If you live in California, Virginia, Colorado, Connecticut, Texas, or another state with a comprehensive privacy law, you can exercise your rights by emailing privacy@speedlearning.com, use an authorized agent, and appeal a denied request. We collect sensitive personal information — tax identifiers in uploaded W-9/W-8BEN PDFs, seller payout bank details, account credentials, and IP-derived geolocation — and use it only for the purpose you provided it; you may ask us to limit that use. We do not sell or share your information for cross-context behavioral advertising, so there is no Do-Not-Sell/Share opt-out to process; if that ever changes, we will treat Global Privacy Control (GPC) as a valid opt-out signal.

Automated decisions

When you request a Dive, an automated content-safety screen runs first; if it flags the request, generation is automatically rejected with no human in the loop, which can deny a paid request. You may request human review and contest the outcome at trust@speedlearning.com or support@speedlearning.com, with refunds handled per the Refund Policy. We make no other solely-automated decisions with legal or similarly significant effects — the optional pre-Dive quiz only tailors your reading experience.

International transfers

We are based in and process data in the United States, and the Service is directed to users in the United States. We do not target or monitor individuals in the EU or UK. If you access the Service from outside the US, your information will be transferred to and processed in the United States and other countries where our providers operate, using appropriate safeguards where required.

Changes and contact

We may update this Policy and will notify you of material changes by email or in-app notice. Questions or requests: privacy@speedlearning.com.