Privacy policy

If you only browse. You can read most of the site without an account. If you allow it (or live where it is allowed by default), we count visits without knowing who you are. We record a random ID stored in your browser, the page address, how long the page was active and which outbound tool links you click. We do not store your IP address in this record.

If you create an account. We collect your email address and the way you signed in (email link or Google). We record when you first joined, when you were last seen and, if you arrived through a tagged link, where from.

Your learning. For signed-in learners we save which lessons you opened or finished, how far you scrolled, time spent, the courses and roadmaps you joined, and the certificates you created. Lab ticks and some progress are saved only in your browser.

Certificates. When you create a certificate you type your name. The name, the course or roadmap, the date and a certificate code are stored and shown on a public certificate page. Anyone who has the code or the link can see it. Please use a name you are happy to share.

Messages. If you use the contact form we keep your name, email, topic and message. We also keep a scrambled one-way code made from your connection address, only to stop spam. We cannot turn it back into your address.

Newsletter. If you subscribe to the weekly digest we keep your email address and the date you subscribed.

Payments. Paid plans are not switched on yet. If they are, a payment provider will handle your card details. We will not see or store full card numbers. See the refund policy.

Technical data. Our hosting provider processes network data, such as your IP address and browser type, to deliver the site and keep it safe. This happens as part of normal hosting.

• To run the site: sign you in, save your progress and certificates, and show what you have finished.
• To keep it safe: stop spam and abuse, and fix faults.
• To improve it: understand which pages and lessons help, using counts that are not tied to your name.
• To reply to you when you write to us.
• To follow the law and handle disputes.

• Contract: to provide the account and learning features you asked for.
• Consent: for anonymous visit counting where consent is required. You can say no, and you can change your mind at any time.
• Legitimate interests: to keep the service secure, stop abuse and understand how it is used, while respecting your rights.
• Legal duty: where the law requires us to keep or share information.

We use a few companies to run the service. They handle data for us and only on our instructions.

• Cloudflare hosts and delivers the website.
• Turso stores our database, which holds learning data, certificates and messages.
• Supabase handles sign-in.
• An email service will send sign-in links and, if you subscribe, the digest. We will name it here when it is set up.
• Razorpay processes payments if you buy a paid plan. It handles your card, UPI or bank details. We never see or store them, and we keep only the payment reference, amount and date.

We do not sell your personal information. We may share information if the law requires it, to protect people from harm, or if the service is sold or merged, in which case we will tell you.

Our providers run in several countries, so your information may be processed outside the country where you live. Where the law requires it, we rely on approved safeguards, such as standard contractual clauses, with our providers.

• Account and learning data: while your account is open, and for a short time after you ask us to delete it.
• Certificates: until you ask us to remove them, so that the code on a printed or shared certificate keeps working.
• Contact messages: as long as we need to reply and keep a record of the conversation.
• Anonymous visit counts: we keep them to understand trends. They are not tied to your name.

Depending on where you live, you may have the right to see the information we hold about you, correct it, delete it, receive a copy, object to some uses, withdraw consent and complain to your data protection authority.

To use any of these rights, or to delete your account, send us a privacy request. We may need to check it is you. We aim to reply within one month.

You can also clear the information saved in your browser at any time, change the privacy choice in the notice at the bottom of the page by clearing site data, and sign out, which clears saved progress from that browser.

Route To AI is made for adults and older teenagers. It is not aimed at children under 16. We do not knowingly collect information from them. If you think a child has given us information, please contact us and we will delete it.

We use encryption in transit, access controls and separate roles for our systems. No system is perfectly safe. If a breach puts your rights at risk, we will tell you and the authorities as the law requires.

Lessons and labs teach about AI tools. We do not use your account, progress, messages or certificates to train AI models. If you paste real personal or confidential data into a third-party AI tool while doing a lab, that is between you and that tool. The labs use made-up data on purpose. Please keep it that way.

We may update this policy. We will change the date at the top. If a change is important, we will also tell signed-in users.