Privacy Policy

1. Who we are and how to contact us

KeyHatch.org is operated by DigiSim Technology Ltd, registered in England and Wales, United Kingdom under company number 16962306. Our registered office is Office 16555, 182–184 High Street North, East Ham, London, E6 2JA, United Kingdom. In this policy, “KeyHatch,” “we” and “us” refer to that operator.

For privacy questions or requests, contact [email protected]. Please identify the service and the request, without sending passwords, full payment details or unnecessary information about a child.

2. What this policy covers

Current service: KeyHatch is free to use without an account. Practice progress stays in this browser. Adults may optionally create a free account using Firebase Authentication. Account details and preferences are stored by our backend. Subscriptions, payments, child profiles and cloud practice saving are not enabled. Using the free service does not start a trial or authorize a future charge.

This policy covers KeyHatch.org and the practice service. Sections identified as planned describe the intended account and subscription services. We will update this policy and provide relevant notices before enabling new data collection. A third party’s own websites and services have their own privacy policies.

3. Practice data and device preferences

We use browser storage to remember progress summaries, lesson completion, scores, practice checkpoints, display and sound preferences, and your analytics choice. The current service does not upload these records to a KeyHatch learning database. Data on a shared browser may be accessible to other people using that browser profile.

Your typed practice text is used locally to provide feedback. We do not send raw keystrokes, passages, clipboard contents, private drafts or practice recordings to analytics or external AI services. Learning results describe practice in this app, not a verified professional qualification.

4. Website delivery and security

Cloudflare hosts and delivers the website. Network requests necessarily disclose information such as an IP address, requested URL and browser information to the delivery provider. This supports delivery, security and abuse prevention. See Cloudflare’s Privacy Policy. This network processing is separate from the practice records stored in your browser.

5. Optional analytics

Google Analytics loads only after you allow analytics. We use it to understand visits to public information pages. We do not measure practice screens, learner profiles or account pages, or send typed text, learning scores or account identifiers. Page URLs are stripped of query strings and fragments, and private referrers are not forwarded.

Google receives cookie identifiers and technical information associated with those permitted visits. Enhanced measurement, Google signals and advertising personalization are disabled. We do not use advertising cookies or session replay. Learn about Google’s processing of information from partner sites. Change your choice through Cookie Settings or our Cookies Policy. Declining does not restrict practice.

6. Optional adult accounts and Firebase Authentication

Adult accounts use Google sign-in or email/password registration through Google Firebase Authentication. Firebase processes the authentication identifier, email address, credentials and security information needed to sign in, such as IP addresses and browser details. Google sign-in can provide your name and profile image. We do not receive your Google password.

Our Graviton backend stores your product-scoped account identifier, email address, display name, verification status, your own practice-profile preferences and acknowledgment of the applicable adult-account terms. It does not receive your practice text or learning summaries in this release. No payment, child profile or paid entitlement is created by signing in. Firebase establishes identity, and does not authorize a subscription. See Firebase’s privacy information.

Resend delivers verification and password-recovery email from our KeyHatch domain. Delivery requires the destination address, message and action link. Links are security-sensitive; do not forward them to anyone. Neither authentication nor mail delivery is sent to Google Analytics. You can download your server account record or request account closure from the privacy and account controls after signing in again.

7. Support messages

For support and privacy requests, email [email protected]. We process the sender address, message, email headers and any attachments you choose to send so we can answer and manage your request. Please do not send passwords, payment security codes or unnecessary information about a child.

Cloudflare Email Routing forwards incoming support mail to our support inbox hosted by Google. Resend is our provider for outgoing support mail. These email providers process the information needed to deliver, secure and handle the correspondence; see Resend’s Privacy Policy and Google’s Privacy Policy. They do not receive local practice records unless you choose to include information in your message.

Support correspondence is retained for the time needed to resolve the request, investigate repeated issues and meet applicable legal obligations. Provider delivery logs and retained inbox messages have separate lifecycles. Contact us for the retention criteria relevant to your request or to ask for deletion.

