Skip to content
Kodebloc

Privacy Policy

Effective Date: December 9, 2024

Last Updated: October 28, 2026

Introduction

Welcome to Kodebloc. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use Kodebloc. It covers both of our products:

  • Kodebloc on the web: the AI website builder, the Refactoring Lab, and the project and community galleries
  • The Kodebloc mobile app: interactive coding lessons, quizzes, and Code Battles (package com.kodebloc.app)

By using Kodebloc, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our platform.

Information We Collect

We collect several types of information to provide and improve our service:

Personal Information

When you create an account, we collect:

  • Email address
  • Name (if provided)
  • Profile information you choose to provide
  • Authentication credentials

Usage Data

We automatically collect information about how you interact with our platform:

  • Pages visited and features used
  • Time spent on the platform
  • Device information and browser type
  • IP address and general location data
  • AI generation requests and interactions

Builder Data (Web)

When you use the AI website builder or the Refactoring Lab, we collect and process:

  • The prompts and instructions you type into the builder chat
  • Code you paste into the Refactoring Lab
  • The site code (HTML, CSS, and JavaScript) generated from your prompts
  • Projects you save to My projects (visible only to you), including their titles and revision history
  • Sites you publish, their public share URLs, and whether you have chosen to list them in the public community gallery
  • Types and timestamps of generation requests

Published sites are public. Anyone with the share URL can open a site you publish, and sites listed in the community gallery are discoverable by other users. Do not put personal or confidential information into a site you publish.

Pictures You Upload

When you upload a picture in the builder, we keep the picture, its size and when you uploaded it, so your websites can show it and you can use it again. It is stored with our hosting provider, Vercel. Pictures you upload can be seen by anyone who opens a page that shows them, so upload only pictures you own or may use. You can delete a picture at any time in the builder, and all of them are deleted with your account.

Forms on Published Sites

When a visitor fills in a form on a site published with the builder (for example a contact, booking, or sign-up form), we store what they typed, the form's name, the site it came from, and the time it was sent. We show it to the site's owner in their Messages inbox and email it to the owner's account email address. Visitors' IP addresses are used briefly to limit spam and are not stored with the message. Form fields that look like passwords, card numbers, or government ID numbers are dropped and never saved.

The site's owner decides what to do with these messages, and is responsible for handling them lawfully. Owners can delete messages at any time, and they are deleted with the owner's account. To remove something you sent through a form, contact the site's owner or us.

Messages You Send Us

When you use our contact form, we store the topic, your name if you give one, your email address, your message, the time you sent it, and, if you were signed in, which account you used. We pass it to our team's Slack workspace so we can reply to you, with your browser and device type and, if you were signed in, your account's name, sign-in method, when you joined and how many websites you have, so we can help faster. Your IP address is used briefly to limit spam and is not stored with the message. We keep these messages for as long as we need them to help you, and you can ask us to delete them. If you delete your account, we remove which account each message came from.

Learning Data (Mobile App)

When you use the Kodebloc mobile application, we collect additional data to provide app features:

  • Course and lesson progress and completion data
  • Lesson notes and bookmarks you save
  • Quiz and multiple-choice question performance, attempts, XP, and streaks
  • Lesson content submitted for AI processing (summaries, exercises, and alternative explanations)
  • Code Battle activity, including match history, scores, opponent identifiers, and match outcomes
  • Your display name and XP total, which appear on public leaderboards if you take part in Code Battles
  • Push-notification device tokens (provided by Expo) when you enable notifications, used solely to deliver notifications to your device
  • Diagnostic and crash data, such as app version, operating system version, and crash details, used to diagnose and fix problems

Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website to track activity on our platform and store certain information. Our mobile app does not use cookies. For more details, please see our Cookie Policy.

How We Use Your Information

We use the collected information for various purposes:

  • To provide, maintain, and improve both of our products
  • To manage your account and provide customer support
  • To generate websites and code rewrites from the prompts you submit, and to host and serve the sites you publish
  • To check build requests and pages against our Terms of Service before they are built or published, sometimes by passing their text to the same AI services
  • To track your learning progress and personalize your experience in the mobile app
  • To generate AI-assisted learning content (summaries, exercises, questions, and explanations)
  • To analyze the effectiveness of AI-generated content and improve generation quality
  • To send you product updates and newsletters (with your consent)
  • To analyze usage patterns and improve our platform
  • To detect, prevent, and address technical issues and security threats
  • To comply with legal obligations and enforce our terms of service

Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Your data is stored securely using industry-standard encryption and security protocols.

We use Google Firebase (Authentication, Firestore, and Realtime Database) for data storage and authentication, Vercel for hosting the website and your published sites, and Sanity for lesson content. These services maintain high security standards and comply with industry best practices. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

When you delete your account, we keep one thing: the link names of websites you published (for example, the “rosas-bakery” in rosas-bakery.kodebloc.app). We keep nothing else with them: no page, title or account. This stops someone else putting a different website at a link that people may still have saved or shared.

When we take down a website for breaking our Terms of Service, we keep its page and its project, out of your reach, for 14 days so we can review an appeal. After that we delete them, and keep only the link name and why it was taken down, so the link can say so.

Deleting your account also takes the email address you sign in with off our mailing list, and signs you out in the browser you used.

Third-Party Services

We use third-party services to help us operate and improve our platform. These services may collect, store, and process your information on our behalf.

