1. Who is responsible
Slux is run by the Slux team, based in Kazakhstan, which is responsible for your data. Contact: support@slux.app.
2. What we collect
- Account: your email, the name you give us and a hashed password; if you sign in with Google, your Google name, email and profile picture.
- Learning data: your quiz answers (course, exam timing, daily goal, the two warm-up problems), lesson progress, your answers in lessons, XP, streaks, achievements and your time zone (so a day ends at your midnight).
- Payments: handled by Polar. We receive your plan, its status and a customer reference, never your card details.
- Usage events: simple first-party events such as "started the quiz" or "opened pricing", with a random visitor id, the link or ad campaign that brought you (its UTM tags), your country from your IP address and your device type. They are linked to your account when you have one, so we can see where the site confuses people and which ads bring people who find it useful.
- Quiz answers: what you tell us in the quiz (your course, year, exam, what makes math hard, what you use now, what help would be worth to you) to build your plan and to understand our learners.
- Technical data: IP address and browser type stored with your sign-in sessions, and standard server logs kept by our hosting provider.
3. Cookies
We use first-party cookies only: your sign-in session, your choice of teacher, language and time zone, a random visitor id and the campaign that brought you (kept for 90 days). There are no advertising cookies and no third-party analytics or tracking pixels.
4. How we use it
- to run your account, save progress and show your map, streak and plan;
- to process subscriptions and purchases with Polar and answer support requests;
- to improve lessons, mostly from aggregated data such as which steps many people get wrong;
- to keep the service secure and prevent abuse.
We do not sell your data, do not use it for advertising and do not share it with anyone except the providers below.
5. Who helps us
- Vercel hosts the website (United States).
- Prisma Data hosts the database (United States, East).
- Polar processes payments as our merchant of record.
These providers process data on our behalf under their own security and privacy terms. Your data may therefore be stored and processed outside your country, including in the United States.
6. How long we keep it
We keep account and learning data while your account exists. When you delete your account, your data is removed from the database right away and from backups within 30 days. Guest profiles that are never turned into an account may be deleted after 12 months without activity. Payment records are kept by Polar as tax law requires.
7. Your rights
You can ask for a copy of your data, ask us to correct it, object to a use of it or have it deleted. You can delete your account yourself on your profile page (Me, then Delete account); for anything else write to support@slux.app and we will answer within 30 days. If you are in the EU or UK, you can also complain to your data protection authority.
8. Age
Slux is for people aged 18 and older. We do not knowingly collect data from anyone younger. If you believe someone under 18 has an account, tell us and we will delete it.
9. Security
Connections are encrypted (HTTPS), passwords are stored only as hashes, and access to the database is limited to the people who run the service.
10. Changes
If we change this policy in a way that matters, we will say so on the site or by email before the change applies.