Legal

Privacy policy

Last updated: 9 August 2026

A coach that adapts to you has to remember you. That is the whole product, so there is no honest version of this page where we claim to hold nothing about you. Instead, here is exactly what we hold, who processes it, how long it stays, and how to get rid of it.

1 · Who is responsible

The controller for the processing described here is:

DataRBL AB
Company registration number 559385-4754
Agavägen 64, 5tr, 181 55 Lidingö, Sweden
privacy@claudemaster.ai

ClaudeMaster.ai is operated by DataRBL AB as the learning division of the ClaudeNetwork, itself a part of the International AI Strategy & Architect Network.

2 · Cookies and local storage

We do not use advertising or cross-site tracking cookies. The following are set when you use the site:

__cf_bm — set by Cloudflare to distinguish humans from automated traffic. Expires after 30 minutes. Strictly necessary for security.
__dpl — used to route requests to the correct deployment. Strictly necessary for the site to function.

We also store three items in your browser's local storage: your current session id, your learner id, and your theme preference. These stay on your device and are not shared.

Our product analytics runs without cookies: no identifier is stored in your browser for analytics purposes.

3 · What we store

Your learning record. For every concept in the curriculum: whether you have shown you understand it, partly understand it, or have not got there yet.

What you have done. Your coach conversations, quiz answers, flashcard grades and how you rated your own study notes — the evidence the record is built from.

What you told us. Your goal in your own words, your working language, and your starting level from the intake conversation.

Your account. Email address and authentication data, so the record is yours and nobody else's.

Referral codes, if you invite someone, so we can tell where a new learner came from.

Technical logs — request timestamps, error classes and token counts, as well as page views and a small set of named product events, such as when an account is created or a coaching session begins — kept to keep the service working and to catch abuse.

4 · How the coach profiles you, and what it decides

This is automated profiling, and it is not a side effect — it is the product. You should know what it does before you use it.

What we build. From your answers, your coach conversations, your flashcard grades and your own confidence ratings, we build a picture of what you have shown you understand — concept by concept, across the curriculum. The same picture records where the gaps are: which ideas you handle, which ones you half-handle, and which ones you have not shown at all.

What it decides. That picture, not a person, decides what you are served next: which concept the coach probes, which question you get, how hard it is, and which flashcards and study notes are generated for you. It also decides the level attributed to you and therefore which badge you hold, and it decides when the coach judges you ready to move up.

What follows for you. Your visible progress, your percentage, your badges and the difficulty of what you are asked all come out of it. Nothing outside ClaudeMaster follows from it: it is not shared with employers, it is not a credential, it is not a certification, and it is not scored against other learners.

What it is not. There is no automated decision here with legal or similarly significant effect on you — no pricing, no access denial, no assessment reported to anyone else. We do not profile you for advertising, and we do not infer anything from how long you spend on the site.

The logic, plainly. A concept counts as handled when you have demonstrated it enough times, and only demonstrations made at your current level count towards the next one. Being nearly right counts for less than being right, and never counts as right. Breadth matters: you cannot reach a level by mastering a handful of concepts and skipping the rest. Estimates go up and down as you keep working — nothing is permanent.

Your say. You can see your own record on your profile page, ask us for a copy of it, correct anything you think is wrong, or have all of it deleted (section 9). If you disagree with a level we attribute to you, tell us at privacy@claudemaster.ai and a human being will look at it.

5 · What we do not store

Nothing about your code, your repositories, your files or your machine. We never read them.
No advertising profile. We do not sell, rent or share your data with advertisers. We use no advertising trackers and no cross-site tracking. We do use cookieless product analytics to understand how the service is used.
No inference from time spent. Hours logged are not evidence of anything and we do not treat them as such.

6 · Why we are allowed to

Performance of a contract for your learning record, your account and everything the product needs in order to adapt to you. That is the service you signed up for; without the record there is no product.

Legitimate interest for the technical logs — keeping the service available, secure and free of abuse.

If we ever want your data for anything outside those two, we will ask you first, separately, and you can say no without losing access to anything.

7 · Who else processes it

To run the service we use a small number of carefully chosen processors, in these categories:

Cloud and hosting providers, to run the application.
Database and storage providers, to hold your account and your learning record.
AI and language model providers, which generate your coach's replies. Your conversations pass through them.
Email providers, for transactional messages such as sign-in links.
Product analytics — PostHog (EU Cloud, Frankfurt). Receives page views and a small number of named product events. Runs in cookieless mode: no cookie, no local storage, no persistent identifier.

We never sell your personal data. If you want to know exactly which companies these are, ask us at privacy@claudemaster.ai and we will tell you — we keep a current register and we will not hide behind the categories if you actually want the names.

Some of these operate outside the EU/EEA. Where your data is transferred to a third country we rely on approved transfer mechanisms — the European Commission's Standard Contractual Clauses, or an adequacy decision such as the EU-US Data Privacy Framework. Primary storage is within the European Union.

8 · How long we keep it

We never keep your personal data longer than the purpose requires.

Active account — as long as your account exists.
Deleted account — when you ask us to delete your account, we remove it from active systems and confirm when it is done.
Backups — security copies are rotated out on an ongoing basis.
Technical logs — kept only as long as needed to operate and secure the service.

You can ask for deletion at any time and we will carry it out. We do not currently state fixed automatic retention periods, because we would rather describe what we actually do than publish a schedule and hope it matches.

9 · Your rights, and how to use them

You can ask us to:

give you a copy of everything we hold about you (access),
correct anything that is wrong (rectification),
delete it, including your entire learning record and the profile built from it (erasure),
export it in a machine-readable format (portability),
restrict or object to processing based on legitimate interest,
ask a human to review a level we have attributed to you.

Email privacy@claudemaster.ai and we will answer within 30 days.

Deletion means deletion. The record goes, your progress goes with it, and we will tell you plainly that it cannot be restored rather than pretending otherwise.

If you think we have handled your data badly, you can complain to your national data protection authority. In Sweden that is Integritetsskyddsmyndigheten (IMY), imy.se.

10 · Changes to this policy

We date this page and note what changed. If a change is material — a new category of processor, a new purpose, a longer retention period — we will say so rather than quietly editing the page.