Privacy Policy

The entire lesson library is free to browse without signing in, and we do not ask you for any personal information to read it. If you never create an account, the only data we hold about you is the anonymous analytics described below.

When you create an account or use member features, we collect:

• Your email address — this is your account identity and where we send your one-time sign-in passcode.
• A nickname and avatar icon you choose during onboarding.
• Your email preferences — whether you have opted in to product updates and to new-content notifications.
• Anything you save: favourites, playlists, watchlists, learning plans, and the topics or categories you pick as interests.
• Feedback you submit through the in-app feedback form.
• Text you paste into the Planner, including any job description you use to build an interview-prep plan.

Creating an account takes one thing: an email address. We do not ask for your real name, and the nickname you choose can be anything you like — plenty of members use a handle rather than a name.

• No phone number.
• No postal or home address.
• No date of birth.
• No payment or card details — the service is free, so we have no reason to hold them.
• No employer, job title, or CV.
• No password — there is nothing for us to store, and nothing of yours to leak if we were breached.

To be straightforward about the one exception: if you sign in with Google, Google also passes us your name and profile picture along with your email, and those are kept on your account record by our authentication provider. We do not display or use them anywhere in the product — the nickname and icon you see are the ones you chose. If you would rather we never received them, sign in with an email passcode instead.

We should also be plain that an email address is itself personal information, and we treat it as such. "We collect very little" is not the same as "we collect nothing".

Choosing “Continue with Google” asks Google to confirm your identity to us. We receive your email address, basic profile information such as your name and profile picture, and a unique account identifier.

We never receive your Google password, and we request no permission to read, send, or post anything on your behalf. You can disconnect SkillRecall at any time from your Google account settings.

• Usage analytics — pages and lessons viewed, and general device, browser, and country information, through Google Analytics.
• Which lessons you have opened, so a signed-in member can pick up where they left off.
• Sign-in activity — when a passcode was last sent to your address and when you last signed in.
• Your IP address, used to rate-limit sign-in requests and public forms so they cannot be abused. Where we store a record of a rejected submission, the IP address is stored only as a one-way hash.

We use cookies that are strictly necessary to sign you in and keep you signed in, including a marker that enforces one active session per account. Without these, the member area cannot work.

We also use Google Analytics cookies to understand how the site is used. We do not use advertising cookies and we do not run third-party ad networks on SkillRecall.

• To sign you in and keep your account secure.
• To provide member features and remember what you have saved.
• To send service email you cannot opt out of while you hold an account — principally your sign-in passcode.
• To send product updates and launch news, only if you opted in. Every one of those emails has a one-click unsubscribe link.
• To understand which content is useful, so we can improve and expand the library.
• To detect and prevent abuse of our sign-in and public forms.

We do not sell your personal information, and we do not share it with advertisers.

We use a small number of service providers to run SkillRecall. They process data only to provide their service to us:

• Supabase — authentication and our primary database, where your account and saved content are stored.
• Vercel — application hosting and content delivery.
• Resend — delivery of transactional and opt-in email.
• Google — sign-in (only if you use it) and Google Analytics.
• Upstash — rate-limit counters used to block sign-in and form abuse.
• Sentry — error monitoring, which may incidentally record technical details of a failed request.
• Slack — our internal team channel. While sign-up is new we post a notification, including the email address used, when someone creates an account for the first time, so we can see the service is working. This is temporary and will be removed.
• Anthropic — see “AI processing” below.

These providers may store or process data outside Australia. We take reasonable steps to ensure they handle personal information consistently with this policy.

When you use the Planner, the goal you describe — and the full text of any job description you paste — is sent to Anthropic’s Claude API so it can be matched against our lesson library. This is how the plan gets built.

Because that text leaves our systems, please do not paste confidential material, information about other people, or anything you are not free to share. A job description you found in a public listing is fine; an internal document is not.

Lesson content on SkillRecall is also produced with AI assistance, but that process uses our own material and does not involve your personal information.

We keep your account information for as long as your account exists. If you ask us to delete your account, we remove your profile along with your favourites, playlists, watchlists, saved plans, viewing history, interests, and feedback.

Aggregated analytics that cannot identify you may be retained after an account is deleted.

• Access — ask us for a copy of the personal information we hold about you.
• Correction — update your nickname and preferences in your profile, or ask us to correct anything else.
• Deletion — ask us to delete your account and the data attached to it.
• Marketing — unsubscribe using the link in any product-update email, or turn the preference off in your profile. This does not stop sign-in passcodes, which are required to use your account.

We handle personal information in line with the Australian Privacy Principles. If you are in the UK or the European Economic Area, you may also have rights to object to or restrict processing, and to data portability. To exercise any of these, contact us — see below.

Traffic to SkillRecall is encrypted in transit. Sign-in is passwordless: we never store a password for your account, so there is no password of yours for us to lose. Sign-in cookies are HTTP-only, and only one device can hold an active session for an account at a time — signing in somewhere new signs the previous device out.

No online service can promise perfect security, but we take reasonable steps to protect your information.

SkillRecall is intended for working technical professionals and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy as the product changes. The effective date at the top of this page always shows the current version, and we will give notice of significant changes to signed-in members.

For any privacy question, or to access, correct, or delete your information, contact us through the contact page on this site. We aim to respond within a reasonable time, and within 30 days for formal access or deletion requests.