Privacy Policy

Last updated 21 October 2026

This Privacy Policy explains what personal data ReadyCamel (www.readycamel.com) collects, why, who it is shared with, how long it is kept, and the choices and rights you have. The Service is provided by the operator of ReadyCamel ("we", "us"), who is the controller of your personal data. We do not sell your personal data and we do not use advertising. We use Google Analytics only if you accept analytics cookies.

1. What we collect

You can read the public site without an account. We collect personal data in these situations:

Data	Details	Source
Account data	Name, email address, password (stored only as a secure one-way hash, never in readable form), account role, display preferences (such as light or dark mode), and when you accepted the Terms and Privacy Policy and which version.	You, when you register or update your profile
Learning activity	Lessons and courses completed, quiz attempts and scores, coding problems attempted or solved, code drafts you save, bookmarks, pages visited inside your account (for streaks and "continue where you left off"), notes you write, and questions you mark as "asked in an interview".	Your use of the signed-in app
Career tools	Job applications you track, job descriptions you paste, and résumés you upload (the file and the text extracted from it).	You
Messages to us	Name, email, topic, subject, message, the page you were on, your browser's user-agent string, and a salted one-way hash of your IP address used only to spot repeat or abusive senders (we do not store the IP address itself with the message).	You, through the contact form
Site search	Search terms are counted as anonymous daily totals (for example "python list" searched 12 times today), with no link to you, your account or your IP address. To prevent abuse, your IP address is held briefly in memory for rate limiting and is not written to the database.	Your searches
Analytics (only with your consent)	If you accept analytics cookies: pages you view, how you arrived (for example from a search engine), time on page, approximate location (country or city, derived from your IP address, which Google Analytics does not store), and device, browser and screen information, linked to a random cookie identifier.	Google Analytics, in your browser
Technical and log data	When your browser requests a page, our web server records your IP address, the date and time, the page requested, the response, the referring page and your browser's user-agent string.	Your browser, automatically

Code you run. Code you run in tutorials, lessons and coding problems is executed inside your own browser. It is not sent to us, except code drafts and results that the app saves to your account when you are signed in.

We do not ask for, and ask you not to send us, special categories of data (such as health, religion or political opinions) or government identification numbers. Please remove such details from résumés before uploading them.

2. How we use it and our legal bases

To provide the Service and your account: signing you in, saving your progress, notes, drafts and career tools, and showing your dashboard. Legal basis: performance of our contract with you (the Terms).
To reply to you when you contact us, and to handle privacy and legal requests. Legal basis: our legitimate interest in responding to enquiries, and legal obligations for rights requests.
To keep the Service secure and working: preventing spam and abuse, rate limiting, detecting and fixing errors, and protecting accounts. Legal basis: our legitimate interests in security and in running a reliable service.
To improve the Service using aggregate, non-identifying information, such as which search terms return no results or which lessons are completed most. Legal basis: our legitimate interest in improving our content.
To understand how the site is used with Google Analytics, only if you accept analytics cookies. Legal basis: your consent, which you can withdraw at any time through "Cookie settings".
To send you service messages about your account, security or important changes to our terms. We will only send marketing emails if you have opted in, and you can opt out at any time. Legal basis: contract, legitimate interests, or your consent for marketing.
To comply with the law and to establish, exercise or defend legal claims. Legal basis: legal obligation and legitimate interests.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

3. AI-assisted features

Some features may use an external AI provider, for example to give feedback on a résumé or to generate practice content. When such a feature is enabled and you choose to use it, the text you submit for that feature is sent to the provider to produce a response. We use providers that do not use API data to train their models by default, and we do not send other account data to them. We will say clearly in the app when a feature uses AI.

We share personal data only with service providers that help us run the Service, and only as needed for that purpose:

Cloudflare: network delivery, DNS and security. Cloudflare processes requests to the site, including IP addresses, to deliver pages and block attacks.
Google Fonts: the site loads fonts from Google's servers, so your browser sends your IP address and the page address to Google when it fetches them.
Google Analytics (Google LLC and its affiliates): website statistics, only if you accept analytics cookies. We have not enabled Google advertising features or data sharing for advertising.
Hosting: the Service runs on servers we control, which store the database and files.
AI providers: only for AI-assisted features you choose to use (see section 3).
Email providers: if we send you emails (for example password resets), through an email delivery service.

We may also disclose personal data if required by law or a valid legal request, to protect the rights, safety or property of our users, us or others, or as part of a merger, acquisition or sale of the Service (in which case we will tell you and this policy will continue to protect your data). We do not sell or rent personal data, and we do not share it with advertisers.

5. International transfers

Our service providers may process data in countries other than your own, including outside the UK and European Economic Area. Where the law requires it, we rely on appropriate safeguards for these transfers, such as adequacy decisions or standard contractual clauses offered by the provider.

6. How long we keep it

Account data, learning activity, notes, drafts and career tools: while your account is open. When you ask us to delete your account, we delete or anonymise this data within 30 days, apart from backup copies, which are overwritten on a rolling basis.
Résumés and job applications: until you delete them or your account is deleted.
Contact messages: as long as needed to deal with your request, and normally no longer than 24 months.
Web server logs: about 14 days, unless needed longer to investigate a security incident.
Google Analytics data: for the retention period set in our Google Analytics account, no longer than 14 months.
Anonymous search statistics: these are not personal data and may be kept indefinitely.

We may keep some data longer if the law requires it or to establish or defend legal claims.

7. Security

We protect personal data with measures appropriate to the risk, including encrypted connections (HTTPS), hashed passwords, access restricted to authorised administrators, and isolated execution of code in your browser. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data in a way that creates a high risk to you, we will notify you as the law requires.

8. Your rights and choices

Depending on where you live, you may have the right to:

access the personal data we hold about you and get a copy;
correct inaccurate or incomplete data;
delete your data, including closing your account;
restrict or object to certain processing, including processing based on legitimate interests;
data portability: receive data you gave us in a structured, machine-readable format;
withdraw consent at any time where we rely on consent; and
complain to your local data protection authority.

To exercise these rights, use the contact form with the topic "Privacy or data request", from or mentioning the email address of your account. We may need to verify your identity before acting. We will respond within one month, or tell you if we need more time as the law allows. You can also update your name and preferences in your account, and export your notes yourself from the notes page.

California residents: we do not sell or share personal information for cross-context behavioural advertising, and you may exercise the rights above, including to know and to delete, without discrimination.

9. Children

The Service is not directed to children, and accounts are for people aged 16 or over. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, please contact us and we will delete it.

10. Cookies and browser storage

We use cookies and browser storage that are needed for the site to work or to remember your choices, and, only with your consent, Google Analytics cookies. We do not use advertising cookies. See the Cookie Policy for the full list and to change your choice.

11. Changes to this policy

We may update this policy as the Service changes, for example when we add social sign-in or paid plans. We will post the new version here with a new "last updated" date and, for material changes, notify signed-in users.

12. Contact

For privacy questions or requests, use the contact form (topic "Privacy or data request").