PRIVACY_POLICY

Account information

When you sign up, we (via our authentication provider, Clerk) collect your email address, and if you sign in with Apple or Google, the name and email those providers share with us. If you sign up with a password, Clerk stores it in hashed form — we never see or store your raw password.

Profile & learning data

Your username, chosen experience level and interests, XP, streaks, hearts, quiz and lesson history, mastery/spaced-repetition progress, badges, and placement assessment results. If you add a profile photo, it's uploaded to our storage provider (Convex) and linked to your account.

Friends & social features

If you add friends in-app, we store the connection (who requested, who accepted) and enough of each friend's profile (username, XP, streak, recent activity) to display it to their friends.

Purchases & subscriptions

If you subscribe to Blackbat Pro or buy a certification pack, our payment processor (RevenueCat, on top of the App Store) shares your subscription status, product IDs, and transaction IDs with us so we can unlock premium features. We do not receive or store your card number — that's handled entirely by Apple.

Notifications

If you enable reminders, we store a push notification token and your reminder preferences (which reminders, what time) so we can send them.

We do not access your camera or photo library, location, contacts, or microphone, and we don't use any third-party analytics or crash-reporting SDK that profiles you across other apps. Profile pictures in Blackbat are chosen from a set of built-in avatar presets, not uploaded from your device.

To run the app you're using: authenticate you, save your progress, calculate streaks/XP/leaderboards, unlock premium content you've paid for, show your friends what you're up to, and send reminders you've opted into. We do not sell your personal data, and we do not use it to build advertising profiles of you.

Who we share data with, and why

• Clerk — authentication (email, name, login method)
• Convex — our database and file storage (everything listed above)
• RevenueCat & Apple's App Store — subscription and purchase processing
• Google AdMob — serves ads to free-tier users (see below)

Each of these processes data only to provide their specific service to us — none of them are permitted to use your Blackbat data for their own purposes.

Free accounts occasionally see rewarded ads (served by Google AdMob) to skip a short cooldown. We request non-personalized ads only — we don't ask for App Tracking Transparency permission, and we don't share your Apple advertising identifier (IDFA) or any cross-app tracking data with Google or anyone else. Blackbat Pro removes ads entirely.

You can permanently delete your account at any time from Profile > Delete Account — no email required. This immediately and permanently removes your profile, progress, streaks, avatar, and friend connections. We retain purchase and transaction records after deletion, as required for financial recordkeeping and fraud prevention, but these are no longer linked to an active, usable account.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain uses of it. You can exercise most of these yourself in-app (edit your profile, delete your account); for anything else, email blackbat.terminal@gmail.com and we'll respond within a reasonable time. We do not sell personal data, so there is nothing to opt out of on that front.

Blackbat is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has created an account, contact us and we'll delete it.

Data is encrypted in transit (HTTPS/TLS) between the app and our backend. Access to production data is limited to what's needed to operate the app. No system is perfectly secure, but we don't store payment card data, and we minimize what we collect in the first place.

If this policy changes materially, we'll update the effective date above. Continued use of Blackbat after a change means you accept the updated policy.