8. Planned Stripe payments

When paid plans launch, Stripe will process checkout, recurring payments and refunds. Payment and billing details will be provided to Stripe through its payment flow. KeyHatch will use the subscription status and transaction references needed to provide the purchased service and resolve billing issues; it will not store full card numbers or security codes. See Stripe’s Privacy Policy and our Refund Policy. There is no payment collection in the current release.

9. Why information is used and shared

We use information to deliver requested features, remember choices, maintain security, respond to requests and, where allowed, understand public-site use. Optional analytics relies on your consent. Where data-protection law requires a legal basis, providing requested services, legitimate interests in operating a secure service, and applicable legal obligations may support other processing, as appropriate to the activity.

We do not sell personal information or share it for cross-context behavioral advertising. We use the providers described here for their stated purposes, and may disclose information when necessary to comply with law, protect people or address fraud. If a business transfer changes who is responsible for personal information, applicable notice and data-protection obligations will continue to apply.

10. Retention and deletion

• Practice records and preferences remain in your browser until you clear them, browser storage is evicted, or you remove the browser profile. There is no cloud copy of practice in this release.
• The analytics-choice record remains until changed or cleared. Optional Google Analytics cookies are configured to expire after up to 13 months.
• GA4 event-level and user-level retention is configured to two months, without resetting retention on new activity. Aggregated reports can be retained separately by Google.
• Hosting and security data is handled under the hosting provider’s applicable retention practices. Server account details are retained while your account is active.
• Production account closure stops access immediately and queues deletion of the Firebase identity, server account and practice-profile preferences, with retries for provider outages. Closing a development account removes its development records and does not delete the shared production sign-in identity. Local data for that account on the requesting browser is cleared separately. Other devices are not remotely erased. A minimal removal ledger containing an internal account reference, a hash of the authentication identifier and timestamps is retained while needed for deletion recovery and backup-restoration controls; completed jobs do not retain your email address or Firebase UID. Backups and provider delivery/security logs have separate lifecycles and are not instantly erased by closure. Contact us for the applicable backup rotation and provider-log retention details.

Before payments launch, we will publish the applicable billing retention periods. We will not imply that canceling a subscription deletes records required for accounting, disputes or other legal obligations.

11. Your choices and rights

You can practice without signing in, decline or withdraw analytics consent, change local preferences, and remove KeyHatch site data in your browser settings. Clearing site data also removes local progress and preferences; save any records you need first. Withdrawal stops future optional analytics and removes its cookies, but does not automatically erase data already processed.

Depending on your location and the applicable law, you may have rights to access, correct, delete or receive your personal information, restrict or object to certain processing, withdraw consent, and complain to the UK Information Commissioner’s Office or another competent data-protection authority. Contact [email protected] to make a request. We may need proportionate information to verify a request; we will not request your password or payment security code. These rights do not require a paid plan.

12. Parents and younger learners

Parents and guardians should supervise younger learners and avoid putting a child’s personal information into practice text or support messages. No child email or account is required for the current local practice service. Children should not make optional analytics choices on their own.

Planned child or parent-managed account features will require appropriate age, parental notice and authorization measures before collecting children’s account information. A Google login or a checkbox alone is not a substitute for any parental consent required by law. If you believe personal information about a child was collected improperly, contact [email protected] so we can investigate and address it.

13. International processing and security

Our service providers operate internationally, so information processed by them may be handled outside your country. Applicable transfer requirements and provider safeguards apply to that processing. We use HTTPS for delivery and minimize information sent by the app, but no internet service or device can guarantee absolute security. Protect shared devices and do not enter sensitive information into practice exercises.

14. Changes to this policy

We will update the date at the top of this page when the policy changes. Material changes to collection or use will be explained before they take effect where required, and we will obtain fresh consent when the law requires it. Planned features will not silently turn a free visit into a paid subscription.