Privacy Policy
Last updated: 2026-05-15
AnyLearn ("we", "the site") is a small personal project that hosts AI-generated micro-lessons and tracks your progress through them. This page explains what we collect, why, and how to get it deleted.
What we collect
When you sign in with Google, we store the following from your Google profile, via the standard OAuth flow:
- Your email address
- Your display name
- Your profile image URL
- A Google account identifier used to recognise you across sessions
As you use the site we also store:
- Which lessons you have started and completed
- How far you got in each lesson and your quiz scores
- Certificates issued to you when you complete a learning path
- A session cookie that keeps you signed in
We do not use third-party analytics, advertising cookies, or trackers. We do not sell, rent, or share your data with anyone for marketing.
Why we collect it
- Profile data — so we know it's you when you return, and so we can show your name on your certificates.
- Progress data — so the next time you open a lesson you continue where you left off, and so your stats (XP, streak, completed lessons) work.
- Session cookie — strictly necessary for sign-in.
Under GDPR our lawful basis is consent (you sign in voluntarily) for profile data, and legitimate interest in operating the site for progress data.
Who else sees it
AnyLearn runs on a few third-party services that necessarily process small slices of your data on our behalf:
- Google — provides the sign-in. They see the fact that you authenticated to AnyLearn.
- Vercel (US/EU) — hosts the website itself.
- Neon (EU region) — hosts the PostgreSQL database that stores your profile and progress.
We do not transfer your data to anyone else. Certificates you generate are public by URL only if you choose to share that URL — they are not listed anywhere on the site or indexed by us.
How long we keep it
We keep your data as long as your account exists. If you delete your account (see below) we remove your profile, progress, and certificates from the database immediately.
Your rights
You can, at any time:
- Delete your account from /settings. This is irreversible and removes all your data from our database.
- Export your data. Email us at the address below and we'll send you a JSON dump of everything we have on you within 30 days.
- Correct your data. Your display name and image come from Google — update them there and they'll refresh on your next sign-in.
- Complain. If you're in the EU you have the right to lodge a complaint with your local data protection authority.
Cookies
We set a single first-party session cookie (next-auth.session-token) used to keep you signed in. It's strictly necessary and is removed when you sign out or delete your account. We do not use cookies for analytics, advertising, or any third-party purpose.
AI-generated content
Lessons on AnyLearn are written by large language models. We review them informally, but they may contain errors, oversimplifications, or out-of-date information. They are not professional advice. See our terms of service.
Contact
Questions about this policy, data export requests, or anything else: email benjamin.benhattar@gmail.com.