Privacy Policy

Who we are

Retain is operated by Retain Systems LLC (“Retain”, “we”). We provide the Retain iOS app for learners and the dashboard at buildretain.com for creators. Questions about this policy go to support@buildretain.com.

What we collect

Learners (the app)

Account: your email address and the display name you choose. Sign-in is by a one-time code sent to your email, so we never store a password for you.
Learning activity: the questions and lessons you answer, whether you got them right, XP, streaks, review schedules, and the level and self-assessment you pick during onboarding.
Workspace membership: which creators’ workspaces you have joined and when you last opened them.
Subscription status: whether you have access to a paid workspace, your plan interval, and your trial or renewal dates. Card details are collected and stored by Stripe, never by Retain.
Device data: the app stores a copy of your workspace content and progress on your device so it works offline. If you allow notifications, we store a push token for your device and your device’s time zone so reminders arrive at your local time; turning reminders off in Settings deletes the token.
Comments: comments you post on a daily question, your votes, any reports you file, and the people you block. Comments are visible to other members of that workspace and to its creator; they are checked by an automated moderation service before they are posted.

Creators (the dashboard)

Account and profile: email, name, handle, bio, avatar, and if you sign in with Google, the name and email Google shares with us.
Content you publish: topics, questions, lessons, images, and onboarding copy.
Payout details: handled by Stripe Connect. We store your Stripe account identifier and its status, not your bank details.

We do not collect precise location, contacts, photos, health data, or advertising identifiers, and we do not use your data to track you across other companies’ apps or websites.

How we use it

To run the product: deliver your daily question, grade answers, keep streaks and leagues, and remember where you left off.
To send transactional email: sign-in codes, receipts, and important account notices. We do not send marketing email to learners.
To bill subscriptions and pay creators through Stripe.
To keep the service secure and to debug problems.

Who can see your information

The creator whose workspace you joined can see your display name, email address, join date, activity, and progress inside their workspace. This is how they run their community. They cannot see your activity in other creators’ workspaces.
Other members of the same workspace can see your display name, avatar, and weekly XP on the league. Nothing else about you is shown to other learners.
Service providers that process data on our behalf: Supabase (database and authentication), Stripe (payments and payouts), Resend (email delivery), and Vercel (hosting). Each is bound by its own privacy terms and only receives what it needs to do its job.
Legal requests: we disclose information when the law requires it or to protect the rights and safety of our users.

We do not sell personal information and we do not share it with advertisers.

Retention and deletion

We keep your data while your account is open. You can delete your learner account at any time from Settings → Delete account in the app. Deleting your account cancels any active subscriptions, removes your profile, memberships, answers, and progress, and cannot be undone. Anonymised payment ledger entries are kept as required for tax and accounting. Creators can request account closure by emailing support@buildretain.com.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can change your display name in the app and delete your account yourself. For anything else, email support@buildretain.com and we will respond within 30 days.

Children

Retain is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

Security

Data is encrypted in transit. Sign-in sessions on your device are stored in the iOS keychain. Access to production systems is limited to the people who operate the service.

Changes

If we make material changes to this policy we will update the date above and, where appropriate, tell you in the app or by email.