Privacy Policy
Last Updated: February 7, 2026
1. Introduction
MakeSense ("we," "our," or "us") operates the MakeSense platform, an AI-powered personalized learning service accessible at makesense.dev and related domains (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By accessing or using our Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.
2. Information We Collect
2.1 Personal Information You Provide
When you register for an account, we collect:
- Account Information: Your full name, email address, and password (stored in hashed form)
- Payment Information: When you subscribe, payment details are collected and processed by our payment processor, Stripe. We store your Stripe Customer ID and subscription details but never store your full credit card information directly
2.2 Learning and Usage Data
As you use our Service, we automatically collect:
- Course Planning Data: Conversations with our AI during course creation, including your learning goals, background, and preferences
- Learning Progress: Lesson completion status, time spent on lessons, start times, read times, and completion times
- Assessment Data: Your answers to quizzes, exercises, and other activities, including scores, attempt counts, and detailed performance metrics
- AI Tutor Conversations: Questions you ask our AI tutor and the responses provided, including any text you highlight within lessons
- Voice Assessment Data: If you use our voice assessment feature, we collect the full audio conversation transcript, and analysis of your communication patterns including articulation quality, hesitation patterns, and concept understanding
- Engagement Data: Scroll depth, section view time, video interactions (play, pause, seek, rewatch, completion), code editing patterns (edit count, error frequency), and text you highlight or annotate within lessons
- Check-in Responses: Your responses to in-app check-ins and polls, including feedback about your learning experience and areas where you may be struggling
- Generated Content: Custom courses, lessons, slideshows, and learning aids created specifically for you based on your learning goals and performance
2.3 Learning Profile and Personalization Data
To personalize your learning experience, we build and maintain a learning profile based on your activity. This profile may include:
- Behavioral Signals: Inferred learning pace, modality preferences (visual, text-based, hands-on), and engagement patterns derived from your usage
- Performance Analysis: Identified struggle patterns, strength areas, common misconceptions, and areas needing reinforcement
- Communication Style: If you use voice assessment, analysis of your communication approach, articulation, and concept articulation quality
- Explicit Preferences: Your self-reported preferences for learning pace, example complexity, and content delivery
This profile is used solely to adapt content, pacing, and learning aids to your individual needs. We may also use anonymized, aggregated data to evaluate and improve our personalization system.
2.4 Automatically Collected Information
When you access our Service, we may automatically collect:
- Device Information: Browser type, operating system, and device identifiers
- Log Data: IP address, access times, pages viewed, and referring URLs
- Session Data: Authentication tokens and session identifiers for maintaining your login state
3. How We Use Your Information
We use the information we collect to:
- Provide and Personalize the Service: Generate custom courses tailored to your learning goals, build and maintain your learning profile, track your progress, and provide personalized AI tutoring and adaptive content
- Improve Learning Outcomes: Analyze your performance data, engagement patterns, and voice assessment results to generate personalized reinforcement content, identify areas needing improvement, and adapt content delivery to your learning style and pace
- Process Payments: Manage subscriptions, process transactions, and handle billing inquiries
- Communicate With You: Send account verification emails, password reset links, and important service updates
- Maintain and Improve the Service: Monitor usage patterns, debug issues, and enhance features
- Ensure Security: Detect and prevent fraud, abuse, and unauthorized access
- Comply With Legal Obligations: Fulfill legal requirements and respond to lawful requests
4. Third-Party Services and Data Sharing
We share your information with the following third-party service providers who assist us in operating our Service. Each provider processes data only for the purposes described:
4.1 Anthropic (Claude AI)
We use Anthropic's Claude AI to power our course generation and AI tutor features. When you interact with these features, the following data is sent to Anthropic:
- Your course planning conversations and learning goals
- Questions you ask the AI tutor
- Lesson content for context when answering questions
- Your performance data and learning profile for generating personalized content
- Assessment results and identified struggle patterns to personalize exams and learning aids
Anthropic's privacy practices are governed by their Privacy Policy.
4.2 OpenAI (Text-to-Speech and Voice Assessment)
We use OpenAI's APIs to power audio features in the Service:
- Text-to-Speech: Lesson text content and titles are sent to OpenAI for audio narration synthesis. Generated audio is cached to minimize repeated data transmission
- Voice Assessment: If you use the voice assessment feature, your real-time voice conversation is processed through OpenAI's Realtime API via WebRTC. The full transcript of the conversation is stored, and we analyze communication patterns such as articulation quality, hesitation, and concept understanding to inform your learning profile
Voice assessment sessions are time-limited. Voice audio is processed in real-time and is not stored by us in raw audio form; however, the text transcript and derived analysis are retained as part of your learning profile. OpenAI's privacy practices are governed by their Privacy Policy.
4.3 Stripe (Payments)
We use Stripe to process payments and manage subscriptions. When you make a payment, Stripe collects your payment card information, billing address, and processes the transaction. We receive and store only your Stripe Customer ID and subscription status.
