Privacy Notice
Last updated: July 23, 2026
This Privacy Notice describes how Trina Henderson (trading as "CaliAide", "we", "us"), operator of the CaliAide website and study platform (the "Service"), collects, uses, and shares personal data about you.
1. Controller
Trina Henderson is the data controller responsible for your personal data in connection with the Service. If you have any questions, you can reach us at the email address listed on our contact page.
2. Personal data we collect
- Account data: your name, email address, hashed password, and login timestamps.
- Profile data: optional details you add to your account.
- Usage data: practice attempts, scores, progress through skills and questions, and feature interactions.
- Support data: messages and information you send us for help.
- Technical data: IP address, device identifiers, browser type, and basic telemetry needed to run the Service securely.
Payment card details are handled by our payment provider Paddle and are not collected or stored by us.
3. Why we use your data
- To create and maintain your account (performance of a contract).
- To provide the Service — track progress, unlock content, deliver features (performance of a contract).
- To secure the Service, prevent fraud and abuse (legitimate interests).
- To improve the Service and fix bugs (legitimate interests).
- To respond to your support requests (performance of a contract).
- To send transactional email (receipts, password resets) (performance of a contract).
- To comply with legal obligations, such as tax and accounting (legal obligation).
4. Who we share data with
- Service providers / subprocessors that host and operate the Service (hosting, database, authentication, email delivery, and analytics providers).
- Paddle, our Merchant of Record, for sale of the Service, subscription and one-time purchase management, payments, tax compliance, invoicing, and fraud prevention.
- Professional advisers such as accountants and lawyers where necessary.
- Authorities where required by law or to protect rights and safety.
We do not sell your personal data.
5. Data retention
We keep account and usage data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must keep certain records (e.g. billing and tax records) to comply with legal obligations.
6. Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us using the details above. You also have the right to lodge a complaint with your local data protection authority.
7. Security
We use appropriate technical and organisational measures to protect your personal data, including encryption in transit, access controls, and hardened authentication. No system is perfectly secure, but we work to keep your data safe.
8. Cookies
We use strictly necessary cookies and similar technologies to keep you signed in and to remember your preferences. We may also use limited analytics cookies to understand how the Service is used so we can improve it. You can control cookies through your browser settings.
9. International transfers
Our providers may process personal data outside your country of residence. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.
10. Changes
We may update this Privacy Notice from time to time. Material changes will be highlighted in the Service or notified by email where appropriate.