CODE CRUNCH LABS

LEGAL

Privacy Policy

Effective date: July 2, 2026 · Last updated: July 7, 2026

This Privacy Policy describes how Code Crunch Labs ("we", "us", or "our") collects, uses, and shares information when you use our website (codecrunchlabs.vercel.app), the tech-community websites we operate and their affiliates, our mobile applications published on Google Play (Android) and the Apple App Store (iOS), and any other products, software, or services we offer (collectively, the "Services"). It applies to all users of the Services worldwide.

Scope across products. This policy covers all of our current products and services as well as any products and services we release in the future, unless a product is published with its own separate privacy policy. Because it is written to cover our entire product line, some sections may not apply to every product — for example, a product that has no user accounts collects no account information, and a product that requests no device permissions collects no permission-based data. Only the practices relevant to the product you actually use apply to you. Where a specific product collects data in ways not described here, we will provide a supplemental privacy notice for that product.

By using the Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Services.

1. Information We Collect

Information you provide

  • Contact information — such as your name and email address, when you contact us, request a quote, or sign up for an account or newsletter.
  • Account information — credentials and profile details, if a product offers user accounts.
  • Content you submit — messages, files, or other content you choose to provide through the Services.
  • Learning and usage progress — where a product offers accounts or progress sync, we store your in-app progress (such as lessons completed, scores, and streaks) so it can be restored across devices.
  • Payment information — if you make a purchase, payments are handled by third-party payment processors such as Google Play Billing, Apple In-App Purchase, or Stripe. We do not receive or store your full card number; we may receive limited transaction details (such as item purchased, amount, and transaction ID) to fulfill your order and provide support.

Information collected automatically

  • Device and usage data — device model, operating system and version, app version, language, time zone, IP address, and general (non-precise) location derived from IP.
  • Diagnostics — crash logs and performance data used to keep the Services stable and secure.
  • Analytics — aggregated interaction data (screens viewed, features used) to understand how the Services are used.

We do not collect precise GPS location, contacts, photos, microphone, or camera data unless a specific product requests that permission from you, explains why, and you grant it. You can withdraw device permissions at any time in your device settings.

AI tutor conversations

Where a product includes an AI tutor (such as the Code Crunch Labs Speak365 language tutor), the messages you send to the tutor and the responses it generates are processed to provide the feature. These conversations may be sent to a third-party AI provider that operates the AI model on our behalf, which processes them under its own terms and privacy policy. We use tutor conversations to provide, secure, and improve the tutor. The tutor’s responses are generated by AI and may be inaccurate. Please do not share sensitive personal data (such as passwords, payment card numbers, or government identifiers) with the tutor. We do not sell these conversations. You can delete your data as described in Section 9 using the Data Vault.

2. How We Use Information

  • Provide, operate, and maintain the Services.
  • Respond to your inquiries and provide customer support.
  • Improve, personalize, and develop new features.
  • Monitor stability, diagnose crashes, and prevent fraud, abuse, and security incidents.
  • Comply with legal obligations.
  • Send service-related communications, and marketing communications only where you have opted in (you can unsubscribe at any time).

We do not sell your personal information, and we do not share it with third parties for their own advertising purposes. Where the Services rely on third-party platforms and integrations (such as Google, Apple, Stripe, GitHub, or LinkedIn), those providers process data under their own privacy policies and terms, and we are not responsible or liable for their practices. See Section 12.

3. Legal Bases for Processing (GDPR / UK GDPR)

Where the EU or UK General Data Protection Regulation applies, we process personal data on the following legal bases: performance of a contract (providing the Services you request), legitimate interests (securing and improving the Services), consent (optional features, marketing, and device permissions), and legal obligation (where required by law).

