Privacy Policy

TrainPi ("we," "us," or "our") respects your privacy. This Privacy Policy describes how we collect, use, store, and protect your information when you use our website, applications, and services (the "Service"). By using the Service, you agree to the practices described here.

1. Information We Collect

Information you provide

• Account data: email address, password (stored in hashed form), full name, and optionally profile details such as bio, headline, profile image, location, website, LinkedIn, and GitHub URLs.
• Career and learning data: interests, skills, career path selections, roadmap progress, resume content, lesson content, quiz answers, and progress data.
• Communications: messages you send to our AI mentor or support, and any feedback you provide.

Information we collect automatically

• Usage data: how you use the Service (e.g., pages visited, features used, time spent).
• Device and log data: IP address, browser type, device type, and similar technical information.

2. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Service (including AI-powered career discovery, roadmaps, lessons, and mentor features).
• Authenticate you and manage your account.
• Process payments and manage credits (when you purchase credits or use paid features).
• Send you service-related communications (e.g., password reset, important updates).
• Personalize your experience and content.
• Analyze usage to improve our product and security.
• Comply with legal obligations and enforce our Terms.

3. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in (e.g., session and authentication cookies), remember your preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling certain cookies may affect your ability to use the Service.

4. Third-Party Services and Sharing

We do not sell your personal information. We may share data with:

• Payment processing (Stripe): to process purchases of credits. Stripe's use of your data is governed by their privacy policy.
• Authentication (e.g., Google): if you sign in with Google OAuth, we receive profile information (e.g., email, name, picture) as permitted by your Google account settings.
• AI providers (e.g., Google Gemini): when you use AI features, we may send relevant content (e.g., your message, career context) to our AI provider to generate responses. If you use your own API key, that key is used directly with the provider according to their terms.
• Infrastructure and analytics: service providers that host our systems or help us analyze usage, under strict confidentiality and data-processing agreements.
• Legal and safety: when required by law, or to protect our rights, your safety, or the safety of others.

5. Data Retention

We retain your account and usage data for as long as your account is active or as needed to provide the Service and comply with legal obligations. If you delete your account, we will delete or anonymize your personal data in accordance with our retention practices and applicable law.

6. Data Security

We use industry-standard measures to protect your data, including encryption in transit (e.g., HTTPS), secure storage, and hashing of passwords. No method of transmission or storage is 100% secure; we cannot guarantee absolute security but we work to protect your information from unauthorized access, use, or disclosure.

7. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: update or correct your data (e.g., via account settings).
• Deletion: request deletion of your account and personal data.
• Portability: receive your data in a structured, machine-readable format where applicable.
• Opt-out: opt out of marketing communications (we do not sell your data).

To exercise these rights, use the account settings in the Service or contact us. We will respond in accordance with applicable law. If you are in the European Economic Area or UK, you may also have the right to lodge a complaint with a supervisory authority.

8. Children

The Service is not directed at children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us so we can delete it.

9. International Transfers

Your information may be processed in countries other than your own. We take steps to ensure that such processing is subject to appropriate safeguards and complies with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes may be communicated via email or a notice in the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

For questions about this Privacy Policy or our privacy practices, please contact us at the email or address provided on our website or in the Service.