Privacy Policy
What we collect, why, and the choices you have.
Last updated: May 28, 2026
This Privacy Policy explains how FirstPrompt (“FirstPrompt,” “we,” “us”) handles your personal data when you use firstprompt.build and the courses and services available there (the “Service”). By using the Service you agree to this policy.
Information we collect
- Account information: your name and email address, provided directly or via Google sign-in, managed through our authentication provider (Supabase).
- Learning data: your lesson progress, completions, streaks, XP, badges, and certificates.
- Payment information: handled by our payment providers. We receive your subscription status and the last four digits / card brand, but we never see or store full card numbers.
- Usage & device data: pages visited, interactions, approximate location, browser and device type, collected via analytics and cookies.
How we use your information
- Provide and operate the courses, track progress, and issue certificates.
- Process payments, subscriptions, and referrals.
- Send transactional and product emails.
- Measure and improve the Service, and prevent fraud and abuse.
Cookies & analytics
We use essential cookies to keep you signed in and analytics cookies to understand how the Service is used. You can control cookies through your browser settings; disabling essential cookies may break sign-in.
Service providers
We share data only with providers that help us run the Service, each under its own privacy terms: Supabase (authentication and database), Stripe and Dodo Payments (payments), Resend (email), Google Analytics (analytics), and Vercel (hosting). We do not sell your personal data.
Data retention
We keep your data for as long as your account is active. You may request deletion of your account and associated data at any time, after which we delete or anonymize it except where we must retain records (for example, for tax or accounting obligations).
Your rights
Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us through firstprompt.build.
International transfers
Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.
Children
The Service is not directed to children under 16, and we do not knowingly collect data from them.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated to you.
Contact
Questions about this policy or your data can be sent to us through firstprompt.build.