Privacy Policy

Last updated: 18 April 2026

1. Introduction

This Privacy Policy explains how LevelUp Lore (run by me, a solo founder based in Perth, Australia — referred to here as "I" or "the Service") collects, uses, stores, and protects your personal information. I'm committed to protecting your privacy and comply with the Australian Privacy Act 1988 and the Australian Privacy Principles.

2. Information I Collect

I only collect information that's necessary to provide the Service:

• Account information: email address and display name when you sign up.
• Uploaded content: lecture files (PDF, DOCX, text) that you upload for game generation.
• Generated games: the game content produced from your uploads is stored in your account.
• Payment information: processed entirely by Stripe. I never see or store credit card numbers, CVVs, or bank details. I only retain the Stripe customer ID, payment intent IDs, and transaction metadata needed for accounting and refunds.
• Usage data: basic information such as games generated, subscription status, and timestamps.

3. How I Use Your Information

• To provide the game generation service you've paid for.
• To process payments and issue refunds where applicable.
• To authenticate your account and send account-related emails (signup confirmation, password reset, billing notifications).
• To respond to contact form submissions and support inquiries.
• To improve the Service through aggregate, anonymised usage analysis (privacy-friendly analytics via Plausible — no personal tracking).

4. Third-Party Services

I rely on the following third-party services to operate LevelUp Lore. Your data may be processed by these providers:

• Supabase — user authentication and data storage.
• Stripe — payment processing. Stripe handles all card data directly; I never see your card details.
• Anthropic (Claude AI) — used to generate game content from your lecture material. Lecture content is sent to Claude for the duration of generation only and is not retained by Anthropic beyond processing.
• fal.ai — used to generate game artwork and video content.
• Resend — used to deliver transactional emails (signup confirmation, password reset, etc.).
• Railway — hosting provider for the server.
• Plausible Analytics — lightweight, privacy-focused website analytics. No cookies, no personal tracking.

Each of these providers has its own privacy policy. Your use of LevelUp Lore is subject to their terms as well.

5. Data Storage and Security

• Uploaded lecture files are stored in a private storage bucket accessible only by you and the LevelUp Lore server.
• Generated games are stored in your account and accessible only by you (except gallery games, which are marked public by me for demonstration purposes).
• Databases are protected with Row Level Security so that users can only access their own data.
• All data is transmitted over HTTPS.
• Passwords are hashed by Supabase Auth and never stored in plain text.

6. Data Retention

• Account information and generated games are retained as long as your account is active.
• Uploaded lecture files are retained so you can regenerate games if needed.
• Payment records are retained for 7 years to comply with Australian tax law.
• If you delete your account, all your personal data, uploaded files, and generated games are deleted within 30 days (excluding payment records required by law).

7. Your Rights

Under Australian privacy law, you have the right to:

• Access the personal information I hold about you.
• Request corrections to inaccurate information.
• Request deletion of your account and associated data.
• Opt out of marketing communications (I don't send marketing emails).
• Lodge a complaint with the Office of the Australian Information Commissioner if you believe I've mishandled your personal information.

To exercise any of these rights, contact me via the contact form. I'll respond within 7 days.

8. Cookies and Analytics

LevelUp Lore uses only essential cookies and browser storage needed for authentication (managed by Supabase). For analytics, I use Plausible — a privacy-focused, cookie-free analytics platform that doesn't collect any personal data, cross-site tracking, or persistent identifiers. No third-party advertising cookies are used.

9. Children's Privacy

LevelUp Lore is intended for university-level students. I don't knowingly collect information from children under 13. If you believe I've collected information from a child under 13, please contact me and I'll delete it immediately.

10. International Users

LevelUp Lore is operated from Australia. By using the Service, you consent to your information being stored and processed in Australia and in the countries where the third-party providers listed above operate (primarily the United States).

11. Changes to This Policy

I may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent change. For material changes, I'll notify you by email.

12. Contact Me

For any questions about this Privacy Policy or how your data is handled, please use the contact form. Since LevelUp Lore is a solo project, I respond to every message personally.