The Ultimate Learning Game
Last updated: October 21, 2026
Effective: October 21, 2026
The Ultimate Learning Game values your privacy. This Privacy Policy explains how we collect, use, store, disclose, retain, and protect personal information when you visit our websites, create an account, or use our app and related services.
To protect users’ privacy, we have migrated from storing sensitive user data from our server to the browser on June 01st 20261. This change is intended to keep the app data described in Section 2 in each user’s browser rather than make it available to our team through our server.
Our server still stores certain account, consent, subscription, and service-management information. This information includes: Clerk user ID; account creation timestamp; email address; mobile app sign-up alert data⁶; Privacy Policy version and acceptance timestamp; Terms and Conditions version and acceptance timestamp; parent/guardian consent timestamp and version; consent timestamps, versions, revocation timestamps, and history periods for promotional, marketing, and survey-opportunity emails; Canadian-resident attestation timestamp and version; confirmation that the payment card’s issuing country is Canada; last-updated/effective timestamp for app data; Stripe Customer ID; Stripe subscription ID; the requiresSubscription setting³; display name; avatar ID; timezone; tour-completion timestamp; account-deletion timestamp; and account-ban data.
A Stripe Customer ID is created when you click the checkout button on our Pricing/Plans page. A Stripe subscription ID is created only after you complete checkout for a subscription plan. Stripe stores your Stripe customer record on its servers. Our server receives information about whether your payment card’s issuing country is Canada. Our service is currently intended for Canadian residents, although this Privacy Policy explains our practices for visitors and users who may be subject to privacy laws in other jurisdictions.
App data stored in your browser may be lost if you clear browser data or cookies, close or reset your browser in a way that removes site data, or otherwise remove the app’s local data. The app allows you to download your data as a .json file, which you can later upload in the app, including when using another browser or device. Keep your own copy of this file somewhere safe.
The Ultimate Learning Game and its team are not responsible for data loss resulting from a user’s browser, device, or actions, to the extent permitted by applicable law. Please keep backups of any data you want to preserve.
Privacy laws differ between countries and regions. This Privacy Policy is intended to explain our practices in a clear and consistent way. Where applicable law grants you additional rights or requires additional protections, those requirements continue to apply.
If you choose to upload a course syllabus to generate Quests automatically, our application processes the uploaded syllabus using an on-device AI model packaged directly within the app and local parsing. The syllabus is processed locally on your browser to extract relevant course details for generating Quests. The syllabus and the content extracted from it are not transmitted to external third-party AI services through this processing feature, shared with other users, or intentionally stored permanently by the AI model. The extracted syllabi information is used to provide the requested functionality within the app. Syllabus content is not used to train or improve the underlying AI model.
Once you upload your syllabus, after you review, and confirm the draft, the course and Quest details you approve are saved as app data in your browser. If you enable Google Drive sync, those confirmed records may be included in the app-data backup sent to your Drive. If you choose to use Google Calendar sync, event details such as course names, Quest titles, dates, times, and notes or Quest type may be sent to Google Calendar. Hence, information from your syllabus that is included in the course and Quest details you confirm may be sent to Google if you enable Google Drive backup or Google Calendar sync. Depending on those details, the records could convey a substantial portion of the syllabus information. The importer does not send the original syllabus file or the full temporary extracted text directly; the integrations send confirmed app records.
You are responsible for ensuring that you are permitted to upload and process any syllabus or other material you provide through this feature. Course syllabi may be subject to copyright, institutional policies, or other restrictions. This feature is intended to help you organize your own coursework and does not grant you ownership of, or additional rights to, any third-party material you upload.
App data stored in your browser includes, but is not limited to, grades, levels, courses, activities (“Quests”), calendar items, XP counts and logs, streaks, semester GPA, cumulative GPA (cGPA), and free-plan feature-limit status (for example, how many course slots have been used). Our current app design stores these items in your browser rather than our server. Based on that design, our team does not have access to the app data stored only in your browser.
