UpPetoSign up

Privacy Policy

Last updated: February 18, 2025

This Privacy Policy describes how Talgat Vakhitov, doing business as UpPeto ("UpPeto," "we," "us," or "our"), collects, uses, discloses, and protects your personal information when you use the UpPeto platform (the "Service"). This policy applies to all users of the Service, regardless of location, and provides specific disclosures required under the laws of the State of Texas, the State of California, and United States federal law.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Name, email address, and password when you create an account
  • Learning Data: Information you provide during the learning interview, including your learning goals, experience level, and available timeline
  • Assessment Responses: Your answers to diagnostic questions used to evaluate your current knowledge
  • Course Interactions: Your progress through course materials, including completion status and time spent

1.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, and interactions with the Service
  • Device Information: Browser type, operating system, and device identifiers
  • Log Data: IP address, access times, and referring URLs
  • Cookies and Local Storage: As described in our Cookie Policy

1.3 Information Generated by the Service

  • Learning Profiles: AI-generated assessments of your learning needs
  • Knowledge Maps: AI-generated evaluations of your current knowledge
  • Course Plans: Personalized curricula generated by our AI system
  • Adapted Content: Modified educational content based on your progress

2. How We Use Your Information

We use the information we collect to:

  • Provide the Service: Create your account, generate personalized learning content, track your progress, and adapt content to your needs
  • Improve the Service: Analyze usage patterns to improve our AI models, content quality, and user experience
  • Communicate with You: Send account-related notifications, respond to your inquiries, and provide customer support
  • Ensure Security: Detect and prevent fraud, abuse, and unauthorized access
  • Comply with Law: Meet legal obligations and respond to lawful requests

3. Third-Party Services

We use the following third-party services to operate the platform. Each processes your data in accordance with their own privacy policies:

  • Supabase (supabase.com) — Authentication, database hosting, and data storage. Your account information and learning data are stored on Supabase's infrastructure.
  • Anthropic (anthropic.com) — AI language model provider. Your learning goals, diagnostic responses, and related context are sent to Anthropic's Claude API to generate personalized educational content. Anthropic processes this data according to their API data usage policy.
  • Vercel (vercel.com) — Web hosting and deployment. Vercel processes HTTP requests and may collect standard server logs.

We do not sell your personal information to any third party. We share data with third-party services only as necessary to provide the Service as described above.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

  • Account Data: Retained until you delete your account
  • Learning Data & Course Content: Retained for the duration of your account to maintain your course history and progress
  • Cached AI Outputs: Temporarily cached for 48–72 hours to improve performance, then automatically deleted
  • Server Logs: Retained for up to 90 days for security and debugging purposes

Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

5. Your Rights

5.1 General Rights (All Users)

Regardless of your location, you have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request that we correct inaccurate or incomplete personal information
  • Deletion: Request that we delete your personal information and account
  • Data Portability: Request a copy of your data in a structured, machine-readable format

To exercise any of these rights, please contact us at talgat.prog@gmail.com. We will respond to your request within 30 days.

5.2 Texas Residents — Texas Data Privacy and Security Act (TDPSA)

If you are a resident of the State of Texas, you have additional rights under the Texas Data Privacy and Security Act (Tex. Bus. & Com. Code Ann. § 541.001 et seq.), effective July 1, 2024, including:

  • The right to confirm whether we are processing your personal data
  • The right to access your personal data
  • The right to correct inaccuracies in your personal data
  • The right to delete personal data you have provided or that we have obtained
  • The right to obtain a portable copy of your personal data
  • The right to opt out of the processing of personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects

We do not sell your personal data. We do not process personal data for targeted advertising. We do not engage in profiling that produces legal or similarly significant effects.

To exercise your TDPSA rights, contact us at talgat.prog@gmail.com. We will respond within 45 days. If we decline your request, you may appeal by contacting us at the same email address. If your appeal is denied, you may file a complaint with the Texas Attorney General at www.texasattorneygeneral.gov.

5.3 California Residents — California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA"), including:

  • The right to know what personal information we collect, use, disclose, and sell
  • The right to delete your personal information
  • The right to opt out of the sale or sharing of personal information
  • The right to non-discrimination for exercising your CCPA rights
  • The right to correct inaccurate personal information
  • The right to limit use and disclosure of sensitive personal information

We do not sell or share your personal information as those terms are defined under the CCPA. In the preceding 12 months, we have collected the following categories of personal information: identifiers (name, email, IP address), internet activity information (usage data), and inferences drawn from the above (learning profiles, knowledge maps).

To exercise your CCPA rights, contact us at talgat.prog@gmail.com. We will verify your identity before fulfilling your request and respond within 45 days.

6. Children's Privacy

The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act ("COPPA"). If you are a parent or guardian and believe we have collected information from your child under 13, please contact us at talgat.prog@gmail.com and we will promptly delete such information.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including:

  • Encrypted data transmission (HTTPS/TLS) for all communications
  • Encrypted data storage through our infrastructure providers
  • Row-Level Security (RLS) policies ensuring users can only access their own data
  • Secure authentication with hashed passwords (handled by Supabase Auth)
  • Regular security reviews of our codebase and infrastructure

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

8. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers and third-party service providers are located. By using the Service, you consent to the transfer of your information to the United States.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Service and updating the "Last updated" date. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Talgat Vakhitov d/b/a UpPeto
Email: talgat.prog@gmail.com