Who we are
TORQUE_OS is operated by Joshua Wilder, a sole proprietor doing business as TORQUE_OS ("we", "our", "us"). We act as the data controller for the personal information collected through the Service. This page is maintained by TORQUE_OS to answer common privacy questions about our Service.
Information we collect
- Account: email, password hash, display name, sign-in provider (e.g., Google).
- Study activity: quiz attempts, flashcard reviews, streaks, XP, and progress per track.
- AI tutor messages: prompts you send to the tutor and the model's responses.
- Support messages: email or in-app messages you send us.
- Transaction data: your name, billing address, order history, and subscription status collected by Paddle and shared with us to fulfill your order.
- Technical data: IP address, user agent, referrer, and basic device information for security and abuse prevention.
We do not collect or store payment card numbers ourselves. Card details are collected directly by Paddle, our Merchant of Record.
How we use it and legal basis
- Operate the Service — sign-in, spaced-repetition scheduling, progress tracking. (Legal basis: contract performance.)
- Provide the AI tutor — sending your prompt to our AI model provider. (Contract performance.)
- Process orders and subscriptions — through Paddle, our Merchant of Record. (Contract performance + legal obligation.)
- Transactional communication — receipts, password resets, service notices. (Contract performance.)
- Security — detect, prevent, and respond to fraud, abuse, and security issues. (Legitimate interests.)
- Product improvement — aggregated, de-identified analytics. (Legitimate interests.)
- Marketing — only where you have opted in. (Consent.)
Who we share your data with
We share personal data with the following categories of recipients:
- Paddle.com — our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance, invoicing, and refund handling.
- Hosting & database provider — stores account data, study progress, and content.
- AI model provider — processes AI tutor prompts to generate responses.
- Email delivery provider — transactional email (receipts, password resets).
- Authentication providers (e.g., Google) — if you sign in with a social provider.
- Professional advisers (legal, accounting) — where reasonably necessary.
- Authorities — where required by law.
Data retention
We retain your account data for as long as your account is active. When you delete your account from Profile → Danger Zone, your account, profile, study history, and AI tutor transcripts are permanently removed or anonymised. Minimal logs may be retained for a short period for security, fraud prevention, and legal compliance. Paddle retains transaction records as required by applicable tax and accounting law.
Your rights
Depending on where you live, you may have the right to:
- Access, correct, or export your personal data.
- Delete your account and associated data.
- Object to or restrict certain processing.
- Withdraw consent (where processing is based on consent).
- Lodge a complaint with a supervisory authority.
For EU/UK residents, we aim to respond within one month. You can exercise account-deletion from Profile → Danger Zone. For other requests, email privacy@torqueos.app.
California residents (CCPA/CPRA)
We do not "sell" or "share" personal information as those terms are defined by California law. California residents may request access to and deletion of their personal information as described above.
Children
The Service is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
Security
We use appropriate technical and organisational measures — encryption in transit via TLS, encrypted storage, role separation, and least-privilege database access — to protect your data. No system is perfectly secure; you use the Service at your own risk.
International transfers
Your data may be processed in countries other than your own, including the United States. Where required (e.g., for UK/EEA residents), we and our subprocessors rely on appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses or adequacy decisions.
Cookies
We use only essential cookies required to operate the Service (session, authentication, and security). We do not use advertising cookies. See our Cookie Notice for details.
Changes
We may update this Policy from time to time. The "Last updated" date at the top will change. Material changes will be highlighted in-app or via email.
Contact
Privacy questions: privacy@torqueos.app.