BlockMindset (“BlockMindset”, “we”, “us”, “our”) operates the learning platform at blockmindset.com. This Privacy Policy explains what personal information we collect when you use the platform, how we use it, and the choices you have. By using BlockMindset you agree to this policy.
1. Information we collect
1.1 Account information (Google Sign-In)
When you sign in with Google we receive, through Supabase Auth, a minimal set of profile fields from your Google account:
- Your Google account email address.
- Your name as set on your Google account.
- Your Google profile picture URL, if any.
- A stable Google account identifier used to link your sessions to your BlockMindset account.
We do not request access to your Gmail, Google Drive, contacts, calendar, or any other Google product. We only use the basic profile and email scopes that Google provides at sign-in.
1.2 Learning data
As you use the platform we store learning activity tied to your BlockMindset account, including:
- Lessons you have viewed, marked complete, or made progress on.
- Quiz attempts, answers, and scores.
- Daily activity counters used for streaks.
- Achievements (badges) you have earned.
- Certificates issued to you upon module completion.
- Optional profile fields you choose to fill in (display name, avatar URL, preferences).
1.3 Technical information
When you visit the platform, our infrastructure logs basic technical information needed to operate the service: IP address, browser user agent, request timestamps, and error reports. These logs are retained for a limited period and used only to operate, secure, and debug the platform.
2. How we use your information
- To create and authenticate your account.
- To save and display your learning progress, quiz results, badges, and certificates back to you.
- To issue completion certificates that name you.
- To respond to support requests you send us.
- To monitor service health, detect abuse, and improve reliability.
We do not use your personal information to build advertising profiles, and we do not sell or rent your data.
3. How your information is stored and shared
Your account and learning data is stored in our managed Supabase (Postgres) database. Row-Level Security policies ensure that each user can only read and write their own rows.
We share data only with the following service providers:
- Google — for Google Sign-In, in order to authenticate you.
- Supabase — our database and authentication provider.
- Our hosting provider, content delivery network, and observability stack, which process technical request data on our behalf.
We do not share your personal information with advertisers, brokers, or any third party for marketing.
4. Cookies and local storage
BlockMindset uses cookies and browser local storage strictly for essential functionality: keeping you signed in, remembering your theme preference, and remembering recently viewed lessons. We do not use third-party advertising or tracking cookies.
5. Your rights and choices
- Access. You can view your account data through your profile page once signed in.
- Correction. You can update your profile fields from the same page.
- Deletion. You can request deletion of your account and all associated learning data at any time by emailing contact@blockmindset.com. We will confirm and complete the deletion within 30 days.
- Revoking Google access. You can revoke BlockMindset’s access to your Google account at any time from your Google account permissions page. Doing so will prevent future sign-ins but will not by itself delete data already stored in BlockMindset.
6. Data retention
We retain your account and learning data for as long as your account is active. If you request deletion, we remove your personal data from our production database within 30 days. Aggregated, non-identifying analytics may be retained.
7. Children
BlockMindset is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children under that age. If you believe a child has signed up, contact us and we will remove the account.
8. International users
BlockMindset is operated by a small team. By using the service you understand that your personal information may be processed in countries other than your own. We rely on the safeguards offered by our service providers (Google, Supabase) for international transfers.
9. Security
We use industry-standard transport encryption (HTTPS) for all traffic, store credentials and session tokens securely with Supabase, and apply Row-Level Security at the database layer so that one user cannot read another user’s data. No system is perfectly secure; we encourage you to use a strong, unique password on your Google account.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will update the “Effective” date above and, where the change is material, notify you in-app or by email before it takes effect.
11. Contact
Questions, data-deletion requests, or concerns about this policy: contact@blockmindset.com.