Privacy Policy

Last Updated: 16 October 2026

Introduction

FindSkill.ai (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our website at findskill.ai and our iOS app (“FindSkill” on the App Store). It applies to both platforms equally; sections specific to one platform are clearly labeled.

We aim to follow data minimization, purpose limitation, and transparency: we request data needed to deliver the service and describe third-party processing below. Our website uses advertising measurement tags, which may process visit and device information; see the Advertising section and contact us to exercise applicable opt-out rights.

Information We Collect

Information You Provide

Account Information: When you create an account, we collect your email address and display name to enable progress tracking, certificate storage, and cross-device syncing.
Course Progress: When you take courses, we store your lesson completion status, quiz answers, and scores to track your progress and issue certificates.
Certificate Details: When you claim a certificate, we store your name (as entered), course completion data, scores, and a unique credential ID.
Skill Requests: When you submit a skill request, we collect your email address and optional name to notify you when your skill is ready.
Contact Information: When you contact us, we collect the information you provide in your message.
Kai chat: If you choose to use Kai, our AI course finder, on our website or in our iOS app, the messages you enter are processed to generate a reply (see “Kai AI Assistant” below). Do not include sensitive personal or confidential information in a chat.

Automatically Collected Information

Usage Data: We use analytics to understand how visitors use our site, including pages viewed, time spent, and general navigation patterns.
Device Information: Basic information about your device and browser for compatibility and optimization purposes.
Local Storage: We store course progress and preferences in your browser’s local storage for offline access. This data stays on your device unless you create an account.
Cookies: We use essential cookies for site functionality, authentication cookies for logged-in users, and analytics cookies to improve our service.

iOS App Data

When you use our iOS app, we also store the following on your device:

Onboarding preferences (language, role/profession selection) — stored locally via iOS UserDefaults so the app can personalize content and remember your choices between launches, and saved to your account when you are signed in.
Reading and quiz progress — lesson completion state, quiz answers, and scores are saved locally and, when you are signed in, synced to your account so progress follows you across devices.
Saved items — courses and messages you save are kept on your device and, when you are signed in, in your account.
Purchase status — StoreKit subscription and purchase state is cached locally to unlock premium content offline. When you buy or restore Pro while signed in, the App Store transaction is sent to our server so Pro follows your account.
Reminders and Listen — the daily reminder time stays on your device. Listen reads lessons with your iPhone’s own voice, on the device; lesson text is not sent anywhere for it.

The iOS app does not access your contacts, location, microphone, or camera, and cannot see your photos: it only asks to add an image to your Photos library when you save a certificate there. We do not use any tracking SDKs and do not share data with data brokers. Our app’s declared data uses are reflected in its PrivacyInfo.xcprivacy manifest and in the App Store privacy “nutrition label.”

How We Use Your Information

We use collected information to:

Provide account access and authentication
Track and sync course progress across devices
Issue and verify certificates of completion
Respond to your inquiries and skill requests
Improve our website, courses, and services
Send notifications about requested skills or course updates
Analyze usage patterns to optimize user experience
Comply with legal obligations

Third-Party Services

We use the following third-party services:

Authentication

We use Supabase for user authentication and data storage. Supabase processes your email and account data in accordance with their privacy policy.

We also support signing in with Apple (Sign in with Apple) and Google (Google Privacy Policy) as OAuth providers. When you use these providers, we receive the email address and name they choose to release to us. We do not receive your password or any other account data from these providers. If you use Sign in with Apple’s private email relay, we only receive the relay address.

Payment Processing

For premium subscriptions purchased on our website, we use Stripe to process payments. Stripe handles your payment information directly and we do not store credit card details. See Stripe’s privacy policy.

For purchases and subscriptions made inside our iOS app, payments are handled by Apple through the App Store using in-app purchase (StoreKit). Apple processes your payment method, billing address, and transaction details in accordance with the Apple Privacy Policy. We receive purchase confirmation and subscription status from Apple so we can unlock content on your account, but we do not receive or store your payment card details. Subscription management (cancellation, refunds, upgrades) for iOS purchases is handled through your Apple ID in the App Store.

Analytics

We use Google Analytics 4 on our website to understand traffic and usage patterns. Google may receive page and device information when its tag runs. You can manage analytics cookies using our cookie settings and Google’s opt-out browser add-on. The iOS app does not include Google Analytics or any other analytics SDK.

