Data Processing Summary
Last updated: February 20, 2026
This page explains what data Skill Focus Lab collects, why we collect it, how long we keep it, and how you can request changes or deletion. We believe in full transparency.
What Data We Collect
| Data Type | Examples | Required? |
|---|---|---|
| Account Information | Name, email address, hashed password | Required |
| Practice Results | Typing WPM, accuracy, grammar scores, focus sessions | Required |
| Subscription Data | Plan type, billing interval, payment provider ID | If subscribed |
| Resume Text | Resume content you paste for analysis (not stored permanently) | Optional |
| AI Interaction Logs | Questions sent to AI coaching (used for rate limiting) | If used |
| Session Cookies | Authentication session token (HttpOnly, not accessible to JS) | Required |
| Analytics | Page views, feature usage (via Google Analytics) | Anonymous |
Why We Collect It
Progress Tracking — To show your Skill Score, improvement trends, and personalized recommendations.
AI Coaching — To provide context-aware suggestions. Your input is sent to OpenAI for processing and is not used for model training.
Billing — To manage your subscription. We never store full card numbers; Stripe handles payment data.
Security — To prevent abuse, enforce rate limits, and protect your account.
How Long We Keep It
| Data | Retention Period |
|---|---|
| Account data | Until you delete your account |
| Practice results & scores | Until you delete your account |
| Resume text | Not permanently stored; processed in-memory |
| AI interaction logs | 90 days (for rate limiting and abuse detection) |
| Session cookies | 30 days or until sign-out |
| Payment records | 7 years (legal/tax compliance) |
Who Can Access Your Data
You: Full access to view, export, and delete your data via your account.
Skill Focus Lab team: Limited access for support requests and system maintenance. We never sell your data.
Third-party processors:
- Cloudflare — hosting and database (encrypted at rest)
- Stripe — payment processing only
- OpenAI — AI coaching requests (not used for training per OpenAI API terms)
- Google Analytics — anonymous usage statistics
Your Rights
Data Export
Request a copy of all your data at any time.
Data Deletion
Request permanent deletion of your account and data.
Data Correction
Update your name, email, or profile at any time.
Opt Out
Opt out of marketing emails or analytics tracking.
To exercise any of these rights, contact us at [email protected].