You are responsible for keeping a backup of browser-stored app data if you want to preserve it. You can export your data through the app and upload the resulting JSON file later. Alternatively, you can sync your app data with Google Drive and/or sync your calendar items with Google Calendar. More information regarding Google Drive sync and Google Calendar sync are provided in later sections of this policy. Browser-stored data may be affected by browser settings, device failures, software changes, or actions that remove local site data.
The Ultimate Learning Game operates in Toronto, Canada. The app is hosted using Replit, whose servers and databases used by our app are located in the United States. For more information, please read [Replit’s Privacy Policy](https://replit.com/site/privacy).
We also use third-party services, including Clerk, Cloudflare, Stripe, Resend, Google OAuth/Google Identity Services, Google Drive, Google Calendar, and Cookiebot by Usercentrics. These services may process information as described in the relevant sections below and in their own privacy policies.
Some of these providers are based in the United States or may process information there or in other countries. Consequently, personal information processed by these providers may be subject to the laws of the jurisdictions in which the information is processed. Where applicable law requires specific safeguards or disclosures for international transfers, those requirements continue to apply.
We rely on third-party providers to deliver authentication, hosting, security, payment processing, email delivery, analytics, cookie management, and optional cloud-backup functions. Each provider’s access to information depends on the services used and the relevant configuration.
Please review the providers’ privacy policies for further information:
[Replit Privacy Policy](https://replit.com/site/privacy)
[Clerk Privacy Policy](https://clerk.com/legal/privacy)
[Stripe Privacy Policy](https://stripe.com/privacy)
[Resend Privacy Policy](https://resend.com/legal/privacy-policy)
[Google Privacy Policy](https://policies.google.com/privacy)
[Cloudflare Privacy Policy](https://www.cloudflare.com/privacypolicy/)
[Cookiebot by Usercentrics](https://www.cookiebot.com/)
The app allows you to back up your app data to your Google Drive account and restore it when needed. When you connect Google Drive, you grant the permission shown in the Google Identity Services consent screen: “See, edit, create, and delete only the specific Google Drive files you use with this app.” The permission is intended to apply only to the specific files used by this app.
The app is designed to update the The-Ultimate-Learning-Game-backup.json file in your Google Drive at least once every minute while the app tab is open - however, this is not guaranteed. If no changes have been made since the previous backup, the file is not updated again during that interval. Since, we cannot promise that your app data will sync to Google Drive data every minute (if opted-in) - we encourage you to manually sync your data with your Google Drive before you close the tab.
Using “Restore from Drive” replaces the app data currently stored in your browser with the data in the selected backup. This action cannot be undone directly through the app. You may need to restore an earlier version of the JSON file from Google Drive if you want to recover the previous data.
Google processes information in connection with its authentication and Drive services under its own policies. Connecting Google Drive is optional. You can continue using the app without connecting Google Drive, although you will not have access to that integration’s backup and restoration functions.
For more information, read [Google’s Privacy Policy](https://policies.google.com/privacy) and [Google’s API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy).
When you sign in to the app, the app can access certain account and service-management information stored on our server. This includes your display name, Clerk user ID, last-login timestamp⁵, avatar ID, timezone, account creation timestamp, tour-completion timestamp, account-deletion timestamp², email address, mobile app sign-up alert data⁶, Privacy Policy version and acceptance timestamp, Terms and Conditions version and acceptance timestamp, parent/guardian consent timestamp and version, promotional/marketing/survey-opportunity email consent and revocation records, Canadian-resident attestation timestamp and version, confirmation about the payment card’s issuing country, app-data last-updated/effective timestamp, Stripe Customer ID, Stripe subscription ID, the requiresSubscription setting³, and account-ban data. The Stripe Customer Record is stored by Stripe, which may contain the Stripe customer ID and Stripe subscription ID.
We use this information to manage accounts, authenticate users, maintain consent records, administer subscriptions and plan limits, enforce our Terms and Conditions, respond to account requests, and operate the service.