4. Sharing of Information

We share information only with:

  • Service providers — hosting, analytics, crash-reporting, and email providers that process data on our behalf under contractual confidentiality and data-protection obligations.
  • Platform providers — Google (Google Play) and Apple (App Store) may process data as described in their own privacy policies when you download or use our apps.
  • Payment processors — such as Stripe, Google Play Billing, and Apple In-App Purchase, which process payments under their own privacy policies and security standards (including PCI-DSS).
  • Advertising partners — some of our apps may display advertising now or in the future. If an app shows ads, the ad network (for example Google AdMob) may collect device identifiers and interaction data to serve and measure ads, as described in its own privacy policy. Where required, you will be asked for consent, and you can opt out of personalized ads in your device settings.
  • Legal authorities — when required by law, legal process, or to protect the rights, safety, and security of users or the public.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your data.

5. Data Retention

We keep personal data only as long as necessary for the purposes described above, to comply with legal obligations, or to resolve disputes. Diagnostic and analytics data is retained in aggregated or de-identified form where possible. When data is no longer needed, we delete or anonymize it.

6. Data Security

We use reasonable technical and organizational measures — including encryption in transit (HTTPS/TLS), access controls, and least-privilege practices — to protect your information. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

7. International Data Transfers

The Services are operated from the United States, and your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for international transfers, such as the European Commission's Standard Contractual Clauses, so that your data receives an adequate level of protection wherever it is processed.

8. Your Rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your personal data ("right to be forgotten").
  • Receive a portable copy of your data.
  • Object to or restrict certain processing.
  • Withdraw consent at any time, without affecting prior processing.
  • Lodge a complaint with your local data protection authority.

To exercise these rights, use the Data Vault to request a copy of your personal data (access) or to erase it. If you cannot use the Data Vault, you can also email us at request.codecrunchlabs@outlook.com. We may need to verify your identity before acting on a request. We handle verified requests in accordance with applicable law, and we do not discriminate against you for exercising your rights.

California residents (CCPA/CPRA)

California residents have the rights to know, delete, correct, and opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as defined by the CCPA/CPRA.

9. Account and Data Deletion

You can access or delete your personal data at any time in our Data Vault — sign in with Google, choose the app your request applies to, and select Access Personal Data to receive a copy by email, or Erase Personal Data to permanently delete your account and personal data for that app. Your request status is shown on screen; we do not require a separate confirmation email. You can also delete your account inside any app (Settings → Delete account), which covers use as a guest where you have no account. We keep a minimal record of your request (an identifier, the request type, and the date) to demonstrate that we honored it — this record is retained even after your personal data is deleted, and does not contain your app data. When we act on a verified request, we delete or anonymize your data in accordance with applicable law, retaining only what we are permitted or required to keep — for example for legal, security, fraud-prevention, or accounting purposes.

10. Children's Privacy

The Services are not directed to children under 13 (or the equivalent minimum age in your jurisdiction, such as 16 in parts of the EU). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take reasonable steps to delete it in accordance with applicable law.

11. Cookies and Similar Technologies

Our website may use cookies or local storage for essential functionality (such as theme and language preferences) and, where enabled, analytics. Preference data is stored locally on your device. You can control cookies through your browser settings; disabling essential storage may affect site functionality.

12. Third-Party Platforms, Integrations, and Links

The Services rely on, link to, or integrate third-party platforms and services — including but not limited to Google (Google Play), Apple (App Store), Stripe, GitHub, and LinkedIn. These third parties are independent controllers of any data they collect and process it under their own privacy policies, terms, and security standards, over which we have no control.

We are not responsible or liable for the availability, content, privacy practices, security, or acts or omissions of any third-party platform, integration, or website, including any data collection, use, disclosure, or breach that occurs on their systems. Your use of a third-party service is governed by that provider's terms and privacy policy, and we encourage you to review them. This section applies to the fullest extent permitted by applicable law and does not affect the responsibilities we hold as a data controller for the data we ourselves process.

13. AI Features and the Speak365 Language Tutor

Some Services include artificial-intelligence (AI) features, including the Code Crunch Labs Speak365 language tutor. When you use an AI feature, the inputs you provide (the messages, text, and any other content you send) and the AI-generated outputs are processed to operate the feature. Your inputs may contain whatever you choose to type, so please do not include sensitive personal data (such as passwords, payment card numbers, government identifiers, or health information) or other people’s personal data.

