Draft for product review. Not a legally approved privacy policy.

Privacy Policy

Effective date: [REQUIRES REVIEW]

What this page covers

This draft describes data the current HUDSUPP web application is built to store. It does not add analytics, payment details, location, or audio collection.

Account information

Sign-up stores a name, an email address, and a password credential through the authentication library. Email verification is not required by the current configuration. A new account role defaults to learner. The account record can also hold a profile image field and a deletion timestamp. [REQUIRES REVIEW] A self-serve deletion flow is not published on this site.

Blueprint content and private drafts

Blueprint titles, descriptions, steps, and tags are stored for the owner. Private drafts are returned only to the signed-in owner. Public pages list published free and Creator Pass metadata, not private drafts.

Learning progress

A signed-in learner can store progress against a Blueprint they are allowed to open. That write is tied to the session, not to a value supplied by the page as a user id.

Sessions and cookies

Sign-in creates a session record with a token and an expiry. The database schema also has fields for an IP address and a user agent. [REQUIRES REVIEW] Whether this deployment writes those two fields has not been separately verified. The browser keeps the session in a cookie set by the authentication library. This pilot is served over HTTP on the local network, so that cookie is not a Secure cookie there.

Operational data

The web process can write server logs for requests and errors. [REQUIRES REVIEW] How long those logs are kept, and who can read them, is an operations decision. The public web source does not include a product analytics tag.

Hosting and database

Account and Blueprint data are stored in PostgreSQL configured for this application. [REQUIRES REVIEW] The hosting provider, region, and backup location are not stated here. This draft does not claim that the database is encrypted at rest, or that every connection is encrypted in transit.

Payments

Checkout is not available. The payment provider is unconfigured, and this page does not describe card, UPI, or bank details because the application does not collect them.

Sharing

Public Blueprint cards show a creator label, not an email address. [REQUIRES REVIEW] No list of subprocessors is approved. Do not assume a vendor is used because it is not named here.

Privacy requests

A Contact page is not available yet. [REQUIRES REVIEW] The address for access, correction, or deletion requests, and any jurisdiction-specific rights, are not defined.

Changes

This draft will be replaced before paid checkout opens. It is not legally approved.