What this policy covers
This policy describes the current Zuvopa welcome, account, email verification, recovery and onboarding experience. It explains what information is processed and why. A separate waitlist site or a service you visit through an external link may have its own privacy notice.
Zuvopa is intended for students aged 13 and over. Use an explorer nickname; you do not need to provide your legal name for the current onboarding experience.
Information we handle
- Account details: your email address, account identifier, password authentication data, verification status and account timestamps. Supabase Auth handles password authentication; we do not store a readable password in your player profile.
- Signup confirmations: your confirmation that you are at least 13, the policy version accepted and its acceptance timestamp. The current form does not ask for your date of birth.
- Explorer setup: your chosen display name, generated player ID, character and suit selections, setup stage, progress and timestamps.
- Learning setup: assessment questions attempted, submitted answers, hints used and the resulting suggested starting placement.
- Technical information: session tokens and cookies needed for account access. Hosting, database and email providers may also process IP addresses, browser information, request times, security events and delivery logs when providing their services.
The current onboarding does not collect a separate private explorer passphrase. Your login password belongs only in the password fields, never in your display name or an assessment answer.
Why we use it
We use this information to create and verify your account, sign you in, help you recover access, save explorer setup, suggest a learning starting point, maintain security and respond to support or privacy requests.
Your onboarding answers produce a provisional placement. They are not used to make school admissions, grading or other decisions with legal or similarly significant effects. The current implementation does not send your answers to an external generative AI service.
Where applicable law requires a legal basis, these activities may rely on providing the service you request, legitimate interests in keeping it secure, legal obligations, or consent for an optional feature. Optional purposes requiring consent will need a separate choice.
Cookies and device storage
Essential session cookies keep you signed in. Short-lived verification, recovery and request-control cookies help complete account actions and limit repeated requests. Blocking these cookies can prevent account features from working.
Your browser also stores your graphics-quality and reduced-motion preferences locally under zuvopa-display. This preference is not a learning record. You can clear it through your browser’s site-data settings; doing so may also sign you out.
The current app source does not include advertising trackers or optional analytics scripts. A separate waitlist site is outside this description. If optional tracking is introduced in this app, we will update this notice and provide any choices required before it is enabled.
Visibility and security
Your current player profile and onboarding records are private to your account through the app’s access controls. A generated player ID does not make your email address public. This version does not include a public player directory, public profiles or chat.
We use authentication and database access controls to protect records, but no online system can guarantee complete security. Keep your email account secure, use a unique password, and sign out on shared devices.
How long information stays
We retain account and onboarding records while your account is active and needed to provide the service. If you request deletion, we will assess the request, verify ownership and remove or anonymize information unless a legitimate security or legal reason requires limited retention.
Deletion may not immediately remove copies in provider backups or logs. Those copies follow the provider’s retention and deletion processes. We have not implemented an automatic inactive-account deletion schedule in this version.
Your choices and requests
You can contact us to request access to your information, corrections, a copy of your records or account deletion. Depending on where you live, you may also have rights to object to processing, restrict it, withdraw consent for optional processing or complain to your local data protection authority. Which rights apply depends on the law and the circumstances.
These requests are currently handled by the team rather than an in-app export or deletion tool. We may ask for reasonable verification to protect your account. Do not send us a password, recovery link or verification code.
Younger explorers
Accounts are for people aged 13 or older. We do not offer an under-13 account flow. If you believe someone under 13 has supplied personal information, contact us so we can investigate and take appropriate action, including deletion where required.
If you are a teen, review this policy with a parent or guardian when you need help understanding it or local law requires their permission.
Updates and contact
We will update the date and version on this page when our practices change. For a material change, we will provide appropriate notice and obtain consent where required.
Zuvopa operates this version of Zuvopa.
For account help, privacy requests, deletion requests or questions about these terms, email support@zuvopa.com. Use your account email when possible. We may ask for reasonable proof of ownership; never send your password or verification codes.