Privacy Policy

What stays on your device

Your progress stays in your browser, in local storage (localStorage): finished lessons, your review deck, your settings, and a random anonymous ID used only for telemetry.

Your account

To study on Machine Don you need an account. In it we keep, in our own database: your name, email, password (stored as a hash, never as plain text) and, if you give them, your username, phone number, birth year, and profile photo.

We also keep your answers to the welcome questionnaire (such as your level, your goals, and your daily target), whether you want news by email, and the version of the terms you accepted, with the date. Some sign-up steps (such as sign-up started and sign-up finished) are recorded with your email.

If you sign in with Google or Apple, we get your name, your email, and an ID from that account. Google also sends the address of your profile photo, which is kept in your account. The password of that account never passes through us.

A copy of your progress is kept in your account, with the date of each course milestone (such as a finished chapter). This copy lets you continue on another device without losing anything.

To protect your account, we record your IP address and the type of browser or device in each session and when you accept the terms.

We use this data to identify you, keep your progress, send account emails (such as email confirmation and password reset), give support and, if you buy the course, know who owns the access. We do not sell, rent, or trade your data with anyone.

You can delete your account at any time, on the Delete my account page or by writing to contato@ag30k.com. When you delete it, we immediately erase your sign-up data (name, email, phone, photo, and anything else you gave us), your questionnaire answers, your Google or Apple sign-ins, the progress kept in your account, and your access records, and the app erases the progress kept on your device. Only the purchase records and the date and version of the terms you accepted remain, with no data that identifies you, because the law requires us to keep them.

If you buy

If you buy in the app, you pay through the store (App Store or Google Play). We do not see or keep your card number: the store handles it. We keep the purchase ID, the product, the status (active or refunded), the purchase dates, and a random code that links the purchase to your account.

Payments made on the website are processed by Stripe. Your card number NEVER passes through our servers and is not stored by us: Stripe receives and stores it. On our side we keep only the Stripe IDs linked to the payment (customer, the subscription from the old plan, and payments), the status, and the dates. We also record, linked to your account, when you open the payment screen.

What we measure (anonymous telemetry)

To see where the course gets stuck, the app sends anonymous usage events (for example: started a lesson, earned a seal). Each event carries the event name, content IDs (which path, which lesson), and a random ID that does not identify you. No personal data is sent: email, name, phone, and the like are blocked in the code.

You can turn telemetry off at any time in Settings, in the Privacy section. On the server, each batch of events becomes one log line, without your IP address, which we later add up into counts. The IP is used only to block abuse of the endpoint.

Error reports

When something breaks, the app and the server may send a technical error report to Sentry, which helps us fix it. It is set up not to send cookies, IP addresses, or the content of requests. Some server warnings carry the internal ID of your account, so we can find the problem.

Third parties

The website, the API, and the course media (videos, images, and audio) run on Cloudflare, which receives the IP address of every visitor, like any hosting service. Vercel, where the website used to live, remains as a backup and redirects anyone who arrives at the old address.

The account database is hosted by Neon, on servers in Brazil (São Paulo).

Account emails are sent through Resend. If you sign in with Google or Apple, that sign-in goes through Google or Apple.

At sign-up and sign-in, Cloudflare Turnstile checks that a person, not a robot, is on the other side. In the coding exercises, the Python and SQL that run in your browser are downloaded from jsDelivr, which receives your IP address at that moment.

Purchases made in the app are processed by the store (App Store or Google Play), and our server checks each purchase with the store before it unlocks access.

Payments made on the website are processed by Stripe.

There are no ads, no tracking pixels, no Google Analytics, and no embedded social networks.

The database is in Brazil, and some of these services (such as Cloudflare, Sentry, Resend, Apple, and Google) may process data in other countries. So using Machine Don involves international data transfers. If you live outside Brazil, your data is sent to and stored in Brazil.

Cookies

Until you sign in, we do not set any cookie of our own: what we keep stays in your browser’s local storage, under your control.

When you sign in, we use technical session cookies. One keeps you signed in. When you sign in with Google or Apple, another one lasts a few minutes and checks that the return from the sign-in is really yours. They are necessary, they are not used for advertising or to track you on other sites, and the page’s JavaScript cannot read them.

Cloudflare, which protects the site, may set its own technical security cookies.

Your rights

What is on your device is yours: to erase it, clear this site’s data in your browser or uninstall the app.

For your account data, you have the rights given by Brazil’s data protection law (LGPD): to know what we keep, to correct it, to get a copy, and to ask us to delete it. Just write to the contact below.

The controller is the developer of Machine Don, identified as the seller on the app page on the App Store. Contact: contato@ag30k.com.

Privacy rights in the United States

If you live in California or in another US state with a privacy law, you have the right to know what personal information we collect, use, and disclose, to get a copy of it, to correct it, and to ask us to delete it.

We do not sell your personal information, and we do not share it for targeted advertising. We do not use or disclose sensitive personal information to infer things about you.

To use these rights, write to contato@ag30k.com from the email on your account. We may ask you to confirm it is you before we act. You can also delete your account yourself, on the Delete my account page. We will not treat you differently for using your rights.

Children

Machine Don is not meant for children. In the United States, we do not knowingly collect personal information from children under 13, and we do not create accounts for them. If we learn that we did, we delete that information. If you think a child gave us data, write to the contact below.

Changes

This policy may change. The date and version at the top tell you when it was last revised.