Privacy policy

1. Who we are

Croven AI (Private) Limited, First Office, Second Floor, Ali Tower, University Town, Peshawar 25000, Khyber Pakhtunkhwa, Pakistan, is responsible for your personal data (the "controller"). Email info@crovenai.com with any privacy question or request. For card payments, Creem is a separate controller of the payment data it collects, under its Privacy Notice.

2. What we collect

• Account: your email, name if you give it, and sign-in details. With GitHub or Google sign-in we receive your account ID, name, email, username and profile picture.
• Profile and settings: gamer tag, display name, age band (16 to 17, or 18+), time zone, goals, your assistant's look, privacy switches and preferences such as theme and reminders.
• Learning: lessons, reviews, labs and the code you submit, points, streaks, leagues and achievements.
• Projects: the repository, demo and write-up links you submit, what we read from the repository through GitHub, and check and review results.
• Community: crews, posts, memes, answers, votes, duels, vouches and reports.
• Payments: your plan, amounts, dates, renewals, refunds and the provider's references. We never receive your card details.
• Messages: feedback, contact-form messages and emails you send us.
• Technical: rate-limit and error records, server logs (including IP addresses), push subscriptions if you turn on reminders, and the version of these documents you accepted, including your checkout confirmation about the right to withdraw.

An email address (or GitHub or Google sign-in) is needed for an account, and payment details to buy a plan. Everything else is optional. We don't ask for your date of birth or for sensitive data such as health or religion.

3. Why we use it

• To provide the service (our contract with you): your account, lessons, labs, tutor, project checks, paid access, service emails and support.
• Legitimate interests: keeping Converge secure and fair (limits, bot checks, cheating prevention, moderation, logs and backups), improving lessons from totals, and showing other learners what a crew, duel or league needs. You can object (section 7).
• Your consent: reminders, a public profile, leaderboard and public projects. Turn them off at any time.
• Legal obligations: payment and tax records, and answering lawful requests.

We don't sell your data, use it for ads, or use your private code, messages or tutor questions to train AI models.

4. Who we share it with

Other people. Your profile, leaderboard row and projects are private until you switch them on. Crew members see crew posts, and opponents see your gamer tag in a duel. Our team sees what it needs to give support, review projects and moderate.

Service providers who process data for us:

• Hetzner Online GmbH: the servers everything runs on (Germany).
• Zoho Corporation (Zoho Mail): sends our emails (United States).
• Cloudflare: encrypted backups it cannot read (EU), the bot check on sign-in forms, and code libraries for the app.
• Creem: card payments as merchant of record (Estonia).
• GitHub: sign-in, and reading the repositories you submit (United States).
• Google: sign-in, push delivery in Chrome, and a last-resort tutor model (United States).
• Groq and OpenRouter: the AI models that answer the tutor (United States).
• jsDelivr and Hugging Face: code libraries and speech files your browser downloads.
• Your browser's push service (Google, Mozilla, Apple or Microsoft), if you turn on push reminders.

The tutor. Your question, lesson, code and recent messages go to Groq, then OpenRouter if Groq is down (only to hosts that don't keep or train on prompts), and to Google Gemini only as a last resort for learners outside the EU, the EEA, the UK and Switzerland. We don't store the conversation.

We also share data when the law requires it, and with a buyer of our business, who must follow this policy.

5. International transfers

Our servers and backups are in the EU. Our team works from Pakistan, and some providers are in the United States, so your data may be processed outside your country. Where the law requires, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum) or the EU-US Data Privacy Framework. Email us for details.

6. How long we keep it

• While your account exists: your account, profile, progress, projects and posts.
• When you delete your account: all of that is deleted at once. Crews you own pass to another member.
• Kept after deletion: payment records for 7 years (tax law), without the link to your account; feedback without your name; records of moderation and staff decisions; and duel results without your account.
• Contact messages: 24 months after we deal with them.
• Short-lived records: sign-ups never confirmed, 7 days; rate-limit records, 35 days; reminder logs, 60 days; error records, 90 days. Server logs are rotated automatically.
• Backups: 7 days on our server and 30 days off-site, then deleted.

7. Your rights

You can download your data (Me, then Your data) and delete your account (there or on your account page) yourself at any time. Deleting your account also cancels a monthly subscription. Every reminder email has an unsubscribe link.

Depending on where you live, you also have the right to access, correct, delete or move your data, to restrict or object to how we use it, and to withdraw consent. Email info@crovenai.com and we reply within one month. You can also complain to your data protection authority (in the UK, the ICO; in the EU, your national authority).

8. Learners aged 16 and 17

Converge is for people 16 and over. For learners aged 16 or 17, profiles and projects stay private unless they confirm otherwise, crew posts are shown to crew members only, and no reminders are sent between 21:00 and 07:00. If you believe someone under 16 has an account, email us and we will delete it.

9. Cookies and browser storage

We set no cookies and use no analytics or advertising trackers, so there is no cookie banner. The app keeps a few things in your browser's storage that it needs to work: your sign-in session, your settings, lab drafts, offline and speech files, and your own AI key if you add one. You can clear them in your browser's settings, which signs you out. The Cloudflare bot check, and GitHub, Google and Creem when you use them, may set their own cookies.

10. Security

We use encrypted connections, hashed passwords, per-account access rules in the database, isolated containers for running code, and limited staff access. If a breach puts your data at risk, we will tell you and the authorities as the law requires. Report security problems to info@crovenai.com.

11. Changes and contact

If we change this policy in a way that matters, we tell you by email or in the app first. The date at the top shows the current version.