Privacy Policy
Last updated:
This policy explains what personal data Courseeker collects when you use it, how we use that data, who processes it for us, and what you can ask us to do with it. If anything here is unclear, write to hello@courseeker.com.
1. Who we are
Courseeker is operated by Faisal Adiprabowo, an individual based in Indonesia.
Under Indonesia's Personal Data Protection Law (Law No. 27 of 2022, "UU PDP"), the operator is the data controller for the personal data described in this policy.
Contact: hello@courseeker.com.
2. Data we collect
Account data. If you sign in with Google, we receive your name, email address and profile photo. If you sign in with a code sent by email, we receive your email address.
Learning data. Your learning goals, intake answers, plans, attempts, submissions and interactions with your feed.
Network data. Your IP address, used to limit how often visitors who are not signed in can use the service.
Usage data. Events and session replays recorded by our analytics provider, described in section 6.
Cookies and local storage, described in section 6.
We store account data and learning data in Supabase.
3. How we use it
To create your account and keep you signed in.
To build your learning plan, generate content and record your progress.
To limit how often visitors who are not signed in can use the service, based on their IP address.
To improve the product. Our team reviews learning data and usage data to see what works and what needs fixing.
We do not sell personal data and do not use it for advertising.
4. Google user data
Courseeker's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
From Google, we receive only your name, email address and profile photo.
We use this information only to sign you in and to run your account.
We never sell it, never use it for advertising, and never share it except with the subprocessors listed in section 7 that we need to run the service.
5. AI processing
To build plans and generate content, Courseeker sends your inputs, such as your learning goal and intake answers, to AI model providers.
We use OpenRouter, which routes requests to model providers, and Google Gemini.
Model training on your data is turned off with both OpenRouter and Google Gemini.
6. Analytics and cookies
We use PostHog, hosted in the United States, to record usage events and session replays. This shows us how Courseeker is used and where it breaks.
Autocapture, which records every click automatically, is turned off.
Everything you type is masked.
Session replays can still record other text shown on screen, such as your learning goal or an answer after it is displayed.
We do not send your name or email address to PostHog. PostHog identifies you by an account ID only.
PostHog data is not used for advertising.
Cookies we set:
Sign-in session (Supabase): keeps you signed in.
NEXT_LOCALE: remembers your language choice for 1 year.
cs_first_touch_utm: records which campaign brought you to Courseeker. Set only when you open a campaign link, and kept for 30 days.
cs_account_created: records that an account was just created. Kept for 10 minutes and used once.
pending_draft_cap: carries a plan you made as a guest into sign-in so it is not lost. Short-lived.
PostHog sets its own cookies and local storage for analytics.
We do not use advertising cookies.
7. Sharing and subprocessors
These providers process personal data to run Courseeker:
Supabase: database and sign-in.
OpenRouter and the model providers it routes to: AI processing.
Google: sign-in and Gemini AI processing.
PostHog: analytics.
Cloudflare: network and security.
Tencent Cloud: server hosting.
We do not sell personal data.
8. International transfers
The providers in section 7 store and process data outside Indonesia, including in the United States.
This means your data leaves Indonesia when you use Courseeker.
9. Retention
We keep your account data, including learning data, for as long as your account exists.
After you delete your account, your data is removed from our backups within 30 days.
We keep anonymous aggregate figures, such as usage statistics and cost totals, that can no longer be linked to you.
10. Your rights
Under UU PDP, and under the GDPR where it applies to you, you have the right to:
access the personal data we hold about you;
correct data that is wrong or incomplete;
have your personal data deleted;
withdraw your consent.
To delete your account and its data, email hello@courseeker.com.
For any other request, email hello@courseeker.com. We answer within the period required by law.
11. Security
Data is encrypted in transit.
Access to personal data is limited to the operator.
Every request is checked on our server to confirm you are allowed to see or change the data involved.
No system is completely secure, and we cannot guarantee that your data will never be accessed without permission.
12. Children
Courseeker is for people aged 18 or older. Nobody under 18 may use it, even with a parent's or guardian's consent.
If we learn that a user is under 18, we delete the account.
A parent or guardian can email hello@courseeker.com to ask us to delete a child's account.
13. Changes and contact
When we change this policy, we update the "Last updated" date at the top.
For material changes, we also tell you in the app or by email.
Questions and requests: hello@courseeker.com.