Course Correct is a study application. This page describes exactly what it collects, why, who else sees it, how long it is kept, and how to make us delete it. It describes what the software actually does, not what a template says.
Course Correct is operated by JayTeeSF, LLC, a Delaware limited liability company (“we”). For anything on this page, including any request about your data, write to jonathan@jayteesf.com.
Under the UK/EU GDPR we are the data controller for the information described here.
You sign in with Google. We ask Google for the narrowest thing that identifies you:
We do not ask for your name or your profile picture. We
request the openid email scope only. We have nowhere to store a
name and no use for one, so we do not collect one — data never requested cannot
be lost, disclosed, or subpoenaed.
We never see your Google password. Google tells us you signed in successfully; the password stays with Google.
Course Correct adapts to how you learn, which means it records what you do:
Payment is handled entirely by Stripe. Your card number never reaches our servers and we could not retrieve it if asked. We store which subscription you hold, its status, and the period it covers.
Ordinary server logs — IP address, timestamp, the request made — kept briefly for security and debugging.
Course Correct sets exactly two cookies, both strictly necessary:
| Cookie | Purpose | Lifetime |
|---|---|---|
mmeoww_session | Keeps you signed in. | 14 days |
mmeoww_auth_tx | Protects the sign-in itself against cross-site request forgery. | 10 minutes |
There are no analytics, advertising or tracking cookies, and no third-party trackers of any kind. No Google Analytics, no advertising pixel, no session recorder. That is why this site shows no cookie banner: strictly necessary cookies do not require consent, and we set nothing else.
| Data | Purpose | Lawful basis |
|---|---|---|
| Email and account identifier | To have an account at all, and to sign you back into it | Contract |
| Study activity | To teach adaptively — the entire function of the product | Contract |
| Subscription status | To give you what you paid for | Contract |
| Security logs | To detect and investigate abuse | Legitimate interests |
| Email notifications | To send what you asked to be sent | Consent — withdrawable at any time |
We do not sell your data. We do not share it for advertising. It reaches these processors only because the product cannot work otherwise:
| Who | What they get | Why |
|---|---|---|
| That you signed in | You chose to sign in with Google | |
| Stripe | Your payment details and email | To take payment. They are the ones holding card data, not us |
| Hetzner | Hosting — the data sits on their servers | The application has to run somewhere |
| An email provider | Your address and the message | Only if you enable email notifications |
If you use the AI companion, what you write to it is sent to OpenAI to produce a reply. Treat it as you would any message to a third party: do not put anything in it you would not want leaving our servers. At the time of writing the companion is not enabled — no provider is configured, and it reports itself unavailable rather than inventing answers.
Our servers are in the United States. Stripe, Google and OpenAI also process data in the United States. If you are in the UK or EEA, your data is therefore transferred outside it, under the standard contractual clauses those providers offer.
Your account data stays while your account exists. When you ask to be deleted, our policy is already written down in the code that enforces it, and it puts every table into exactly one of three categories:
If the UK or EU GDPR applies to you, you have the right to:
Email jonathan@jayteesf.com and we will respond within 30 days. We will not make you give a reason, and we will not charge you.
Course Correct decides what to show you next — which question, which lesson, when to review something — from your answers. That is what makes it adaptive. These decisions affect your study session and nothing else: they produce no legal effect and nothing similarly significant, and no profiling is used for advertising.
Course Correct is not intended for children under 16. We do not knowingly collect their data. If you believe a child has created an account, write to us and we will remove it.
If we change this policy we will update the date above, and if the change is significant we will tell account holders by email rather than quietly editing the page.