Draft for legal review. This policy describes how the My Daily Knowledge software handles data. It must be reviewed and completed by the owner's lawyer before launch, including the operator's legal name and address, the legal bases for processing and any jurisdiction-specific rights.
Summary
- We store what we need to build your curriculum and send your lessons: your email address, your learning choices and schedules, and your reading and quiz progress.
- We do not sell your data and do not show advertising.
- Payments are handled by Stripe; we never see or store your full card number.
- You can download all your data and delete your account from your account settings at any time.
What we store
- Account
- Your email address and password (stored by our authentication provider in hashed form, never readable by us), whether your email is confirmed, and two-step sign-in settings if you turn them on.
- Profile
- Your first name if you give it, preferred language, time zone, the status of your email address (for example, whether messages bounce or you unsubscribed) and your unfinished onboarding plan.
- Learning choices
- Your knowledge level per field, selected fields and topics, custom topics you propose, learning objectives, article types, depth and structure, and your email schedules (days, times, time zone, language, paused or active).
- Learning activity
- Your learning paths and lessons, which articles were sent and when, whether they were delivered, opened or bounced, when you read an article online, completed or saved it, notes on saved articles, quiz answers and scores, and glossary terms collected from your articles.
- Subscription and billing
- Your plan, billing interval and status, Stripe customer and subscription identifiers, and records of billing events such as payments, amounts, currencies, invoice identifiers and cancellations.
- Email events
- Delivery reports from our email provider, such as bounces and spam complaints, so we stop sending to addresses that cannot or do not want to receive mail.
- Technical records
- Short-lived rate-limit counters that protect the service from abuse, operational logs, and, for administrators only, an audit log of administrative actions.
How we use it
- To create your account, sign you in and keep it secure.
- To build your curriculum, generate articles at your level and send them at the times you chose.
- To show your progress, archive, saved articles and quiz results.
- To take payment, apply your plan's limits and send billing notices such as renewal reminders and failed-payment warnings.
- To stop sending to addresses that bounce, complain or unsubscribe.
- To keep the service running and fix problems.
Articles are canonical: one article is written per lesson, level, depth and article type, and shared by every subscriber who needs that lesson. Your personal details are not part of the article.
Service providers
We use these providers to run My Daily Knowledge. Each receives only what it needs:
| Provider | Purpose | What it receives |
|---|---|---|
| Supabase | Accounts, sign-in and the database | All the data described above |
| Stripe | Payments and the billing portal | Your email address, payment details you enter on Stripe's pages, and your plan |
| Resend | Sending email | Your email address and the content of each email |
| Anthropic (Claude) | Researching, writing, checking and translating articles; explaining passages on request; checking custom topics | Lesson topics, levels and article text, the passages you ask to have explained and custom topic names. Not your email address or payment details. |
| Vercel | Hosting the website and its server functions | Technical request data such as IP addresses, as part of serving pages |
| Google Fonts | Typefaces used on the website | Your IP address and browser details when fonts are loaded |
Email and tracking
Lesson emails contain a small image that records when an email is opened, and their links carry a signed token that records actions such as reading online, completing or saving a lesson. These records power your progress and help us see whether lessons arrive. Some email apps block such images; opening an email is recorded separately from completing a lesson, and your progress counts only what you actually did.
Every lesson email includes an unsubscribe link. Unsubscribing stops all lesson emails; you can resume them from your account settings. Essential service emails about your account or payments may still be sent.
Your browser
We do not use advertising or analytics cookies. The website stores a few items in your browser's local storage: your sign-in session and your chosen language, and while you build a plan, your unfinished choices. You can clear them at any time by signing out or clearing your browser's site data.
Your control
- Access and export: download everything stored about you as a file from your account settings.
- Correction: change your name, language, time zone, levels and schedules in your account.
- Deletion: delete your account from your account settings. Any active subscription is cancelled first, then your account and its data are deleted.
- Email: unsubscribe with one link, or pause individual schedules.
Billing records that Stripe and we must keep for tax and accounting purposes may be retained after deletion where the law requires it.
Security
Data is protected by row level security in the database, so each account can read only its own records. Connections use HTTPS, passwords are never stored in readable form, payment card details never reach our servers, and you can turn on two-step sign-in with an authenticator app. Administrative access requires two-step sign-in and every administrative action is logged.
Retention
We keep your data while your account exists so your archive and progress remain available. When you delete your account, your personal data is deleted, except records we must keep by law. Aggregate operational records that do not identify you may be kept.
Changes and contact
If we change this policy in a way that matters, we will tell subscribers by email before the change takes effect. For any privacy question or request, please use our contact page.
Last updated: October 2026 (draft).