PRIVACY POLICY

This Privacy Policy describes how Birkes Innovative Solutions LLC (“we”, “us”, or “our”) collects, uses, and protects your information when you use 10K Hours (the “Service”), accessible at 10khours.live and related domains. By using the Service, you agree to the practices described here.

Information we collect

We collect the minimum information needed to run the Service:

• Account information you provide: username, email address, and a password (stored as a bcrypt hash — we never see or store your plaintext password).
• Content you create: the skills you track, the hours you log, the notes you attach to sessions, your theme preferences, and the badges you earn.
• Technical information: your IP address (for rate limiting and abuse prevention), browser type, and pages you visit on the Service.
• Analytics data, if you consent: aggregated, anonymized usage events via Google Analytics 4 (e.g. which pages load, which features are used). We do not collect analytics unless you accept the cookie banner.

We do not collect: your real name, your location beyond country/region inferred from IP, your contacts, or any data from third-party services.

How we use your information

• To provide the Service (display your dashboard, log hours, etc.)
• To send transactional emails (account verification, password reset)
• To generate AI-powered coaching feedback, if you request it (see below)
• To detect and prevent abuse (rate limiting, account lockout)
• To understand aggregate usage patterns, if you’ve consented to analytics

We do not sell your data, share it with advertisers, or use it to train machine-learning models.

Third-party services

The Service relies on a small number of vendors:

• Fly.io — hosts the application and stores its database. They see the same data we do.
• Resend — delivers our transactional emails. They see the recipient email and message body.
• OpenAI — generates AI coaching feedback. When you click “AI Feedback” for a skill, we send your username, skill name, total hours, goal, and recent session notes to OpenAI’s API. Per OpenAI’s current API terms, this data is not used to train their models. If you don’t want this, don’t click “AI Feedback.”
• Google Analytics 4 — collects anonymized usage analytics only if you accept the cookie banner. You can decline and still use the Service fully.

Cookies and local storage

We use two kinds of client-side storage:

• Essential cookies (session cookie) — required for login. Cannot be disabled without breaking the Service.
• Analytics cookies (Google Analytics) — only set after you click “Accept” on the banner. Stored under the _ga prefix.

Your rights

You can, at any time:

• Export your data — every log you’ve created, downloadable as CSV from the dashboard.
• Delete your account — contact us at the email below and we’ll wipe your data within 30 days.
• Opt out of analytics — click “Decline” on the cookie banner, or clear your browser’s local storage for this site.
• Reset your password — via the “Forgot Password” link on the login page.

If you are a resident of the EU, UK, California, or another jurisdiction with specific privacy laws (GDPR, UK GDPR, CCPA), you have additional rights including access, correction, erasure, and portability of your personal data. Contact us to exercise these rights.

Data retention

We keep your account data for as long as your account is active. If you delete your account, all associated data (skills, logs, badges, theme preferences) is deleted within 30 days. Aggregated, non-identifying analytics data may be retained longer for service improvement.

Security

We use industry-standard practices: HTTPS for all traffic, bcrypt for password hashing, CSRF tokens on all forms, failed-login lockout, and rate limiting. We cannot guarantee absolute security — no system can — but we take the basics seriously.

Children

The Service is not directed at children under 13. We do not knowingly collect information from anyone under 13. If we learn that we have, we will delete it promptly.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced via email or a notice on the Service. The “Last updated” date at the top of this page indicates the most recent revision.

Contact

Questions, concerns, or requests related to this Privacy Policy should be directed to:

Birkes Innovative Solutions LLC
Email: privacy@10khours.live