Stripe is our third-party payment processor for subscriptions. Stripe Customer IDs and subscription IDs are identifiers; they are not themselves your full payment-card details. Stripe handles payment information under its own policies.
For account deletion, we treat a Stripe account as having paid history only if Stripe reports at least one paid invoice. If there is no paid invoice, we ask Stripe to delete the customer record and remove its identifiers from our account records. If the deletion request cannot be completed, the Stripe record may remain with Stripe.
If we retain a Stripe customer or subscription identifier, that identifier is stored in our account records. The associated Stripe customer record is held by Stripe and is subject to Stripe’s own data-handling and retention practices.
Our current checkout setup is configured to block payment cards that are not Canadian and to block checkout attempts from IP addresses identified as non-Canadian. These restrictions should not be taken as a guarantee that every user’s location or residency can be verified in every circumstance.
We may send billing notices to your email address through Stripe. Stripe may independently collect or process information as necessary to provide payment processing, prevent fraud, comply with legal obligations, and provide its services.
For more information, read [Stripe’s Privacy Policy](https://stripe.com/privacy).
Clerk manages user authentication. For more information about how Clerk processes personal information, read [Clerk’s Privacy Policy](https://clerk.com/legal/privacy) and [Clerk’s Data Processing Addendum](https://clerk.com/legal/dpa).
We may use the email address you provide when creating an account to send service-related messages, including legal notices (such as updates to this Privacy Policy or our Terms and Conditions) and confirmation emails (such as account-creation and account-deletion confirmations). These messages may be necessary to administer your account or provide the service.
If you opted in to receive an alert when our mobile app becomes available, we may also email you about that launch.
As of July 30, 2026, at 9:00 a.m. ET, we added promotional, marketing, and survey-opportunity emails to this Privacy Policy. Existing users before that time were opted out by default and can opt in through the “Email Preferences” section in app Settings. New users can choose whether to opt in during onboarding. These emails are optional and are not a condition of creating an account.
Service-related messages and any optional promotional, marketing, survey-opportunity, or mobile-app-alert emails that you have requested are sent through Resend, our email-delivery service. Resend may process your display name, email address, and the subject and content of the email. Our current configuration retains your display name and email address in Resend for 30 days after email delivery.
You may withdraw consent to optional promotional, marketing, and survey-opportunity emails by using the unsubscribe method described in this section or the relevant settings within the app, where available. You may also opt out of the mobile app alert by emailing us at [email protected]. Opting out of an optional email category does not necessarily delete the records associated with your prior consent or sign-up.
We will continue to send service-related messages where reasonably necessary to operate your account, comply with legal obligations, or communicate important service information, subject to applicable law.
For more information, read [Resend’s Privacy Policy](https://resend.com/legal/privacy-policy).
The app is designed primarily for university undergraduate students. Users under 18 must have permission from a parent or guardian and must agree to the current Privacy Policy and Terms and Conditions before using the app. Users under 13 should not use the app.
When creating an account, users confirm the following:
“By creating an account, you represent that you are at least 13, and if under 18, that you have your parent or guardian's consent.”
We ask for this confirmation as part of our approach to age-related privacy requirements. Applicable requirements may depend on the user’s age, circumstances, location, and the laws that apply.
This age statement does not replace any additional parental-consent, age-assurance, or other requirements that may apply under local law. Where applicable law requires a different process or does not permit a particular user to use the service, that law continues to apply.
Parents or guardians who have questions about a minor’s account or personal information may contact us at [email protected].
Clerk uses first-party session cookies for authentication. These cookies are used when you sign in, may refresh while you use the app, and are invalidated when you sign out or delete your account.
Stripe may set its own cookies for fraud detection and other purposes. The Ultimate Learning Game application does not itself read or set Stripe’s cookies. If you choose to connect Google Drive, Google may set authentication cookies during the Google Identity Services process on accounts.google.com.
We use analytics cookies on our websites to collect information such as website visits, page views, sign-ups, mobile-app-alert sign-ups⁶, clicks on the subscription button, and completed subscription purchases. These technologies help us understand how our websites are used and measure the performance of our services and marketing.
