Privacy Policy

Last updated: April 17, 2025

1. Introduction

Limitless Path ("we," "our," or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at learningbuddyai.app.

2. Information We Collect

Account Information

When you register, we collect:

  • Name and email address
  • Google account information (when using Google Sign-In)
  • Profile photo (optional)

Usage Data

We store the content you create, including:

  • Daily learning captures and AI-generated actions
  • Goals and milestones
  • Challenge history and XP progress
  • Source references (book titles, podcasts, etc.) you attach to entries

Automatically Collected Information

  • IP address and browser type
  • Device information
  • Usage analytics via Vercel Analytics

3. How We Use Your Information

  • Provide and personalize the Limitless Path service
  • Generate AI-powered actions from your learning entries
  • Track your XP, streaks, and goal progress
  • Send product notifications you have opted into
  • Process subscription payments via Polar.sh
  • Monitor and improve service performance
  • Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal data. We may share information only in these situations:

  • Service providers: Third-party vendors who help operate our service (e.g., Neon PostgreSQL for database hosting, Cloudflare R2 for file storage, Polar.sh for payments, OpenAI for AI features)
  • Legal requirements: If required by law or valid legal process
  • Business transfers: In connection with any merger, sale, or acquisition
  • Protection of rights: To protect our rights, safety, or property

5. Third-Party Services

We use the following third-party services:

  • Google Sign-In — authentication
  • Polar.sh — subscription billing
  • OpenAI — AI-generated actions and challenges
  • Neon — database hosting
  • Cloudflare R2 — file storage
  • Vercel — hosting and analytics

Each of these services maintains its own privacy policy governing use of your information.

6. Data Security

We implement appropriate technical and organizational security measures, including encrypted database connections (TLS/SSL) and secure authentication. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. You may request deletion of your account and associated data at any time by contacting us. We will comply within 30 days except where retention is required by law.

8. Your Rights

Depending on your location, you may have the right to:

  • Access — request a copy of your personal data
  • Correction — request correction of inaccurate information
  • Deletion — request deletion of your personal data
  • Portability — receive your data in a portable format
  • Objection — object to certain processing of your data
  • Withdraw consent — opt out of non-essential communications at any time

To exercise any of these rights, use the contact form at /contact.

9. Children's Privacy

Limitless Path is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

10. International Data Transfers

Our servers are primarily located in the United States. If you access our service from outside the US, your information may be transferred to and processed in the US. By using Limitless Path, you consent to such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or our data practices, please use the contact form on our website.