We believe privacy policies should be readable. This one is written in plain English. We will never sell your personal data. We collect only what we need to make MyPyMentor work well for you.
1. Who we are
MyPyMentor, Inc. ("MyPyMentor", "we", "us", or "our") operates the website at mypymentor.com and the MyPyMentor application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.
For questions about this policy, .
2. Information we collect
2.1 Information you provide directly
Account information: Your name, email address, and password when you create an account.
Profile data: Skill level, learning goals, and preferences you set during onboarding.
Chat messages: The messages you send to Py (our AI tutor). These are stored to provide session memory and improve your learning experience.
Payment information: Billing details collected by our payment processor (Paddle). We do not store your card number or full payment details on our servers.
Communications: Any emails or support requests you send us.
2.2 Information collected automatically
Learning activity: Lessons completed, challenges attempted, XP earned, streak data, and concept mastery scores.
Usage data: Pages visited, features used, session duration, and general interaction patterns — used to improve the platform.
Device and technical data: Browser type, operating system, IP address, and general geographic region (country level). We do not track precise location.
Error and performance data: Crash reports and performance metrics collected via our error monitoring service (Sentry), used solely to fix bugs and improve reliability.
2.3 Information from third parties
If you sign up using a third-party authentication provider (e.g., Google), we receive your name, email address, and profile photo from that provider, subject to your privacy settings with them.
3. How we use your information
We use the information we collect to:
Create and manage your account and authenticate your identity.
Deliver and personalise the MyPyMentor learning experience — including Py's adaptive responses, session memory, frustration detection, and pace tracking.
Track your learning progress, XP, streaks, and concept mastery.
Process subscription payments and send billing-related communications.
Send product updates and promotional emails — only if you have opted in. You can unsubscribe at any time.
Detect and prevent fraud, abuse, or violations of our Terms of Service.
Monitor platform performance and fix bugs and errors.
Comply with applicable legal obligations.
4. AI processing and chat data
The messages you send to Py are processed by our AI service provider to generate responses. This processing is necessary to deliver the core functionality of the Service. We work only with AI providers who contractually commit to data protection standards consistent with this policy.
Your chat messages are stored in our database to enable session memory — a core feature that allows Py to remember your learning history across sessions. You can request deletion of your chat history at any time (see Section 8 — Your Rights).
Your personal data is not used to train our AI models or any third-party AI models without your explicit consent.
5. Information sharing and disclosure
We do not sell, rent, or trade your personal data. We share data only in the following limited circumstances:
Service providers: We share data with third-party vendors who help us operate the Service, including: database and authentication infrastructure (Supabase), payment processing (Paddle), error monitoring (Sentry), and AI processing services. These providers are contractually bound to protect your data and may not use it for their own purposes.
Legal requirements: We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of MyPyMentor, our users, or the public.
Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your data may be transferred. We will notify you via email and/or a prominent notice on the Service prior to any such transfer.
With your consent: We may share your information for any other purpose with your explicit consent.
6. Data retention
We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:
Account data: Retained for the duration of your account and deleted within 30 days of account deletion, unless retention is required by law.
Chat messages: Retained for the duration of your account. You may request deletion at any time.
Payment records: Retained for 7 years as required by applicable financial regulations.
Usage and error logs: Retained for up to 90 days for operational purposes.
7. Security
We implement industry-standard security measures to protect your personal data, including:
Encryption of data in transit using TLS/HTTPS.
Encryption of data at rest in our database infrastructure.
Row-level security policies in our database to ensure users can only access their own data.
Access controls limiting which team members can access user data.
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, .
8. Your rights
Depending on where you are located, you may have the following rights regarding your personal data:
Access: Request a copy of the personal data we hold about you.
Correction: Request that we correct inaccurate or incomplete data.
Deletion: Request deletion of your personal data ("right to be forgotten"). Note that some data may be retained where required by law.
Portability: Request a machine-readable export of your data.
Objection: Object to processing based on legitimate interests or for direct marketing.
Withdraw consent: Where we process data based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, . We will respond within 30 days. You may also delete your account at any time from your account settings.
9. Cookies and tracking
We use essential cookies and browser storage (localStorage/sessionStorage) to keep you logged in and remember your preferences (such as light or dark theme). These are strictly necessary for the Service to function.
We do not use advertising cookies or third-party tracking pixels. We do not sell your browsing data to ad networks or data brokers.
10. Children's privacy
The Service is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, and we will delete the data promptly.
11. International data transfers
MyPyMentor operates globally. Your data may be processed and stored in countries other than your own, including the United States. By using the Service, you consent to the transfer of your information to countries that may have different data protection rules than your country. We ensure appropriate safeguards are in place for any such transfers, including relying on Standard Contractual Clauses where required by applicable law.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you via email or a prominent notice within the Service at least 14 days before the change takes effect. Continued use of the Service after the effective date constitutes your acceptance of the updated policy.
13. Contact us
If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our privacy team: