Privacy Policy

CodePudding, LLC ("Company," "we," "us") operates the Kursify platform, including the website at kursify.app, the Telegram bot (@KursifyBot), and the Telegram Mini App (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree, please do not use the Service.

2.1 Information from Telegram

When you use the Service, we receive the following information from your Telegram account:

• Telegram User ID — your unique numeric identifier (used as your primary account identifier).
• Username — your Telegram username, if set.
• First name — your Telegram display name.

We do not collect your phone number, email address, password, or any other Telegram profile information.

2.2 Content You Submit

• YouTube URLs — links to videos you submit for processing.
• Audio files — audio recordings you upload for transcription and course generation.
• Transcripts — text extracted from YouTube videos or transcribed from your audio uploads.

2.3 Generated Content

We store AI-generated learning materials associated with your account, including summaries, quizzes, flashcards, Cornell Notes, timestamps, actionable takeaways, and notable quotes.

2.4 Usage and Progress Data

• Subscription tier and status (free, premium, or pro).
• Language preference (auto, English, or Russian).
• Usage metrics: number of videos processed, credit hours remaining.
• Learning progress: quiz scores, flashcard mastery rates, lesson progress, completion dates.

2.5 Payment Information

We do not directly collect or store credit card numbers, bank account details, or other financial information. All payment processing is handled by our third-party Merchant of Record. We store only:

• Subscription and customer identifiers from our payment provider.
• Transaction identifiers.
• Payment amounts and currency.
• Payment status (pending, completed, or failed).

2.6 Support Data

If you contact support through the Telegram bot, we store your support ticket history, including your Telegram user ID and ticket status. Support conversations are conducted through Telegram.

2.7 Automatically Collected Data

We use analytics and error monitoring tools that may automatically collect:

• Page views, button clicks, and interaction events on the website and Mini App.
• Device type, browser type, and operating system.
• Error reports and performance data.

We do not use cookies for session management or authentication. See Section 6 for details on analytics tools.

We use the information we collect to:

• Provide the Service: Process videos, generate learning materials, and deliver them to you.
• Manage your account: Authenticate your identity, track your subscription status, and enforce usage limits.
• Process payments: Facilitate subscription billing and credit hour purchases through our payment provider.
• Track learning progress: Save quiz scores, flashcard mastery, and course completion data.
• Provide support: Respond to support requests submitted through the bot.
• Improve the Service: Analyze usage patterns and errors to fix bugs and improve features.
• Operate the public course library: Display courses that users have chosen to make public.

We do not sell your personal information. We do not use your content or transcripts to train AI models.

We share your information only with the following categories of third parties, solely as necessary to operate the Service:

4.1 AI Content Generation Providers

We use third-party AI service providers to process video transcripts and generate learning materials (summaries, quizzes, flashcards, etc.). Transcripts sent to these providers are used solely for generating your content and are not used to train their AI models under their respective API terms of service.

4.2 Payment Processor

Our Merchant of Record handles all payment processing, billing, tax calculation, and VAT/sales tax compliance on our behalf. They receive the information necessary to process your payment. We do not directly handle or store your payment card details.

4.3 Analytics and Error Monitoring

We use analytics tools to understand how the Service is used and error monitoring tools to identify and fix technical issues. These tools receive pseudonymized usage data (page views, feature interactions) and error reports. They do not receive your video content or transcripts.

4.4 Cloud Infrastructure and Hosting

We use third-party cloud services for database hosting, file storage, and serving our website and API. Your data is stored in secure, professionally managed cloud infrastructure with encryption at rest and in transit.

4.5 Telegram

The Service operates through Telegram's bot platform and Mini App framework. Your interactions with the Service are facilitated by Telegram, and Telegram's own privacy policy applies to your use of the Telegram platform.

A current list of our specific sub-processors is available upon request by contacting us at contact@codepudding.dev.

Your data is stored in secure, professionally managed cloud infrastructure. We implement the following security measures:

• All data transmission is encrypted using HTTPS/TLS.
• Database access is protected by Row-Level Security (RLS) policies, ensuring users can only access their own data.
• Authentication uses Telegram's cryptographic HMAC-SHA256 verification — no passwords are stored.
• Security headers (HSTS, X-Content-Type-Options, X-Frame-Options) are enforced on all web responses.
• API rate limiting protects against abuse.

While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

The Service does not use cookies for authentication or session management. However, our third-party analytics tools may use local storage or similar technologies to track usage patterns on the website and Mini App.

Our analytics tools are configured to create user profiles only for identified users (those who interact with the Service through their Telegram account). Page views and interactions are tracked for product improvement purposes.

• Account data: Retained as long as your account exists.
• Generated courses and progress: Retained as long as your account exists.
• Audio file transcripts: Stored in secure cloud storage for the lifetime of the associated course.
• Payment records: Retained for accounting and legal compliance purposes as required by law.
• Support tickets: Retained for the lifetime of your account.
• Analytics data: Subject to our analytics and monitoring providers' retention policies.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

8.1 All Users

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data (note: most profile data comes from Telegram and updates automatically).
• Deletion: Request deletion of your account and associated data.
• Data portability: Request your data in a structured, machine-readable format.

8.2 European Economic Area (EEA) Residents

If you are in the EEA, your data is processed under the following legal bases:

• Contract performance: Processing necessary to provide the Service you requested.
• Legitimate interest: Analytics and service improvement.
• Consent: Where required by law.

You additionally have the right to object to processing based on legitimate interest and to lodge a complaint with your local data protection authority.

8.3 California Residents (CCPA)

Under the California Consumer Privacy Act, you have the right to:

• Know what personal information we collect and how it is used.
• Request deletion of your personal information.
• Opt out of the sale of personal information — we do not sell personal information.
• Non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us at contact@codepudding.dev or through the Telegram bot's support feature. We will respond to verified requests within 30 days.

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at contact@codepudding.dev.

Your information may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from your jurisdiction. By using the Service, you consent to the transfer of your information to these countries.

Where required, we rely on appropriate safeguards such as standard contractual clauses for international data transfers.

We may update this Privacy Policy from time to time. We will notify you of material changes through the Telegram bot or by posting a notice on the Service. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

For privacy-related questions or to exercise your data rights, contact us at:

CodePudding, LLC
1111B S Governors Ave STE 89154
Dover, Delaware 19904
Email: contact@codepudding.dev
Phone: +1 (347) 502-2893