Advertising

We may display advertisements through Google AdSense. Our website also loads a Google Ads conversion tag and a LinkedIn Insight Tag on the pricing page. These providers may receive page visit, device, and cookie or similar identifier information and use it to measure advertising; depending on their practices, this may involve activity across websites. Google Ads consent signals are set to deny ad storage, ad user data, and ad personalization by default, but the Google tag still loads. You can manage ad personalization in your Google Ad Settings and your LinkedIn account settings. The LinkedIn tag on the pricing page currently loads independently of our cookie banner; do not treat declining analytics cookies as blocking that tag.

Hosting

Our website is hosted on Netlify. Netlify may collect basic access logs for security and performance purposes. We also use Railway to host our website search service and the Kai chat backend; search requests, chat requests, and associated technical data may be processed there.

Transactional Email

We use Resend to deliver sign-in codes and other service emails. Resend processes the recipient email address and message content to deliver those emails.

Third-Party Protection Commitment

These third parties process information for the purposes described above. Their own privacy notices describe their processing and retention practices. We do not claim that every third party provides identical protections or that a cookie preference stops every tag; contact us with questions about a provider or an applicable privacy right.

Kai AI Assistant (Website and iOS App)

Kai is our AI course finder. When you send Kai a message, on the website or in the iOS app, we send your message and recent chat context through our Kai service to OpenRouter, a third-party AI routing service, for a model to generate a response. In the iOS app, Kai also sends the job and the language you picked, so it can suggest courses that fit. The model provider selected through OpenRouter may also process that content.

Consent first: Kai asks for your permission before it sends anything to OpenRouter. In the iOS app you can withdraw it at any time in Me › Data and privacy, which turns Kai off.
Retention: We do not store Kai chats on our servers. OpenRouter and the model provider process them under their own privacy policies.
What not to share: Do not enter passwords, payment details, health information, or confidential material.

You can use the rest of the website and the app without Kai.

No Tracking Across Apps or Websites

Our iOS app does not track you across other companies’ apps and websites. We do not use the Advertising Identifier (IDFA), do not call Apple’s App Tracking Transparency (ATT) prompt, and do not integrate any tracking SDKs, data broker SDKs, or cross-app advertising networks. Our App Privacy “nutrition label” on the App Store reflects this.

Data Retention

Account Data: Retained as long as your account is active. You may request deletion at any time.
Course Progress: Retained as long as your account is active, or until you request deletion. Local-only progress (no account) is stored only on your device.
Certificates: Retained indefinitely to support credential verification, unless you request deletion.
Skill Requests: Retained until the request is fulfilled and for a reasonable period afterward for reference.
Analytics Data: Retained according to our analytics provider’s policies (typically 26 months).
Contact Messages: Retained as long as necessary to address your inquiry.

Your Rights

Depending on your location, you may have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your personal information and account
Request deletion of certificates and associated data
Export your course progress data
Object to certain processing of your data
Withdraw consent where applicable
Ask about advertising-related sharing or opt-out rights that apply in your jurisdiction

To exercise these rights, contact us at support@findskill.ai. We will respond within the timeframes required by applicable law; some requests may require identity verification.

How to Delete Your Account

You can request deletion of your account and associated personal data:

On the website: Contact support@findskill.ai from the email address associated with your account to request deletion. We do not currently offer a self-service website deletion button.
In the iOS app: Go to Me › Delete account. The app may ask you to sign in again first. It then deletes your account and the personal data linked to it, including your progress, saved items and certificates, on our servers and on your iPhone, and disconnects Sign in with Apple.
By email: Email support@findskill.ai from the address associated with your account. We will verify your identity and respond to your request within 30 days, or within any shorter period required by law. We will confirm when deletion is complete.

Once completed, account deletion cannot be undone. We may retain limited records (e.g., transaction history) where required by law, tax, or accounting obligations, or for fraud prevention, for the applicable period. Deleting your account in the iOS app also ends a subscription bought on our website (Stripe) right away. An Apple subscription is billed by Apple: cancel it in iOS Settings → your Apple ID → Subscriptions (the app shows how). If you ask us by email, cancel your subscription with its billing provider first.

