Privacy Policy

Effective July 10, 2026

This policy explains what Engy collects, why, and who we share it with. We keep it minimal on purpose: we collect what we need to log you in and manage your subscription, and not much else.

What we collect

• Your email address: to create your account and log you in.
• Subscription state: your plan, whether it’s active, when the current period ends, and a Stripe customer identifier, so we know what to unlock. This is written by Stripe’s verified payment events, not by your browser.
• Basic technical data: standard server logs and your IP address, used for security, rate-limiting, and debugging.

What we do not collect

• Card details. Your card number and payment information go directly to Stripe and never touch Engy’s servers. We only ever see a Stripe customer/subscription reference and your plan status.
• Your answers. The reasoning you type into a question is graded in your browser and stored only in your browser’s local storage (so your progress persists on your device). Your answers are not sent to or stored on our servers.

How we use your data

• to provide the Service and unlock the content your plan includes;
• to create and secure your account and process your subscription;
• to keep the Service reliable and protect against abuse.

Who we share it with

We don’t sell your data. We share it only with the service providers that run Engy:

• Stripe: payments and subscription management.
• Supabase: authentication and the database that stores your email and subscription status.
• Our hosting provider: runs the server that delivers the app.

Each processes data on our behalf to provide the Service. We may also disclose data if required by law.

Cookies and local storage

We use your browser’s local storage to keep you signed in (an authentication token) and to save your progress and answers on your device. We don’t use third-party advertising or cross-site tracking cookies.

Retention and deletion

We keep your account data while your account exists. You can delete your account at any time from Settings in the app. This removes your profile and cancels any active subscription. After deletion we remove your account data, except records we’re required to keep (for example, Stripe’s payment records for tax and accounting).

Your choices

You can access and update your email through your account, and delete your account and its data from within the app. For any privacy request, contact us at the email below.

Security

Passwords are handled by our authentication provider; card data is handled by Stripe; and the full question set is gated on the server so it’s only delivered to verified subscribers. No system is perfectly secure, but we take reasonable measures to protect your data.

Children

Engy isn’t directed to children, and we don’t knowingly collect data from anyone under 13 (or the minimum age in your country). If you believe a child has given us data, contact us and we’ll delete it.

Changes

We may update this policy; we’ll change the effective date above when we do. Continuing to use the Service after an update means you accept it.

Contact

Privacy questions or requests: engydevsupport@gmail.com.