Privacy Policy

We collect only the data strictly necessary to deliver the service: email, optional name, profile picture (if you sign in with Google), Academy progress and queries sent to the AI Mentor.

We do not collect sensitive personal data or credit card information — the latter is handled exclusively by Stripe.

Your account stores: email, hashed password (bcrypt), name, profile picture, PRO/FREE status, completed lessons and trial usage counters.

These data are kept while your account is active and may be deleted on request.

All payments are processed by Stripe Inc., a PCI-DSS Level 1 certified provider. Stripe receives card data directly from the user's browser; RE₿EL BTC never has access to it.

Stripe handles the data under its own privacy policy: https://stripe.com/privacy

Messages sent to the AI Mentor are processed via language models provided by Anthropic (Claude) under our Emergent LLM key.

Messages are stored in our database tied to your account exclusively to maintain conversation history within the session. They are not used to train external models.

We use strictly necessary cookies for session (httpOnly JWT token) and to remember your preferred language.

We may use aggregated analytics (without identifying individual users) to improve the platform. We do not sell or share data with third parties for advertising.

We process your data in accordance with the GDPR (Regulation (EU) 2016/679) and other applicable regulations. The legal basis is consent (registration) and contract performance (PRO service).

RE₿EL BTC relies on qualified providers: Stripe (payments), Anthropic via Emergent LLM (AI Mentor), OpenAI via Emergent LLM (Onyx voice synthesis), Google (optional authentication) and MongoDB (storage).

Each applies its own security and privacy guarantees.

You have the right to access, rectify, delete, port and object to the processing of your data. To exercise them write to rebelbtc@rebelbtc.com.

You may also lodge a complaint with the competent supervisory authority.

We apply encryption in transit (HTTPS/TLS), bcrypt-hashed passwords, secure httpOnly cookies and JWT authentication with expiration.

Although no system is 100% impenetrable, we maintain reasonable technical and organisational measures aligned with the state of the art.

This policy may be updated periodically. We will notify substantive changes by email or via a notice on the platform.

Data controller: RE₿EL BTC · Email: rebelbtc@rebelbtc.com · Web: www.rebelbtc.com