Privacy Policy

Serpynt is a Python learning platform operated by Victor Zeidan, available at serpynt.co.uk. For privacy enquiries, contact hello@serpynt.co.uk.

We collect the following categories of data:

• Account data: email address, display name, and profile picture
• Learning data: XP, streaks, lesson progress, quiz results, and mock exam results
• Payment data: handled entirely by Stripe — we never store card details
• Usage data: pages visited and features used
• Classroom data: teacher-student relationships, chat messages, and homework assignments

We use your data to:

• Provide and improve the Serpynt learning platform
• Track your learning progress and award XP
• Process subscription payments via Stripe
• Send important account emails (e.g. verification, billing, security alerts)
• Provide teacher analytics for classroom management

We process your data under the following legal bases:

• Contract performance: to provide the service you signed up for
• Legitimate interests: to improve the platform, prevent fraud, and ensure security
• Consent: where required, such as optional marketing communications

We retain account data while your account is active. When you delete your account, we remove your personal data within 30 days, except where we are required to retain certain records for legal or accounting purposes (e.g. payment records via Stripe).

Under UK GDPR, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure— request deletion ("right to be forgotten")
• Data portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests

To exercise any of these rights, email hello@serpynt.co.uk.

We use the following third-party services to operate Serpynt:

• Supabase — database hosting and authentication
• Stripe — payment processing
• Anthropic — AI tutor and quiz generation
• Vercel — website hosting
• Sentry — error tracking and monitoring

Each provider processes data according to their own privacy policies and, where applicable, data processing agreements.

Serpynt uses essential cookies only. These are necessary for the service to work properly.

Essential Cookies (cannot be disabled):

• Authentication cookie — keeps you logged in to your account
• Session refresh token — automatically renews your login session
• These are set by Supabase, our secure database provider

We do NOT use:

• Advertising cookies
• Tracking cookies
• Third party marketing cookies
• Analytics cookies that identify you personally

Why you can't decline essential cookies:

Essential cookies are required for Serpynt to function. Without them you cannot log in or access your lessons. Under UK PECR regulations, essential cookies do not require explicit consent.

The cookie consent banner on our site is shown as a transparency measure so you know what data we collect. Clicking "Got it" simply dismisses the banner — it does not affect essential authentication cookies which are required for the service to work.

Cookie Duration:

• Session cookies: deleted when you close your browser
• Persistent login cookies: expire after 7 days or when you sign out

If you have concerns about cookies please contact us at hello@serpynt.co.uk.

Users under 13 must have parental consent before creating an account. Teachers using classroom features are responsible for ensuring appropriate consent and safeguarding for student data in their classrooms, in line with their school's policies and UK safeguarding requirements.

Data is encrypted in transit using HTTPS (TLS). Data at rest is stored securely in Supabase with access controls and row-level security policies. We review our security practices regularly but cannot guarantee absolute security.

For privacy questions or to exercise your rights, contact hello@serpynt.co.uk.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK data regulator, at ico.org.uk.