Kodebloc

Privacy Policy

Effective Date: December 9, 2024

Last Updated: July 28, 2026

Introduction

Welcome to Kodebloc. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use Kodebloc. It covers both of our products:

  • Kodebloc on the web — the AI website builder, the Refactoring Lab, and the project and community galleries
  • The Kodebloc mobile app — interactive coding lessons, quizzes, and Code Battles (package com.kodebloc.app)

By using Kodebloc, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our platform.

Information We Collect

We collect several types of information to provide and improve our service:

Personal Information

When you create an account, we collect:

  • Email address
  • Name (if provided)
  • Profile information you choose to provide
  • Authentication credentials

Usage Data

We automatically collect information about how you interact with our platform:

  • Pages visited and features used
  • Time spent on the platform
  • Device information and browser type
  • IP address and general location data
  • AI generation requests and interactions

Builder Data (Web)

When you use the AI website builder or the Refactoring Lab, we collect and process:

  • The prompts and instructions you type into the builder chat
  • Code you paste into the Refactoring Lab
  • The site code (HTML, CSS, and JavaScript) generated from your prompts
  • Projects you save to your private gallery, including their titles and revision history
  • Sites you publish, their public share URLs, and whether you have chosen to list them in the public community gallery
  • Types and timestamps of generation requests

Published sites are public. Anyone with the share URL can open a site you publish, and sites listed in the community gallery are discoverable by other users. Do not put personal or confidential information into a site you publish.

Learning Data (Mobile App)

When you use the Kodebloc mobile application, we collect additional data to provide app features:

  • Course and lesson progress and completion data
  • Lesson notes and bookmarks you save
  • Quiz and multiple-choice question performance, attempts, XP, and streaks
  • Lesson content submitted for AI processing (summaries, exercises, and alternative explanations)
  • Code Battle activity, including match history, scores, opponent identifiers, and match outcomes
  • Your display name and XP total, which appear on public leaderboards if you take part in Code Battles
  • Push-notification device tokens (provided by Expo) when you enable notifications, used solely to deliver notifications to your device
  • Diagnostic and crash data, such as app version, operating system version, and crash details, used to diagnose and fix problems

Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website to track activity on our platform and store certain information. Our mobile app does not use cookies. For more details, please see our Cookie Policy.

How We Use Your Information

We use the collected information for various purposes:

  • To provide, maintain, and improve both of our products
  • To manage your account and provide customer support
  • To generate websites and code rewrites from the prompts you submit, and to host and serve the sites you publish
  • To track your learning progress and personalize your experience in the mobile app
  • To generate AI-assisted learning content (summaries, exercises, questions, and explanations)
  • To analyze the effectiveness of AI-generated content and improve generation quality
  • To send you product updates and newsletters (with your consent)
  • To analyze usage patterns and improve our platform
  • To detect, prevent, and address technical issues and security threats
  • To comply with legal obligations and enforce our terms of service

Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Your data is stored securely using industry-standard encryption and security protocols.

We use Google Firebase (Authentication, Firestore, and Realtime Database) for data storage and authentication, Vercel for hosting the website and your published sites, and Sanity for lesson content. These services maintain high security standards and comply with industry best practices. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Third-Party Services

We use third-party services to help us operate and improve our platform. These services may collect, store, and process your information on our behalf.

AI Generation Service (OpenRouter)

We route all AI generation through OpenRouter, which forwards your request to an underlying model provider. This happens on two paths:

  • Web builder and Refactoring Lab: the prompts you type, the code you paste, and the current state of the site being edited are transmitted to OpenRouter so a new or revised version can be generated
  • Mobile app: lesson content is transmitted to OpenRouter to generate summaries, practice exercises, multiple-choice questions, and alternative explanations

Data Processing: OpenRouter and the selected model provider process this content to fulfil your request. According to their privacy practices, submitted content is typically used only for processing your request and may be retained for service improvement (subject to their retention policies). Treat anything you send to the builder as leaving our systems — do not paste secrets, credentials, or confidential code into it.

Disclaimer: AI-generated content is produced by machine learning models and should be reviewed before you publish or rely on it. We do not guarantee the accuracy, completeness, security, or suitability of AI-generated content.

For more information about OpenRouter's data practices, visit https://openrouter.ai/privacy.

Bring Your Own Key (BYOK): If you choose to provide your own OpenRouter API key, it is stored only in your browser (local storage) and sent directly with your requests. We never persist your personal API key on our servers.

Email Delivery (Resend)

We use Resend to send transactional and account-related emails, such as welcome emails and verification messages. To deliver these emails, your email address is shared with Resend solely for the purpose of sending the message. You can unsubscribe from non-essential emails at any time.

For more information about Resend's data practices, visit https://resend.com/legal/privacy-policy.

Push Notifications (Expo)

Our mobile app uses Expo's push notification service to deliver notifications. When you enable notifications, a device push token is generated and used only to send notifications to your device. You can disable notifications at any time in your device settings.

Backend Hosting (Vercel)

We host our website and backend services, including matchmaking and notification delivery for Code Battles, on Vercel. Data processed by these services is handled in accordance with this Privacy Policy.

Google Ads

We use Google Ads to display advertisements on our platform. Google uses cookies and other tracking technologies to serve ads based on your prior visits to our website and other websites on the internet.

Google's use of advertising cookies enables it and its partners to serve ads based on your visit to Kodebloc and/or other sites on the internet. You can opt out of personalized advertising by visiting Google's Ads Settings at https://www.google.com/settings/ads.

Analytics Services

We may use analytics services to help us understand how users interact with our platform. These services may use cookies and similar technologies to collect information about your usage.

Authentication Services

We use Firebase Authentication for user authentication and account management, including sign-in with Google. This service processes your authentication credentials securely.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device that help us remember your preferences and understand how you use our service.

For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

Your Rights and Choices

You have certain rights regarding your personal data:

  • Access: You can request access to the personal data we hold about you
  • Correction: You can update or correct your personal information through your account settings
  • Deletion: You can request deletion of your account and associated data
  • Data Portability: You can request a copy of your data in a structured, machine-readable format
  • Opt-out: You can opt out of marketing communications at any time
  • Cookie Management: You can control cookies through your browser settings

To exercise any of these rights, please contact us using the information provided in the Contact Us section below.

Children's Privacy

Our platform is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to remove such information from our systems.

Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

  • Service Providers: With third-party service providers who perform services on our behalf
  • Legal Requirements: When required by law or to protect our rights and safety
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly consent to sharing your information

International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our platform, you consent to the transfer of your information to our facilities and the third parties with whom we share it as described in this policy.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this policy.

We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within a reasonable timeframe and work to address your concerns.