Privacy Policy

Data controller

Erwan André, sole trader — 2 rue de Montmorency, 75002 Paris, France — agentpro@dirtylab.fr.

Data we collect

• Account: email address (passwordless sign-in via a link or a one-time code).
• Learning profile: your goal, target date, self-assessed level, chosen plan.
• Study activity: answers to questions, scores, response times, notes read, mock exam sessions, readiness score.
• AI tutor: messages you send to the tutor and the answers generated.
• Technical data: session cookies strictly necessary for authentication. No advertising cookies and no third-party trackers are used.

Purposes and legal bases

• Providing the service (account, training, progress tracking) — performance of the contract.
• Improving the service and internal usage statistics — legitimate interest.
• Billing and accounting obligations (payments processed by Stripe) — legal obligation.
• Mobile app usage tracking (first-open date, last activity) for product improvement and follow-up — legitimate interest.

Processors

• Supabase Inc. (database and authentication) — hosted in the EU, AWS Paris region.
• Anthropic PBC (AI tutor) — your messages to the tutor are sent to the Claude API to generate answers. They are not used to train Anthropic's models.
• Resend Inc. (sending sign-in emails).
• Stripe Payments Europe Ltd. (payment processing, billing data).
• Hostinger International Ltd. (website hosting).

Newsletter

Newsletter sign-up happens only with your explicit consent (a checkbox, unticked by default, at sign-in). It is managed through dirtylab.fr (stored in Airtable). Every email contains an unsubscribe link.

Retention periods

• Account and learning data: for as long as the account exists.
• Account deletion: data erased within 30 days.
• Billing data: 10 years (legal obligation).

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port and object to the processing of your data. To exercise them: agentpro@dirtylab.fr. You may also lodge a complaint with the French data protection authority, the CNIL (cnil.fr).