The Cookiebot banner lets you choose among the cookie categories offered on our sites: Necessary, Statistics, and Marketing. We do not use a separate Preferences cookie category.
Under our current configuration, choosing “Deny all” or not interacting with the banner should allow only Necessary cookies. Cookie preferences are intended to be shared across our two domains: [theultimatelearninggame.ca](http://theultimatelearninggame.ca/) and calculatemygrades.ca. The cookies used may differ between domains, so please review the cookie declaration for the domain you are visiting.
Where applicable law requires consent before non-essential cookies or similar technologies are used, those technologies should be used in accordance with the applicable consent requirements. You can change your cookie preferences through the cookie-management options made available on the relevant website, where available.
You can read the cookie declaration at theultimatelearninggame.ca/cookies.
Google Tag Manager and Google Ads conversion measurement tags are currently included across public pages, interactive tools, and signed-in app routes. They are separate from Google AdSense, which is not currently loaded by our application. These tags may process page URLs, referrers, browser and device details, online identifiers, and conversion events such as sign-ups or subscription purchases, depending on the tag configuration and your consent choices.
The app initializes Google Consent Mode with non-essential storage set to denied before the Google tags load. Cookiebot may update those consent signals based on your choices. The Google tag scripts are still included in the page; a denied storage setting does not mean that no Google code runs.
Risk concerning browser-only app data: the app stores potentially sensitive study information in browser storage, including course details, grades, activities (“Quests”), schedules, GPA, XP, and streaks. Currently, public pages, interactive tools, and signed-in routes can share the same origin on a given domain. Some interactive tools also save user-entered inputs in localStorage.
JavaScript running on a page can technically access page content and browser storage made available to scripts on that origin, including localStorage and IndexedDB. Third-party scripts loaded through Google Tag Manager also run in the page context. Our application code does not deliberately send these study records to Google through the tags. We have not independently verified every action of every tag configured in Google Tag Manager, so we cannot rule out that a tag could access or transmit information available on the page or origin. This is a technical risk disclosure, not a claim that Google has accessed or received these records.
Google AdSense is not currently loaded by our application. The presence of Google Tag Manager or Google Ads conversion tags does not mean AdSense is active. Any future AdSense change would require separate implementation and review.
Cloudflare proxies our domains ([theultimatelearninggame.ca](http://theultimatelearninggame.ca/) and calculatemygrades.ca) and may process information such as IP addresses, browser details, page visits, and query counts. Some information Cloudflare collects may be available to us. Cloudflare may use information for bot detection, security, performance, and related purposes.
Our current Cloudflare configuration is intended to block access from IP addresses identified as outside Canada. IP-address handling and geolocation are not always exact, so this should not be treated as a guarantee of a user’s actual location.
For more information, read [Cloudflare’s Privacy Policy](https://www.cloudflare.com/privacypolicy/).
Both of our domains provide access to The Ultimate Learning Game. The additional domain, calculatemygrades.ca, are used to give users more ways to access the service and for marketing purposes. The Privacy Policy, Terms and Conditions, and cookie declaration are available on these domains as well. Cookie declarations may vary by domain.
Calculatemygrades.ca
Privacy Policy: calculatemygrades.ca/privacy
Terms and Conditions: calculatemygrades.ca/terms
Cookie Declaration: calculatemygrades.ca/cookies
We also have redirects to our app and those are stated below:
tulg.ca leads to [theultimatelearninggame.ca](http://theultimatelearninggame.ca/)
[theultimatelearninggame.com](http://theultimatelearninggame.com/) leads to [theultimatelearninggame.ca](http://theultimatelearninggame.ca/)
[uncookmygrades.ca](http://uncookmygrades.ca/) leads to [theultimatelearninggame.ca](http://theultimatelearninggame.ca/)
Additional redirects may be added in this future and may not be updated in this Privacy Policy regularly.