Stripe's privacy practices are governed by their Privacy Policy.
4.4 Google Cloud (Pronunciation Audio and Image Generation)
We use Google Cloud services for the following purposes:
- Pronunciation Audio: Individual words and phrases are sent to Google Cloud Text-to-Speech for pronunciation synthesis in language learning content. Generated audio is cached to minimize repeated data transmission
- Slideshow Image Generation: Lesson content and descriptive prompts are sent to Google's Generative AI (Gemini) to generate images for interactive slideshow presentations
Google Cloud's privacy practices are governed by their Cloud Privacy Notice.
4.5 SendGrid (Email)
We use SendGrid to send transactional emails including account verification and password reset emails. Your email address is shared with SendGrid solely for email delivery purposes.
SendGrid's privacy practices are governed by their Privacy Policy.
4.6 MongoDB (Database Hosting)
We use MongoDB to store your account information, learning progress, and generated content. Data is stored securely in accordance with MongoDB's security practices.
MongoDB's privacy practices are governed by their Privacy Policy.
4.7 Upstash (Rate Limiting and Job Processing)
We use Upstash Redis for rate limiting API requests and managing background job queues. Upstash may temporarily process your IP address and request metadata for rate limiting purposes. This data is ephemeral and not stored long-term.
Upstash's privacy practices are governed by their Privacy Policy.
4.8 Sentry (Error Monitoring)
We use Sentry to monitor application errors, performance issues, and user experience quality. The following information may be sent to Sentry:
- Error messages and stack traces (technical details about what went wrong)
- Browser type, operating system, and device information
- URL where the error occurred
- Anonymous session identifiers
- Performance metrics (page load times, API response times)
- Session replays: anonymized recordings of your interactions when errors occur, with personal text and media content masked to protect your privacy
We configure Sentry to mask personal information and do not intentionally send email addresses, names, or learning content to Sentry. Session replays are sampled at a low rate and are used solely to reproduce and fix technical issues. Error data is used solely to identify and fix technical issues with our Service.
Sentry's privacy practices are governed by their Privacy Policy.
4.9 Other Disclosures
We may also disclose your information:
- To comply with applicable laws, regulations, or legal processes
- To respond to lawful requests from public authorities
- To protect our rights, privacy, safety, or property
- In connection with a merger, acquisition, or sale of assets
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our Service. Specifically:
- Account Information: Retained until you request account deletion
- Learning Progress and Content: Retained for the duration of your account to enable continued learning and progress tracking
- AI Conversations: Retained to provide context for future interactions and personalization
- Voice Assessment Data: Transcripts and analysis are retained as part of your learning profile for the duration of your account
- Engagement Events: Detailed interaction events (scroll, video, code activity) are automatically deleted after 30 days
- Personalized Content Cache: Repackaged lesson content is automatically deleted after 7 days and regenerated as needed
- Payment Records: Retained as required by tax and accounting regulations (typically 7 years)
- Session Data: Authentication sessions expire after 7 days of inactivity
After account deletion, we may retain certain information in anonymized or aggregated form for analytical purposes.
6. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
6.1 Access and Portability
You have the right to request a copy of the personal information we hold about you. Contact us at hello@ideasmakesense.com to request your data.
6.2 Correction
You may update your account information by logging into your account settings or by contacting us directly.
6.3 Deletion
You may request deletion of your account and associated personal data by contacting us at hello@ideasmakesense.com. Please note that we may retain certain information as required by law or for legitimate business purposes.
6.4 Subscription Management
You can manage or cancel your subscription at any time through the Stripe billing portal accessible from your account settings.
6.5 Email Communications
We send only essential transactional emails (account verification, password reset). These cannot be opted out of while maintaining an active account.
8. Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encryption of data in transit using TLS/SSL
- Secure password hashing using industry-standard algorithms
- Regular security assessments and updates
- Access controls limiting employee access to personal data
- Secure webhook verification for payment processing
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. Our service providers, including Anthropic, OpenAI, Stripe, Google Cloud, MongoDB, Upstash, and Sentry, may process data in the United States and other jurisdictions.
When we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities.
10. Children's Privacy
Our Service is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children under these ages. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@ideasmakesense.com and we will delete such information.
11. California Privacy Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
- Right to Delete: Request deletion of your personal information, subject to certain exceptions
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
We do not sell personal information to third parties. To exercise your California privacy rights, contact us at hello@ideasmakesense.com.
12. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
- Legal Basis: We process your data based on contract performance (to provide our Service), consent (where specifically obtained), and legitimate interests (to improve and secure our Service)
- Right to Object: You may object to processing based on legitimate interests
- Right to Restrict Processing: You may request we restrict processing in certain circumstances
- Data Portability: You may request your data in a structured, machine-readable format
- Right to Lodge a Complaint: You may lodge a complaint with your local data protection authority
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may also send you an email notification.
Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.
14. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us at: