Privacy Policy

Information we collect

Account information: your email address and display name, and — if you sign in with Google or Apple — the basic profile identifier those providers share with us.

Content you create: the problems you solve, the code and solutions you submit, your course and practice progress, and your use of AI features such as code clues.

Technical data: session and security logs, and basic device/browser information needed to operate and protect the service.

How we use your information

To provide and maintain the service: authenticate you, save your progress, generate AI feedback on your code, and keep the platform secure.

To improve Codax and to communicate with you about your account, security, and service changes. We do not sell your personal information.

Sign in with Google and Apple

When you choose Google or Apple sign-in, we receive your verified email and name to create or access your account. If a Codax account already exists with that email, the social login is linked to it so you keep one account.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

AI features

When you request code clues, the relevant problem and your code are sent to our AI provider (AWS Bedrock) to generate feedback. This content is processed to produce your review and is not used to train third-party models.

Service providers

We host the service on Amazon Web Services (hosting, authentication via Amazon Cognito, database, and AI via Amazon Bedrock), and rely on Google and Apple for optional social sign-in. These providers process data only to deliver their part of the service.

Data retention

We keep your information for as long as your account is active. You can delete your account from your account settings; we then delete or anonymize your personal data, except where we must retain it to comply with legal obligations.

Your rights

Subject to applicable law (including the LGPD and GDPR), you may access, correct, export, or delete your personal data, and object to or restrict certain processing. To exercise these rights, contact us at the address below.

Security and data location

We protect your account with encrypted, server-held sessions — your authentication tokens never live in the browser. Data is stored in AWS infrastructure in the South America (São Paulo) region.

Children

Codax is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will remove it.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated to you.