Third-party services may process your IP address. Our current Cloudflare configuration is intended to block IP addresses identified as outside Canada. Our Stripe checkout is also configured to block cards that are not Canadian and checkout attempts from IP addresses identified as non-Canadian.
The Ultimate Learning Game does not intentionally store users’ IP addresses in our Replit application database. However, our hosting, domain, security, analytics, and other service providers may process IP addresses as part of providing their services.
We also receive analytics about the types of devices and browsers used to access the app. Replit provides geographic information about connections. We understand this information to be aggregate information that our team cannot trace back to an individual user.
Information collected through analytics may be used to understand website usage, evaluate sign-up and subscription activity, troubleshoot issues, and assess marketing performance. The information available to us depends on the provider, the configuration of the relevant tools, and the choices you make through the cookie banner.
Where required by applicable law, we will obtain consent for non-essential analytics technologies before using them and provide the rights and choices required by that law.
The deletion rules below distinguish between accounts created before July 13, 2026, at 3:00 p.m. ET and accounts created later. The older-account rules apply only to accounts created before that time.
The information listed in this section describes our current account-deletion process. Account deletion does not necessarily delete records held independently by third-party providers, records that must be retained by law, or records that remain necessary for a permitted purpose. Any retention remains subject to applicable legal requirements.
Account deletion does not delete app data backed up and sent to Google Drive and Google Calendar, if opted-in, users would need to manually delete this app data themselves from the respective services, if desired.
You may request deletion of your account at any time. When your account is deleted, the following information is deleted from our server, according to our current account-deletion process: display name, avatar ID, timezone, tour-completion timestamp, last-login timestamp⁵, and Stripe Customer ID.
The following information is retained and is not deleted through the account-deletion process: email address⁴, mobile-app-alert sign-up data⁶, Clerk user ID, account-creation timestamp, account-deletion timestamp², account ban data (if applicable), parent/guardian consent records, promotional/marketing/survey-opportunity email consent and revocation records, Canadian-resident attestation timestamp and version, the requiresSubscription setting³, and records related to the acceptance of the Privacy Policy and Terms and Conditions. Users who do not complete checkout for a subscription plan will not have a Stripe subscription ID.
Some records may be retained to maintain consent and legal records, administer plan restrictions, prevent misuse of free-plan limits, respond to account-related requests, or establish, exercise, or defend legal claims.
Paid users can request account deletion after cancelling their subscription and after the current billing period has ended.
Under our current process, account deletion removes the following information from our server: display name, avatar ID, timezone, tour-completion timestamp, and last-login timestamp⁵.
The following information is retained and is not deleted through the account-deletion process: email address⁴, mobile-app-alert sign-up data⁶, account-creation timestamp, account-deletion timestamp², account ban data (if applicable), Privacy Policy version and acceptance timestamp, Terms and Conditions version and acceptance timestamp, parent/guardian consent records, promotional/marketing/survey-opportunity email consent and revocation records, Canadian-resident attestation timestamp and version, the record concerning confirmation of a Canadian-issued payment card, Clerk user ID, the requiresSubscription setting³, Stripe Customer ID, Stripe subscription ID, and Stripe customer record.
Some payment-related records may also be retained by Stripe under its own policies and legal obligations. We do not control the retention policies that Stripe applies independently.
Under our current process, accounts that have been inactive for two years are scheduled for deletion. The information that is retained and is deleted is subject to if there was ever a paid invoice on the account. Refer to Section 11(i & ii) for more information.
The retention of these records remains subject to applicable law.
To help prevent users from bypassing free-plan limits by deleting an account and creating another one with the same email address, we retain the email addresses of users covered by this section. If a returning user creates a new account using the same email address as an earlier account, the free-plan limits associated with the earlier account may continue to apply. If a limit has been reached, the user must subscribe to exceed that limit, but may continue using other app features whose limits have not been reached.
Creating a new account with the same email address does not transfer browser-stored data, XP, level, avatar, or selected settings from the earlier account.
