Privacy Policy
Last updated: June 2026
This is a document that explains what we collect, why, and what we do with it. We’ve written it in plain English on purpose. You deserve to know what’s happening with your information.
What Data We Collect and Why
Your email address
Collected when you sign up for the newsletter or create a trial or membership account. You can sign up with an email code, a password, or via Google. If you sign in with Google, we receive your email address and basic profile name from your Google account. We use your email to send you the content you signed up for, account information, and (if you’re a member) tutorial notifications. We do not use it to contact you for reasons unrelated to why you gave it to us.
Your name
Collected at signup (or from your Google account if you sign in with Google) and through the Ask Kevin form. Used to address you in correspondence and to personalise your account.
Payment information
Collected only when you begin a paid membership or purchase a guide. Payment processing is handled entirely by Paddle, our payment partner. We do not store your credit card details on our servers. Paddle’s privacy policy applies to the payment transaction.
Questions submitted through Ask Kevin
Retained to generate and deliver a support response. Questions are processed by AI tools to draft a response, which is then reviewed by an expert editor before being sent. They are not shared with third parties beyond the AI processing services listed below.
Usage data
Basic analytics about how pages are being used (which pages are visited, where traffic comes from, how long people spend on content). We use this to improve the platform. This data is aggregated and not linked to individual identities in our analysis.
How We Use Your Data
We use your data to:
- Send you what you signed up to receive
- Maintain and improve your membership account
- Improve the platform based on how it’s being used
- Respond to questions submitted through Ask Kevin
- Process payments through our payment gateway
We do not use your data to build advertising profiles. We do not use it for purposes beyond what you’d reasonably expect from a platform you’re paying to use.
Who We Share It With
We do not sell your data. We do not rent your data.
We share data only with the services required to run the platform:
Supabase: provides our authentication system and database. Your email, profile data, and account information are stored securely on Supabase’s infrastructure.
Google: if you choose to sign in with Google, Google provides us with your email address and display name for authentication purposes only. We do not access your Gmail, Google Drive, contacts, or any other Google services. Google’s use of your data is governed by their own privacy policy.
Paddle: our payment partner. Handles all billing, subscription management, and purchase transactions. We do not see or store your card details.
Resend: handles newsletter and account email delivery.
PostHog: provides privacy-friendly, aggregated usage statistics.
Mux: handles video streaming for member tutorials. Mux may collect technical viewing data (device type, connection quality, viewing duration) to deliver and optimise video playback. No personal identifying information beyond what is technically necessary for streaming is shared.
hCaptcha: used on some forms to verify that submissions are from a human, not a bot. hCaptcha may collect behavioural signals (mouse movements, interaction timing, device information) for this purpose. hCaptcha’s privacy policy applies to the data it collects.
OpenRouter (AI tools): used in the production and research process for content and Ask Kevin responses. These tools process text that may include questions you submit. No personal identifying information beyond what you’ve voluntarily included in your question is shared.
These providers are selected because they are necessary to operations. They are not provided with your data for their own marketing purposes.
Cookies and Tracking
We use cookies to keep you logged in, remember your preferences, and understand how the site is being used. We do not use cookies to track you across other websites.
Authentication
You can create an account and sign in using one of three methods:
- Email code: we send a one-time code to your email address. No password required.
- Password: you can optionally set a password in your account settings.
- Google: you can sign in using your Google account. We receive only your email address and display name. We do not request access to your Gmail, Google Drive, calendar, contacts, or any other Google service. Your Google data is used solely for authentication and is not sold, transferred, or used for advertising.
Third-Party Services
The services listed in the “Who We Share It With” section above operate under their own privacy policies. We recommend reviewing those policies if you have questions about how they handle data.
Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data. Account deletion removes your personal data from our active systems
- Object to specific uses of your data
To exercise any of these rights: contact us.
For EU and UK visitors: you have additional rights under GDPR, including the right to data portability and to lodge a complaint with a supervisory authority. For Canadian visitors: your rights under CASL apply to email communications.
Data Retention
We keep your data for as long as your account is active. If you cancel your membership and request data deletion, we delete your personal data within 30 days.
Some data may be retained longer where required by law.
Changes to This Policy
We will update the “Last updated” date when this policy changes. For significant changes, we will notify active members by email.
Contact for Privacy Concerns
If you have questions about this policy or how your data is handled: contact us.
This policy is written in plain English for clarity. It is subject to legal review and may be updated to meet regulatory requirements.