Privacy Policy

1. Information We Collect

We collect the following categories of information when you use Play2Lrn (the "Service"):

• Account information — the email address (and password, stored hashed) you sign up with, managed through our authentication provider, Supabase.
• Usage data — which simulations you open and when, so we can see what's popular and what to build next. Logged-out views of public simulations are recorded without any user id attached.
• Payment information — if you subscribe, our payment processor, Razorpay, collects and stores your payment details directly. We never receive or store your full card number, only a subscription status and renewal date.
• Cookies & session data — a session cookie, set by Supabase, that keeps you signed in between visits. There's no separate tracking or advertising cookie.

2. Use of Your Information

We use the information above to create and secure your account, to check whether you're entitled to open a given simulation (based on its access tier and, for subscription tiers, your subscription status), to process payments and manage your subscription, and to understand overall usage so we know what to build next.

3. Disclosure of Your Information

We don't sell your data. We only share it in the following circumstances:

• By law or to protect rights — if required by law, or if we believe in good faith that disclosure is necessary to comply with a legal process, protect our rights, or protect the safety of our users or the public.
• Third-party service providers — Supabase (accounts, authentication, and the database) and Razorpay (billing) are the only third parties with routine access to your data, and only as needed to run the Service.
• Business transfers — if we're involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we'll notify you before it becomes subject to a different privacy policy.
• Your consent — we may share information for any other purpose with your consent.

4. Security of Your Information

We rely on Supabase's infrastructure and access controls (including row-level security on our database) to protect your account and usage data, and never handle your payment details directly — those go straight to Razorpay. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

5. Your Data Rights

You can review and update your account email from your account settings. You can ask us to export or delete your data at any time, subject to what we're legally required to keep (for example, billing records). The Service isn't directed at children under 13, and we don't knowingly collect information from them — if you believe a child has created an account, contact us and we'll remove it.

6. Contact Information

Questions about this policy, or a data request? Reach us at privacy@play2lrn.com.

7. Policy Changes

If we make a material change to how we handle your data, we'll post the update here with a new "last updated" date.