Privacy
Privacy Policy
Zostava is a learning platform, not a data business. Here is exactly what we store, why, and the safeguards around it. Last updated 2026.
No data leaks
Learner records live in an access-controlled database with row-level security. Only the account owner can read their own progress, and public endpoints cannot enumerate other learners.
No selling, ever
We never sell, rent, or trade your personal information. There are no ad networks, no data brokers, and no third-party trackers following you around the internet.
Encrypted in transit and at rest
All traffic runs over HTTPS and stored data is encrypted at rest by our cloud provider. Passwords are hashed — never stored in plain text and never visible to us.
Sandboxed code execution
Code you run in a sprint executes in an isolated environment. It cannot reach other learners' sessions, and we do not use your code to train external models.
What we collect
Account basics (name, email), learning activity (sprints completed, XP, assessment results), and anything you voluntarily send us through the contact form. That's it.
Why we collect it
To save your progress, issue verifiable certificates, personalise AI mentor help, and reply when you contact us. We do not build advertising profiles.
AI mentors
Conversations with Coach Mia and ZostaBot-5000 are used to answer your question in the moment and to keep your learning context. They are not published, sold, or used to identify you.
Cookies
We use essential cookies and local storage to keep you signed in and remember your preferences. No advertising or cross-site tracking cookies.
Retention & your rights
You can ask us to export or delete your data at any time via the contact form, and we will remove your account records. Contact messages are kept only as long as needed to resolve your query.
Contact form data
Messages you submit are stored securely in our database so the Zostava team can respond. Nobody outside the team can read them, and they are never used for marketing.