Disable cross-device sync: Sign out of your account to stop syncing new progress to our servers.
Revoke Sign in with Apple: iOS → Settings → your Apple ID → Sign in with Apple → FindSkill → Stop Using Apple ID.
Revoke Google sign-in: myaccount.google.com/permissions → FindSkill → Remove access.
Cancel an iOS subscription: iOS → Settings → your Apple ID → Subscriptions → FindSkill → Cancel Subscription. Subscription management for iOS purchases is handled by Apple.
Cancel a web subscription: Account → Billing → Manage Subscription (Stripe customer portal).
Opt out of marketing emails: Click the “unsubscribe” link in any email, or email us.
Full consent withdrawal: Email support@findskill.ai to withdraw processing consent where applicable. Note that withdrawing consent may disable account-based features.

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data under the following legal bases:

Contract (Article 6(1)(b) GDPR): To provide the account, course, certificate, and subscription services you request.
Legitimate interest (Article 6(1)(f) GDPR): To secure our service, prevent fraud, analyze aggregate usage, and improve our product. You may object to this processing at any time.
Consent (Article 6(1)(a) GDPR): For optional analytics cookies, marketing communications, and any future use of your data not covered by the above bases. You may withdraw consent at any time without affecting the lawfulness of prior processing.
Legal obligation (Article 6(1)(c) GDPR): To comply with tax, accounting, and other legal requirements.

California Residents (CCPA / CPRA)

If you are a California resident, you may have the right to know what personal information we collect, to delete or correct it, and to opt out of certain advertising-related sharing. We use the Google Ads and LinkedIn tags described above; contact support@findskill.ai to exercise your rights, including a request to opt out of sharing. You may also designate an authorized agent. We will not discriminate against you for exercising these rights.

AI Tools in Content Creation

We use artificial intelligence tools (including but not limited to Anthropic Claude, OpenAI ChatGPT, Google Gemini, and similar large language models) internally, by our content team, to draft, translate, and research courses, skills, blog posts, and other static content published on our platform. These tools operate on generic topic information authored by our team.

The content team’s separate editorial workflow is not the Kai chat feature. When you use Kai, on the website or in the iOS app, your chat input is sent to OpenRouter and the selected model provider as described above. We do not assert that third-party model providers never retain or use that input; consult their current policies before entering sensitive content.

If we introduce additional features that send personal data to third-party AI services, we will:

Update this Privacy Policy to name the specific AI provider and describe what data is shared and why.
Obtain your explicit in-app consent before any such data is transmitted, as required by Apple’s Guideline 5.1.2(i) and applicable privacy laws.
Allow you to decline without losing access to non-AI features.

Device Permissions (iOS App)

Our iOS app requests the minimum device permissions necessary. Currently the app asks only to add images to your Photos library, when you save a certificate there; it cannot read your photos. It does not request access to your camera, microphone, location, contacts, health data, HomeKit, or calendar. If we add a feature in the future that requires any of these, we will request the corresponding iOS permission with a clear purpose string describing why the data is needed, and you will be free to decline. Declining a permission will only disable the specific feature that requires it; the rest of the app will continue to work.

Subscriptions & Auto-Renewal

Paid plans are sold as auto-renewing subscriptions and, in the iOS app, also as a one-time Lifetime purchase that does not renew.

On the website: billing is handled by Stripe. You can view, pause, or cancel anytime from Account → Billing → Manage Subscription.
In the iOS app: billing is handled by Apple through your Apple ID. The subscription title, duration, and per-period price are shown before purchase. Payment is charged to your Apple ID at confirmation. The subscription automatically renews unless auto-renew is turned off at least 24 hours before the end of the current period. You can manage or cancel the subscription in iOS Settings → your Apple ID → Subscriptions. Any unused portion of a free trial is forfeited when you purchase a subscription where applicable. iOS subscription terms are governed by Apple’s standard End User License Agreement (EULA) in addition to this Privacy Policy and our Terms of Service.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encrypted connections (HTTPS/TLS), secure authentication (OAuth 2.0, Apple Sign-In, Google Sign-In), role-based access controls, encryption at rest for sensitive fields, and regular security reviews. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

Data Breach Notification

In the event of a data breach that materially affects your personal information, we will notify affected users and the relevant supervisory authorities within the timeframes required by applicable law (e.g., 72 hours under GDPR Article 33, without unreasonable delay under US state laws). Notification will describe the nature of the breach, the categories of data affected, the likely consequences, and the measures we have taken or propose to take.

Children’s Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

International Users

Our service is operated from the United States. If you access our site from outside the US, your information may be transferred to and processed in the United States, where data protection laws may differ from your country.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the new policy on this page with an updated “Last Updated” date.

Contact Us

If you have questions about this Privacy Policy, please contact us:

Email: support@findskill.ai