Privacy Policy

Crux (“we”) provides short interactive learning material generated from source-code repositories. This policy explains what personal data we collect when you use crux.kiasm.dev and the Crux application, and why. Contact: crux@kiasm.dev.

• Account data: when you sign in with GitHub we receive your GitHub login, display name, and avatar, and we store a GitHub OAuth token server-side to access the repositories you authorise.
• Repository data: content of repositories you explicitly connect, processed to generate courses. Handled under the Data Processing Agreement.
• Usage data: progress, mastery scores, and quota usage tied to your account so the product can function.
• Waitlist / contact data: name, email, and any details you submit through the design-partner or updates forms.
• Analytics: page-view and event statistics via Google Analytics, which sets cookies only after you consent in the cookie banner (see the Cookie Policy). Used for aggregate site statistics only, no advertising features, no cross-site tracking.

We process account, repository, and usage data to provide the Service (performance of a contract); waitlist data to respond to your request (consent); and analytics to understand aggregate usage of the site (consent, collected only if you accept analytics cookies, which you can withdraw at any time).

We share data only with the subprocessors listed in the DPA (Google Cloud / Firebase, including Google Analytics, Anthropic, GitHub) and where required by law. We do not sell personal data, and we do not use your repository content to train machine-learning models.

Account and usage data are kept while your account exists. Repository data is deleted within 30 days of disconnecting a repository. Waitlist entries are kept until the early-access programme ends or you ask us to remove them.

Depending on your location, you may have the right to access, correct, export, or delete your personal data, to object to or restrict processing, and to lodge a complaint with a supervisory authority. Email crux@kiasm.dev to exercise these rights; we respond within 30 days.

We will post any changes to this policy here and, for material changes, notify you in the product.