Privacy Policy

This policy explains what personal data Archletics collects when you use the Archletics app or visit https://archletics.com, why we collect it, who else can see it, and what you can do about it. We follow the General Data Protection Regulation (Regulation (EU) 2016/679).

Who is responsible

The data controller is CodeNomad, established in the Netherlands (KvK 95085270). Write to privacy@archletics.com about anything in this policy.

What we collect, and why

• Email address — to identify your account and send sign-in links or six-digit sign-in codes. Legal basis: performance of the contract between you and us (Art. 6(1)(b) GDPR).
• Display name — shown to you in the app. You can change it at any time from the account sheet. Legal basis: performance of the contract.
• Password — if you sign in with a password, we store a cryptographic hash of it and never the password itself. You can instead use a sign-in link and set no password at all. Legal basis: performance of the contract.
• Your answers — for every drill you attempt we record the answer you gave, whether it was correct, the score, how long you took, and whether you skipped it. This is the product: without it there is no progress, no streak and no way to show you what you got wrong. Legal basis: performance of the contract.
• Written answers sent for grading — the drills that ask you to write out an answer are marked by a language model, because there is no other way to tell you which part of what you wrote was missing. The text you wrote and the drill it answers are sent to the grading provider named in the table below; your name, your email address and your account identifier are not. The same happens for a hint, which reads your draft to name a point you have not covered yet. Both providers are in the United States, so this is a transfer out of the EU — see below. Legal basis: performance of the contract.
• Your setup answers — what you told us when you first opened the app: whether you are preparing for an interview and on what date, what kind of engineering you do, which topics you picked, how many drills a day you chose, and the reminder time you set. We use them to describe and, in time, order your practice path. You can delete them with your account. Legal basis: performance of the contract.
• Practice sessions and reading state — when a practice session started and finished, and which explanatory articles you marked as read. Legal basis: performance of the contract.
• Layout measurements — when you answer a drill, the app reports how tall the drill content was and how tall your screen was, in points. It contains no answer content and identifies no device model; we use it to find drills that overflow small screens. Legal basis: our legitimate interest in a product that renders correctly (Art. 6(1)(f) GDPR).
• Subscription status — if you subscribe to Archletics Pro, we record which plan you are on and when it renews or lapses, so the app knows whether to grade your answers. The purchase itself is made with Apple, and Apple is the merchant of record: we never see your card, and never receive your payment details. Your account identifier is shared with RevenueCat, who reconcile the receipt on our behalf. Legal basis: performance of the contract between you and us (Art. 6(1)(b) GDPR).
• Server logs — our web server records the usual request information, including your IP address, for security and debugging. Legal basis: our legitimate interest in keeping the service available and abuse-free.
• Product usage — which screens you visit and which actions you take (a session started, a hint requested, a paywall seen), recorded through PostHog on servers in the European Union, under your account identifier once you are signed in. It never includes the content of anything you write or answer. We use it to see where the product loses people and to fix that. Legal basis: our legitimate interest in understanding and improving our own product (Art. 6(1)(f) GDPR).

What we do not do

We do not run advertising, we do not profile you for anyone else’s purposes, we set no tracking cookies, and we do not sell or share your data with anyone for their own purposes. We run our own product analytics through PostHog, hosted in the European Union: it records which screens you visit and which actions you take, and never the content of anything you write or answer. There is no session recording, no error-tracking code, and no advertising identifier is read or requested. Written answers are sent to a language model to be graded, as described above, and to nobody else: we do not send anything you write to a model for training, ours or anyone else’s. The two third-party SDKs we ship are RevenueCat’s — there to tell the app whether your subscription is active — and PostHog’s, there to send the usage events described above. If any of that changes, this page changes with it, in the same release.

Cookies

The website sets one cookie: the session cookie created when you sign in, which is what keeps you signed in. It is strictly necessary for a service you asked for, so it needs no consent banner. Signing out or deleting your account clears it. Analytics runs cookieless — PostHog is configured with in-memory persistence and sets no cookie and no local storage.

Who else processes your data

Only the processors below, only on our instructions, and only for the stated purpose.

Your account, your answers and everything you produce in the app are stored by Hetzner Online GmbH in Helsinki, Finland (European Union), and the stored copy never leaves the European Union.

Two things do cross, and nothing else does. If you subscribe, your account identifier and the state of your subscription go to RevenueCat and Apple — not your name, your email address, or anything you have written. If you write an answer that gets graded, or ask that answer for a hint, the text you wrote and the drill it answers go to the grading provider — not your name, your email address, or your account identifier, so what arrives there is not tied to you. Nothing else about you reaches either. Both transfers rely on the European Commission’s Standard Contractual Clauses.

How long we keep it

Your account and its practice history are kept until you delete the account. Server logs are kept only as long as they are useful for security and debugging.

Deleting your account

You can delete your account yourself, from the account sheet in the app. Deletion is immediate and permanent: the account, every answer you have given, your practice sessions and your reading state are removed at once. There is no grace period and no recovery, so export anything you want to keep first by asking us for a copy. You can also write to privacy@archletics.com and we will do it for you.

Your rights

Under the GDPR you can ask us for a copy of your data, correct it, have it erased, receive it in a portable form, restrict how we use it, or object to processing we base on legitimate interest. Write to privacy@archletics.com. We answer within one month.

If you think we have handled your data badly you can complain to Autoriteit Persoonsgegevens, the supervisory authority in the Netherlands.

Children

Archletics is intended for adults preparing for professional technical interviews. It is not directed at children, and we do not knowingly collect data from anyone under 16.

Changes

When this policy changes we update the date at the top. Material changes will be announced in the app before they take effect.