Third-party AI providers. AI features are powered by AI models that may be operated by us or by third-party AI providers. Where a third-party provider is used, your inputs and the resulting outputs are transmitted to and processed by that provider under its own terms and privacy policy, over which we have no control. That provider may retain and process data as described in its policies, including to operate, secure, and improve its services. We are not responsible or liable for the practices of any third-party AI provider (see Section 12).

How we use tutor conversations. We use AI inputs and outputs to provide, personalize, secure, debug, and improve the feature, to enforce our Terms, and to maintain safety (for example, detecting misuse). We retain them only as long as necessary for these purposes or as required by law, and in de-identified or aggregated form where practical. You can request deletion of your data as described in Section 9 using the Data Vault. We do not sell your AI conversations.

AI output may be inaccurate — use at your own risk. AI-generated responses are produced automatically and may be incorrect, incomplete, outdated, biased, or otherwise unreliable (sometimes called “hallucinations”), and may differ between users, sessions, and over time. The tutor is a language-learning aid only. It is not professional advice of any kind — including medical, legal, financial, tax, immigration, academic, or emergency advice — and is not a substitute for a qualified teacher, certified translation, or professional judgment. You are solely responsible for evaluating and verifying any output before relying on it, and you rely on it at your own risk.

No warranty; limitation of liability. To the maximum extent permitted by applicable law, the AI features are provided on an “as is” and “as available” basis, without warranties of any kind, whether express or implied (including accuracy, fitness for a particular purpose, or non-infringement). To the maximum extent permitted by applicable law, Code Crunch Labs and its owners, employees, and contractors shall not be liable for any loss, damage, or harm arising out of or relating to your use of, or reliance on, AI-generated output, or the acts or omissions of any third-party AI provider. The disclaimers and limitation of liability elsewhere in this policy — including the “Acceptance, Disclaimer, and Limitation of Liability” section — apply fully to the AI features. Nothing in this section limits rights that cannot be limited or waived under applicable law.

Your consent and responsible use. By using the AI features you consent to the processing described here. You agree not to submit unlawful, harmful, or infringing content, other people’s personal data, or attempts to bypass the tutor’s safety measures. The AI tutor is not a crisis or emergency service; if you are in danger or crisis, contact your local emergency number or a qualified professional. Where required, we rely on your consent for optional AI features (see Section 3), and you may stop using them at any time.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. Material changes will be communicated through the Services where practical. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.

15. Acceptance, Disclaimer, and Limitation of Liability

Acceptance by use. By accessing or using any of the Services — including our website and our Android and iOS applications — you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you do not agree, your sole remedy is to discontinue use of the Services.

"As is" disclaimer. The Services are provided on an "as is" and "as available" basis, without warranties of any kind, whether express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, accuracy, or non-infringement. We do not warrant that the Services will be uninterrupted, error-free, or free of harmful components.

Limitation of liability. To the maximum extent permitted by applicable law, Code Crunch Labs and its owners, employees, and contractors shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of data, profits, or business, arising out of or related to your use of (or inability to use) the Services, even if advised of the possibility of such damages. Where liability cannot be excluded, it is limited to the greatest extent permitted by law.

Your statutory rights remain. Nothing in this section limits or waives any privacy or consumer rights that you hold under applicable law and that cannot be limited or waived by agreement (including rights under the GDPR, UK GDPR, and CCPA/CPRA). This section does not reduce our obligations to handle your personal data as described in this policy.

16. Contact Us

If you have questions about this Privacy Policy or our data practices, contact:

Code Crunch Labs
Questions or updates: email request.codecrunchlabs@outlook.com or use our contact form.
To exercise your privacy rights (access or deletion), use the Data Vault.
Website: codecrunchlabs.vercel.app