Privacy Policy

Overview

MECH is a gamified learning app for FIRST Tech Challenge robotics. This policy explains what we collect, why we collect it, who we share it with, and the choices you have. It applies to the MECH app and website.

What we collect

• Account information — email address, username, and display name (and the basic profile info Google or Apple returns if you sign in with them).
• Gameplay data — XP, Elo rating, gems, hearts, day streak, lesson progress, quiz answers and mistakes, practice sessions, quest progress, and arena match history.
• Purchase data — MECH Pro subscription status and billing records. Card numbers are handled by Stripe or the app store and are never stored by us.
• Device and technical info — device type, operating system, app version, browser type, and general usage/diagnostic events.
• IP address — collected automatically when you connect, and used for security, abuse prevention, and approximate region.

How we use it

• Provide and operate the Service — accounts, lessons, hearts, gems, and progress saving
• Power public leaderboards, which display your username, rank, Elo, and XP to other users
• Personalize your learning path and avoid repeating questions you have already seen
• Improve the app — fixing bugs, measuring feature usage, and improving question quality
• Send streak reminders and important account or service notifications
• Process MECH Pro subscriptions and prevent fraud, cheating, and abuse

We do not sell your personal information, and we do not show third-party advertising.

Third-party services

We share only the data these providers need to perform their function:

• Supabase — database, authentication, and hosting of your account and progress data (supabase.com/privacy)
• Stripe — payment processing for MECH Pro (stripe.com/privacy)
• Google OAuth — optional sign-in with Google (google.com/privacy)

We may also disclose data where required by law or to protect the rights and safety of our users.

Data retention and deletion

We keep your account data for as long as your account exists. You can delete your account at any time from Profile → Delete Account, or by emailing us. Once a deletion request is made, your profile, progress, arena history, and mistake records are permanently removed within 30 days, except where limited records must be retained for legal, tax, or fraud-prevention purposes.

Children

MECH is not directed to children under 13, and users under 13 are not permitted to create accounts, in line with the Children’s Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13. If we learn that we have, we delete the account and its data promptly. If you believe a child under 13 has an account, contact us at support@mechlearn.app.

Your rights and choices

• Access — view the data on your account from your profile, or request a copy by email.
• Correction — update your username, name, and profile details in profile settings.
• Deletion — delete your account and data from Profile → Delete Account, or by emailing us.
• Communication — turn off streak reminders and notifications in your device or app settings.

To exercise any of these rights by email, write to support@mechlearn.app from your account email address.

Security

Data is transmitted over encrypted connections and stored with row-level access controls so that you can only reach your own records. No system is perfectly secure, so please use a strong, unique password and let us know right away if you suspect unauthorized access.

Changes to this policy

We may update this Privacy Policy as the app evolves. Material changes will be reflected by an updated “Last updated” date and, where appropriate, an in-app notice.

Contact

For privacy requests or questions, email support@mechlearn.app.