Privacy Policy
Last updated: June 2026
1. Who we are
Trenduoso is the data controller for personal data collected through this platform. If you have questions about how we handle your data, contact us at privacy@trenduoso.com.
This policy applies to all users of Trenduoso and explains what personal data we collect, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data we collect
Account data
- Name and email address (provided at registration)
- Encrypted password (we never see or store your plain-text password)
- Account creation date and subscription plan
Usage and learning data
- Lessons completed, scores, and exercise results
- XP earned, streaks, and progress through courses
- Drawing data from chart exercises (stored per-session)
Technical data
- IP address and browser type (collected by our infrastructure provider)
- Session tokens stored in cookies (strictly necessary)
Payment data
Payment is handled by Stripe. We do not store card numbers or payment details. We only receive a Stripe customer ID and subscription status.
3. Legal basis for processing
| Purpose | Legal basis |
|---|---|
| Providing the service (account, courses) | Contract performance |
| Processing payments | Contract performance |
| Improving the platform | Legitimate interests |
| Sending service emails (e.g. password reset) | Contract performance |
| Marketing emails (if opted in) | Consent |
| Legal compliance | Legal obligation |
4. How we share your data
We do not sell your personal data. We share it only with:
- Supabase — database and authentication infrastructure (data hosted in EU)
- Stripe — payment processing (see Stripe's privacy policy)
- Vercel — platform hosting (see Vercel's privacy policy)
We may disclose data if required by law or to protect our legal rights.
5. Cookies
We use cookies for the following purposes:
| Cookie | Purpose | Type |
|---|---|---|
| sb-auth-token | Keeps you logged in | Strictly necessary |
| cookie-consent | Remembers your cookie preference | Strictly necessary |
We do not currently use advertising or third-party tracking cookies. If this changes, we will update this policy and seek your consent.
6. How long we keep your data
- Account data: retained while your account is active, then deleted within 30 days of account closure
- Learning progress: retained with your account; deleted on account closure
- Payment records: retained for 7 years to comply with financial record-keeping obligations
- Server logs: 30 days
7. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate data
- Erasure ("right to be forgotten") — subject to legal retention requirements
- Portability — receive your data in a machine-readable format
- Object to processing based on legitimate interests
- Restrict processing in certain circumstances
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, email privacy@trenduoso.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
8. Children
Trenduoso is not directed at anyone under 18. We do not knowingly collect data from minors. If you believe a minor has registered, please contact us and we will delete the account.
9. Changes to this policy
We may update this policy periodically. We will notify you of significant changes by email or a notice on the platform. The "Last updated" date at the top reflects the most recent revision.
10. Contact
For any privacy-related questions or data requests: privacy@trenduoso.com