Returning users who have not purchased a subscription cannot delete their account under this process. The retained information may include account-creation timestamp, last-login timestamp⁵, Privacy Policy version and acceptance timestamp, Terms and Conditions version and acceptance timestamp, parent/guardian consent records, promotional/marketing/survey-opportunity email consent and revocation records, Canadian-resident attestation timestamp and version, the record concerning confirmation of a Canadian-issued payment card, email address, mobile-app-alert sign-up data⁶, the requiresSubscription setting³, display name, and Stripe Customer ID if the user opens the Stripe Checkout page after clicking “Subscribe.”
Returning users who have purchased a subscription may request account deletion under the paid-user rules in Section 11(ii), after cancelling the subscription and waiting until the billing period ends.
We retain information for these purposes only to the extent permitted by applicable law. Where applicable law grants you a right to deletion or requires us to limit retention, we will assess your request under that law and explain any lawful basis for retaining information that cannot be deleted.
Depending on your location and the privacy laws that apply, you may have rights concerning personal information we hold about you. These rights may include:
Requesting access to personal information we hold about you.
Requesting correction of inaccurate or incomplete personal information.
Requesting deletion of personal information, subject to applicable exceptions.
Withdrawing consent to processing where processing is based on consent.
Objecting to, or requesting restriction of, certain processing where applicable.
Requesting a copy of certain information in a portable format where applicable.
Opting out of certain marketing communications or uses of personal information where applicable.
Filing a complaint with the relevant privacy regulator or supervisory authority.
These rights are not identical in every jurisdiction, and some may be subject to conditions or exceptions under applicable law.
You may request access to, or correction of, personal information about you that we hold on our server. This information includes the account and service-management information listed in Sections 1 and 5, such as your display name, Clerk user ID, avatar ID, timezone, tour-completion timestamp, account-creation timestamp, email address, mobile-app-alert sign-up data⁶, Privacy Policy and Terms and Conditions acceptance records, parent/guardian consent records, optional email consent and revocation records, Canadian-resident attestation, Stripe identifiers, account-deletion timestamp, and account-ban data.
Our current app design stores course details, grades, semester GPA, cGPA, Quests, XP counts and logs, current level, streaks, calendar items, and free-plan feature-limit status in your browser rather than on our server. We cannot access data stored only in your browser through our server. You can use the app’s data-export feature, Google Drive export/sync, and/or Google Calendar export/sync to keep a copy of this information.
You may withdraw consent to optional marketing, promotional, and survey-opportunity emails by using the unsubscribe method described in Section 6. You may also opt out of the mobile app alert by emailing [email protected].
To make a request about other personal information, exercise an applicable privacy right, or raise a concern about how we handle your information, email [email protected]. Please describe your request clearly enough for us to understand it. We may need to verify your identity or authority before acting on a request, as permitted or required by applicable law.
We will respond within the period required by applicable law. If we cannot fulfil a request, we will explain the reason to the extent required by law.
You may also contact the privacy regulator or supervisory authority responsible for your jurisdiction. In Canada, information about making a complaint to the Office of the Privacy Commissioner of Canada is available at [priv.gc.ca/en/report-a-concern](https://www.priv.gc.ca/en/report-a-concern/).
Account deletion does not currently remove every server-side record. Please review Sections 11 and 12 for details about information retained after deletion.
The Ultimate Learning Game operates from Toronto, Canada, and uses service providers that may process information in Canada, the United States, or other countries.
Depending on your location and the circumstances of the processing, your personal information may be subject to privacy laws in more than one jurisdiction. The laws of the country where information is processed may also apply to certain activities.
Where required by applicable law, we will provide additional information about our processing activities, the legal basis for processing, international data transfers, applicable safeguards, and your rights. Where consent is the required basis for a particular activity, we will seek consent in the manner required by law. Where another lawful basis applies, we will rely on that basis only where permitted.
Nothing in this Privacy Policy is intended to exclude, restrict, or waive a privacy right that cannot lawfully be excluded, restricted, or waived.
