Privacy policy

Who is responsible for your data

The operator below is responsible for personal data processed by Skillbum. You can contact us about privacy without signing in.

This policy covers our website and early-access learning service. Features available to you depend on the current test release.

Information we process and why

• Account information: your email address, profile name, account identifier and authentication records let us sign you in, protect your account and associate your saved progress with you.
• Learning activity: course enrollments, reel interactions, challenge answers and attempts, completion, saved reels and learning preferences support progress, resuming and choosing relevant learning activities. Guest learning can also use a device or anonymous account identifier.
• Learning estimates: where adaptive learning is available, activity and answers help estimate which concepts need practice and select subsequent activities. These estimates may be wrong; a skip alone does not establish mastery or ability.
• Comments and feedback: when available and used, we process what you submit and its account association. Comments can be visible to other learners with access to that content. Avoid including private or sensitive information.
• Support messages: we process your contact details and the information you choose to send to investigate issues and handle account or privacy requests.
• Technical information: our hosting, authentication and video providers process requests, IP addresses, browser or device information and error/security logs to deliver and protect the service.

Account details are needed to create an account. You can browse the public information pages without one. If you do not provide information needed to investigate an account request, we may be unable to complete that request.

Legal grounds for processing

Where the GDPR applies, we use data necessary to provide the service you request on the basis of performing our agreement with you (Article 6(1)(b)). We rely on legitimate interests in securing, maintaining and troubleshooting Skillbum for proportionate security and operational processing (Article 6(1)(f)). We process information required by law on the basis of a legal obligation (Article 6(1)(c)).

If an optional feature needs consent, we ask separately and explain how to withdraw it. Reading this policy or creating an account is not consent to advertising or AI model training.

Learning recommendations help you practice; they are not decisions about employment, credit or other matters with legal or similarly significant effects.

Cookies and storage on your device

The website uses authentication cookies when you sign in. The app stores session information, preferences and local learning state so it can resume and handle temporary disconnections. Removing app data can erase progress that has not been saved to your account.

The website includes Vercel Web Analytics to understand aggregate traffic and improve the site. It processes page URLs, referring pages, filtered query parameters, visit times, browser and device information, and approximate location derived from requests. Vercel describes this service as using no third-party cookies. We do not add account details, learning answers or custom events to these analytics. See Vercel’s analytics privacy information.

We have not added advertising trackers or a crash-reporting SDK to this release. Hosting and delivery providers also process the technical requests described above.

Service providers and disclosures

• Vercel hosts the public website and processes website delivery, technical request information and aggregate website analytics.
• Supabase provides account authentication, the application database and storage. Authentication emails are delivered through the configured email delivery service.
• Mux delivers learning videos where configured and processes the requests needed for playback.
• Email providers deliver sign-in and support correspondence.
• Google Play distributes Android test builds and processes store activity under Google’s own policies.

Access within Skillbum is limited to people who need it to operate and support the service. We may also disclose information where necessary to comply with law or protect the service and users. We do not sell personal data.

Providers may process information outside your country, including outside the European Economic Area. Transfers subject to the GDPR require an applicable adequacy decision or appropriate safeguards, such as standard contractual clauses. Contact us for information about the safeguards applicable to your data.

Some lessons may contain AI-generated media. Generating lesson content does not require sending your learner profile or challenge answers to the media-generation provider.

How long information is kept

We keep account and learning records while needed to provide your account, retain your learning progress and resolve outstanding requests. Support correspondence is kept while needed to resolve the issue and document necessary follow-up. Security records are retained according to their security purpose and applicable provider settings.

Retention depends on the purpose, whether your account remains in use, outstanding disputes or legal obligations, and a deletion request. This test release does not promise automatic deletion after a fixed inactivity period. Account deletion is handled through a verified request.

Some records may need to be retained for legal obligations, fraud prevention or an unresolved dispute, with access restricted to that purpose. Provider logs and backup copies may expire separately from active account records; we will explain any applicable exception and expected timing when handling your request.

Your choices and rights

You can request access, correction, deletion or a portable copy of your personal data. Where applicable, you can restrict processing, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing.

Email support@skillbum.com and tell us what you need. We may ask for proportionate information to verify that the account is yours. Do not send passwords or sign-in codes.

To remove your account and associated data, follow the steps on our account deletion page. You do not need to install the app or sign in to make a request.

You may complain to a data protection supervisory authority, including in the EU country where you live, work or believe an infringement occurred.

Children and updates

Skillbum is intended for adults. If you believe a child has provided personal data, contact us so we can investigate.

We update this policy when the service or its data handling changes. The date above identifies this version. Material changes requiring notice or consent will be communicated as applicable.