Privacy overview, updated November 5, 2026
Your study workspace is designed around account ownership.
This overview explains how Arcade Academy handles personal study data and purchases, and how to ask for your account to be deleted.
Information in the workspace
What the application is designed to store.
Arcade Academy needs enough information to provide an account, preserve your study work, and return useful practice history.
- Account information
- Email address, authentication state, and the information needed to verify, recover, and secure a signed-in account.
- Study preferences
- Profile details such as program stage, study goals, topic preferences, and accessibility settings used to organize the workspace.
- Content you create
- Private notes, personal decks and cards, bookmarks, linked study context, and files you intentionally upload.
- Purchases
- When you unlock an exam: which exam, the amount, the date, and Stripe's references to the payment. Stripe, our payment processor, collects your card details and email directly; Arcade Academy never receives your card number.
- Study activity
- Flashcard reviews, session state, game results, achievements, and resource activity needed to preserve progress and show study feedback.
How it is used
Study data supports the study experience.
The current application uses data to operate the workspace, preserve progress, and understand product reliability.
- Create, verify, recover, and secure an account through Supabase authentication.
- Save personal notes, decks, cards, bookmarks, preferences, uploads, and session state.
- Schedule flashcard reviews and show activity, topic patterns, games, and achievement history.
- Protect the service, diagnose failures, and measure reliability and page performance. Vercel-hosted environments can use Vercel Analytics and Speed Insights for these product signals.
The current application has no advertising workflow and no feature for selling student study data.
Access boundaries
Private records use ownership checks at the data layer.
The interface is only one boundary. The database and file policies are designed to enforce the signed-in student's ownership too.
- Student isolation
- Personal notes, decks, study history, and profile records use row-level ownership policies. An administrator role does not grant access to another student's private study records.
- Private file storage
- Personal uploads and managed educational assets use private storage buckets and permission-checked download paths rather than public file URLs.
- Local demo behavior
- When the development demo is deliberately enabled without Supabase, sample activity stays in the browser and is clearly separated from a hosted account.
Please do not enter patient information.
Arcade Academy is a personal education workspace, not a clinical record system. Do not add patient names, identifiers, protected health information, case details that can identify a person, or material you are not authorized to store.
Your data and requests
Correct your details, or ask for your account to be deleted.
Your study records stay on your account until you ask for it to be deleted.
- You can correct your name, exam, timeline, and study preferences yourself on your Profile page.
- To delete your account, email our support team (a contact address is coming soon) from the email address on your account. We reply once it is done.
- Deleting an account removes its profile, notes, decks, cards, bookmarks, uploads, and study history, and ends its exam unlocks. Payment records that Stripe keeps for tax and accounting stay with Stripe.
- Service providers that process data to run Arcade Academy: Supabase (accounts, database, and file storage), Vercel (hosting, analytics, and performance monitoring), and Stripe (payments).