Our current service is intended for Canadian residents. The presence of this international section does not mean that we actively offer the service in every country or that all features are available everywhere.
We rely on our own systems and third-party service providers to help protect information against unauthorized access, loss, misuse, alteration, and disclosure. The safeguards available depend on the system or provider handling the information.
We limit the personal information stored on our server according to our current app design, as described in this Privacy Policy. However, no website, app, storage method, or transmission over the internet can be guaranteed to be completely secure.
You should keep your account credentials confidential and maintain backups of app data stored in your browser. If you believe your account or personal information has been compromised, contact us at [email protected].
If a security incident involving personal information occurs, we will take steps required by applicable law, which may include investigating the incident, taking corrective measures, keeping records, and notifying affected individuals or regulators where required.
Our Privacy Policy may be updated from time to time to reflect changes to our service, technology, legal obligations, or information-handling practices.
We will make reasonable efforts to notify users of changes. Where a change requires renewed consent, we will request that consent before implementing the change. When acceptance of an updated Privacy Policy is required, you will be asked to review and accept it the next time you sign in. If you do not accept the updated policy where acceptance is required, you may not be able to sign in to the app.
We will update the effective date at the end of this page when we make a new version effective. The version applicable to your account may also be recorded on our server.
You can review the latest version of our Privacy Policy before signing in by clicking “Privacy Policy” at the bottom-right corner of our homepage. Alternatively, you can access it at theultimatelearninggame.ca/privacy.
This Privacy Policy explains how The Ultimate Learning Game handles your personal information. By creating an account, you acknowledge that you have been provided with access to this Privacy Policy. Where required by applicable law, we will obtain your consent to the collection, use, and disclosure of your personal information as described in this policy.
Acceptance of this Privacy Policy is a condition of creating and using an account. Consent to survey invitations, promotional emails, and marketing emails is optional and is not a condition of creating an account.
If you have opted in to survey invitations, promotional emails, or marketing emails, you can withdraw your consent at any time by using the “Unsubscribe” link provided in the email, following the instructions in that email, or using the relevant settings within the app, where available.
You may withdraw consent to other collection, use, or disclosure of your personal information by contacting us at [email protected]. Depending on the circumstances and applicable legal requirements, withdrawing consent may affect your ability to use certain features or the service. We will explain any applicable consequences and any information we are required or otherwise permitted by law to retain.
If you have any questions or concerns regarding this Privacy Policy or how we handle your personal information, please contact us at:
The Ultimate Learning Game
Email: [email protected]
Location: Toronto, Ontario, Canada
Before the effective date of this Privacy Policy, May 28, 2026, there were no users other than The Ultimate Learning Game shareholders and members. Sensitive app data from external users had not been shared with the team.
The last-updated/effective timestamp for app data is set to the account-deletion timestamp when an account is deleted.
requiresSubscription is a Boolean stored on our server for each user to track subscription status and help prevent users from bypassing subscription or free-plan limits. For accounts created before July 13, 2026, at 3:00 p.m. ET, it was used for the expired free-trial or subscription checks. For accounts created after that time, it is used to help enforce free-plan limits.
Email addresses are stored by Clerk and can be accessed by our app. When an account is deleted, our app copies the email address from Clerk to our server before the Clerk account is deleted. We also send the email address to Resend to send an account-deletion confirmation. The retained email address is used as described in Sections 11 and 12.
Clerk records the last-login timestamp. This information is accessible to The Ultimate Learning Game team. Refer to the account-deletion process as described in Section 11.
“Mobile app alert sign-up data” includes the email address provided to receive an alert when the mobile app becomes available, the sign-up timestamp, and the associated Privacy Policy, Terms and Conditions, and parent/guardian consent timestamp. You may opt out of the alert by emailing [email protected]. Opting out of the alert does not currently delete the associated sign-up data. If you did not sign up for this alert, this note does not apply to you.
Looking for the previous version? Read the previous Privacy Policy effective October 16, 2026.