AI Service Providers

We use third-party AI service providers to generate and check content. They receive content in these cases:

  • Web builder and Refactoring Lab: the prompts you type, the code you paste, and the current state of the site being edited are sent to an AI service provider so a new or revised version can be generated, and the text of build requests and pages may be sent to check them against our Terms of Service
  • Mobile app: lesson content is sent to an AI service provider to generate summaries, practice exercises, multiple-choice questions, and alternative explanations

Data Processing: These providers process this content to fulfil your request, and may keep it for a time under their own privacy and retention policies. Treat anything you send to the builder as leaving our systems: do not paste secrets, credentials, or confidential code into it.

Disclaimer: AI-generated content is produced by machine learning models and should be reviewed before you publish or rely on it. We do not guarantee the accuracy, completeness, security, or suitability of AI-generated content.

Email Delivery (Resend)

We use Resend to send transactional and account-related emails, such as welcome emails and verification messages, to email site owners the messages visitors send through forms on their published sites, and to deliver the messages you send us through our contact form. To deliver these emails, the email addresses involved and the message are shared with Resend solely for the purpose of sending it. You can unsubscribe from non-essential emails at any time.

For more information about Resend's data practices, visit https://resend.com/legal/privacy-policy.

Push Notifications (Expo)

Our mobile app uses Expo's push notification service to deliver notifications. When you enable notifications, a device push token is generated and used only to send notifications to your device. You can disable notifications at any time in your device settings.

Backend Hosting (Vercel)

We host our website and backend services, including matchmaking and notification delivery for Code Battles, on Vercel. Data processed by these services is handled in accordance with this Privacy Policy.

Error Monitoring (Sentry)

We use Sentry to find out when something breaks, so we can fix it. When an error happens, Sentry receives a technical report: what went wrong, where in our code, the page or address it happened on (without anything after a “?” in it), your browser and device type, and, if you are signed in, your account ID. It does not receive your name, email address, cookies, the prompts or code you send to the builder, or the pages of your websites. We filter those out before a report leaves your browser or our servers. A report from your browser reaches Sentry from your IP address: Sentry uses it to estimate your country and city, and does not store it.

In your browser, error reports follow your cookie choice: where we ask first (the EEA, the UK and Switzerland), only after you accept, and anywhere, never after you decline or if your browser sends a Global Privacy Control signal. A report may include a short replay of the moments before the error, with all text, what you typed, images and previews hidden. Sentry is never loaded on websites people publish with Kodebloc, so nothing is sent from their visitors' browsers. If our servers fail while showing one of those websites, the report holds only its address and the visitor's browser type.

For more information about Sentry's data practices, visit https://sentry.io/privacy/.

Google Ads

We use Google Ads to display advertisements on our platform. Google uses cookies and other tracking technologies to serve ads based on your prior visits to our website and other websites on the internet.

Google's use of advertising cookies enables it and its partners to serve ads based on your visit to Kodebloc and/or other sites on the internet. You can opt out of personalized advertising by visiting Google's Ads Settings at https://www.google.com/settings/ads.

Analytics Services

We may use analytics services to help us understand how users interact with our platform. These services may use cookies and similar technologies to collect information about your usage.

We also keep our own record of the steps visitors take on Kodebloc, such as starting a website, a build that failed, or publishing, so we can see where people get stuck and improve the builder. It records which steps happened and when, the page, where you came from, and the kind of device (phone, tablet or computer, and whether the page was opened inside an app such as Instagram). It never includes what you type, such as your prompts, your name or your email address. A random ID stored in your browser tells a returning visit apart; when you're signed in, visits are linked to your account. In the EEA, the UK and Switzerland we only keep this record after you accept analytics cookies; everywhere else you can turn it off by declining. Anyone can change their answer at any time with Cookie settings at the bottom of every page; declining also forgets this browser's ID. We don't keep this record when your browser sends Global Privacy Control. Visits are deleted after 90 days, and deleting your account deletes the visits made while signed in. Once a week, counts from this record (never your account or browser ID) are summarized with the help of an AI service provider.

With an account, we may also email you a weekly summary of the messages your published website received, or a reminder about a website you haven't published yet. Every such email has a link to stop them.

Authentication Services

We use Firebase Authentication for user authentication and account management, including sign-in with Google. This service processes your authentication credentials securely.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device that help us remember your preferences and understand how you use our service.

For detailed information about the cookies we use and how to manage them, please refer to our Cookie Policy.

Your Rights and Choices

You have certain rights regarding your personal data:

  • Access: You can request access to the personal data we hold about you
  • Correction: You can update or correct your personal information through your account settings
  • Deletion: You can request deletion of your account and associated data
  • Data Portability: You can request a copy of your data in a structured, machine-readable format
  • Opt-out: You can opt out of marketing communications at any time
  • Cookie Management: You can control cookies through your browser settings

To exercise any of these rights, please contact us using the information provided in the Contact Us section below.

Children's Privacy

Our platform is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to remove such information from our systems.

Data Sharing and Disclosure

We do not sell your personal data. We may share your information in the following circumstances:

  • Service Providers: With third-party service providers who perform services on our behalf
  • Legal Requirements: When required by law or to protect our rights and safety
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly consent to sharing your information

International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our platform, you consent to the transfer of your information to our facilities and the third parties with whom we share it as described in this policy.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this policy.

We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within a reasonable timeframe and work to address your concerns.