Privacy Policy
Last updated: July 21, 2026
Information we process
DYSHEA may process your email address, learner profile name, public nickname, AI tutor messages, purchase details, technical identifiers, course progress, placement result, learning goals, XP, streak, league activity, classroom or family membership and feedback you submit. Account passwords are stored only as salted cryptographic hashes, not as readable passwords.
Payments
Payments are processed by PayPal or Gumroad. DYSHEA does not receive or store full card numbers. The selected provider may process payment, billing, tax and fraud-prevention information under its own privacy terms. DYSHEA receives limited transaction details needed to provide and manage access.
AI tutor
Messages sent to Dyshi AI may be transmitted to our AI service provider to generate a response. Do not include passwords, payment details or other sensitive personal information in tutor messages.
Feedback and testimonials
Feedback is private by default. We publish a comment with the learner's public nickname only when the learner separately consents and the owner approves it. Email addresses are never included in public testimonials. You may withdraw publication consent by contacting us.
How we use information
- Provide lessons, purchases, certificates and support.
- Prevent abuse, enforce usage limits and operate the Arena leaderboard.
- Improve reliability and understand registration, activation, learning and purchase funnels.
- Send service, invitation, security or optional weekly progress messages you requested.
Family and classroom visibility
A Family subscription owner can see the nicknames, account emails and learning totals of learners occupying their subscription seats. A Schools teacher can see invited students' nicknames, account emails, XP, streak and completed-step totals. Other learners do not receive access to private account email addresses. Leave or removal from a group ends this shared visibility.
Storage and retention
Signed-in learner progress is stored with the account so it can be used across devices. A local browser copy, an offline synchronization queue and previously visited learning resources may also be cached on your device for continuity. API responses, account pages and owner pages are not stored by the offline cache. Project screenshots are stored separately from project source files. Items removed individually can remain recoverable for up to 14 days before permanent cleanup. Purchase and service records may be retained as needed for access, support, accounting, fraud prevention and legal obligations.
Children and guardians
If local law requires parental or guardian consent for a learner to use online services, that consent must be obtained before using DYSHEA or making a purchase.
Your choices
You can download your account, progress, drafts, notes, projects and project-asset inventory from the account dashboard. You control which portfolio snapshot is public and can unpublish it at any time. Issued certificates have a public verification page containing the learner name, public nickname, credential level and dates; deleting the account removes that public credential. The dashboard also provides payment history, printable receipts and provider subscription controls. It lets you restore or permanently erase individual learning content, or schedule permanent account deletion after password confirmation. Scheduling deletion immediately signs the account out and hides its public profile while private data is removed in resumable background stages. Purchase and transaction records may be retained where required by law. You may also request access, correction or deletion by contacting dyshea@dyshea.com.