Privacy Policy

When you use Real IT, we collect:

• Account information — name, email, username, bio, and a hashed password (we never store your password in plain text).
• Progress data — XP, streaks, completed missions, badges, and time spent per mission, so your progress is saved across devices.
• Billing information — if you subscribe to Pro, Stripe processes your payment details directly; we only store your Stripe customer ID and subscription status, never your card number.
• Communications — messages you send us through the feedback form, support email, or enterprise contact form.

We use your data to:

• Operate your account, save your progress, and let you pick up where you left off.
• Send transactional email — email verification, password resets, login codes, and billing receipts.
• Respond to support requests and feedback you send us.
• Detect abuse and keep the platform secure.

We do not sell your data, and we do not use it for third-party advertising. We do not currently run marketing or analytics tracking beyond what's described here.

We share data only with the service providers that make Real IT work:

• Stripe — payment processing for Pro subscriptions.
• Resend — delivery of transactional email (verification, login codes, receipts, notifications).
• Neon — our database host, where your account and progress data is stored.
• Vercel — hosts the application and its infrastructure.

Each of these providers only receives what they need to perform their function and is bound by their own privacy and security obligations.

We use a session cookie to keep you signed in. We don't use third-party advertising or tracking cookies.

We retain your data for as long as your account is active. You can request account deletion at any time by emailing support@real-it.app — deleting your account permanently removes your profile, progress, and billing links from our database.

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email support@real-it.app and we'll respond within a reasonable time.

Real IT is not intended for children under 13, and we do not knowingly collect data from anyone under 13. If you believe a child has created an account, contact us and we'll remove it.

Passwords are hashed, not stored in plain text. Data is encrypted in transit over HTTPS. No system is perfectly secure, but we take reasonable steps to protect your information and will notify affected users if we become aware of a breach involving your data.

We may update this policy as the product changes. Material changes will be announced by email or an in-app notice before they take effect.

Questions about this policy or your data? Email support@real-it.app.