Privacy Policy

Last updated: October 15, 2026

Draft: this page needs legal review before launch and is not yet final.

Alice N Bob Inc ("Alice & Bob," "we," "us," or "our") operates the Alice & Bob mobile and web application and the marketing website at alicenbob.com (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

If you have questions about this policy or your data, contact us at hello@alicenbob.com.

1. Information we collect

We collect information in three ways: what you give us directly, what is created as you use the app, and what your device sends us automatically. We also store a non-sensitive language preference in a shared browser cookie to show the site in your selected language.

Account information

  • Email address and username when you register. Your password is stored only as a one-way cryptographic hash — we never store or can retrieve your plaintext password.
  • Social sign-in — if you sign in with Google or Apple, we receive and store the provider's account identifier, the email and username associated with that account, and basic profile data the provider shares with us. We also store your selected language preference with your account. We do not receive your Google or Apple password.

Learning activity and progress

  • Lesson and unit completion, scores, and unlock status.
  • Aggregate stats such as total lessons completed, total score, and current/longest daily streak.
  • Per-question results (whether an answer was correct and time spent) used to improve lesson content.
  • Friendships and leaderboard activity, if you add friends in the app.

Device, usage, and diagnostic information

  • Session data such as session length, screens visited, lessons completed per session, and XP earned.
  • Device and platform information (e.g., device type, operating system/platform, app version) and, for signed-in sessions, IP address.
  • General product-usage events (event type and category) tied to your account where applicable, used for understanding how the app is used.
  • Error and crash diagnostics, including error type, error message, and technical stack traces, together with device and app-version information, to help us fix bugs.

Password reset emails

If you request a password reset, we email a time-limited reset link to the address on your account. We do not use this flow to send marketing email.

Website visitors

The marketing website itself (alicenbob.com) does not run third-party analytics or advertising scripts. It loads the Nunito font from Google Fonts and remembers your light/dark theme preference in your browser's local storage; that preference is never sent to our servers.

2. How we use this information

  • To create and secure your account, authenticate you, and provide the core learning experience (lessons, quizzes, progress, streaks, and friends).
  • To operate password reset and account-recovery flows.
  • To monitor, diagnose, and fix errors, and to keep the Service reliable and secure (e.g., detecting abuse or unauthorized access).
  • To understand aggregate usage patterns so we can improve lessons, features, and the overall product.
  • To communicate with you about your account or respond to support requests sent to hello@alicenbob.com.

We do not use your data to serve third-party advertising, and we do not sell your personal information.

3. Legal bases for processing (EEA/UK users)

If you are in the European Economic Area, the UK, or another jurisdiction with similar requirements, we rely on the following legal bases under GDPR-style frameworks:

  • Performance of a contract — processing needed to create your account and provide the Service you asked for (e.g., tracking your own lesson progress).
  • Legitimate interests — securing the Service, preventing abuse, diagnosing errors, and improving our product, balanced against your rights.
  • Consent — where we ask for it specifically, such as linking an optional social sign-in account; you can withdraw consent at any time.
  • Legal obligation — where we must retain or disclose information to comply with applicable law.

4. Data retention

We retain personal data for as long as your account is active and as needed to provide the Service. Diagnostic and usage data (such as error logs and session analytics) are retained for a limited operational period to support debugging and product improvement, after which they may be deleted or aggregated. When you request deletion of your account, we delete or anonymize your personal data within a reasonable period, except where we are required or permitted to retain certain records for security, fraud-prevention, or legal-compliance purposes.

5. How we share information

We do not sell your personal information. We share information only in the following circumstances:

  • Service providers who process data on our behalf under contract — for example, infrastructure/hosting providers and the email delivery used for password resets.
  • Sign-in providers (Google, Apple) to the extent necessary to authenticate you if you choose social sign-in.
  • Legal and safety reasons — if required by law, legal process, or to protect the rights, safety, and security of our users or the public.
  • Business transfers — if we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction; we will provide notice before your data becomes subject to a different privacy policy.

6. Your rights and choices

Depending on where you live, you may have rights to access, correct, export, restrict, or delete your personal data, and to object to or withdraw consent for certain processing.

You can exercise these rights at any time by emailing hello@alicenbob.com from the address associated with your account. We may ask you to verify your identity before fulfilling a request. We will respond within a reasonable timeframe and in accordance with applicable law. You can also delete your account and progress yourself at any time in the app's settings.

7. Children's privacy

Alice & Bob is a cybersecurity-education product that teens may use, but the Service is not directed to children under 13, and our registration flow does not currently collect age information. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at hello@alicenbob.com so we can review and delete it. If you are under the age required by your local law to consent to data processing on your own (commonly 13–16, depending on jurisdiction), please have a parent or guardian's permission before using the Service, and we encourage parental involvement for teen users generally.

8. Security

We use industry-standard safeguards such as password hashing and token-based authentication to help protect your information. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

9. International users

Our Service may be accessed from outside the country where our servers and service providers are located, which may mean your information is processed in a different country than where you live. We take steps intended to keep your data protected wherever it is processed.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Continued use of the Service after a change becomes effective constitutes acceptance of the updated policy.

11. Contact us

Alice N Bob Inc
Email: hello@alicenbob.com