Privacy Policy

Last updated: July 7, 2026

The Open Practice Project Spaces (the "Platform") is operated by The Open Practice Academy. This policy explains what we collect, why, and what you can do about it. If anything is unclear, email info@theopenpracticeacademy.com.

1. Information we collect

Account information. When you sign up we collect your email address and a password (hashed, never stored in the clear). If you sign in with Google, we receive your email address and basic profile info (name, avatar) from Google.

Project content. Anything you enter into your projects — overview notes, resources, tags, licensing decisions, evaluation notes, share settings, collaborator invitations, and so on. This is stored so you can come back to it.

Feedback. Messages you send through the in-app Feedback form, along with the email tied to your account so we can reply.

Technical logs. Standard server and error logs (IP address, browser type, request paths, timestamps) generated by our hosting provider. Used to keep the Platform running and debug problems.

We do not use third-party advertising trackers or analytics profiling on the Platform.

2. How we use your information

To create and secure your account;
To save, display, and back up your project content;
To share your project with collaborators you invite and to serve read-only links you generate;
To show your project in the Project Garden only if you opt in per project;
To send transactional emails (sign-up confirmation, password reset, collaborator invitations, feedback replies);
To respond to feedback and support requests;
To improve the Platform, fix bugs, and prevent abuse.

3. Sharing and visibility

Your projects are private by default. Only you, people you invite, and the platform administrator (for support and abuse prevention) can see them.

Public share links exist only when you generate them. Anyone with the link can view a read-only version. You can revoke a link at any time.

Project Garden. If you toggle a project into the Garden, signed-in users of the Platform can view the parts you choose to expose. You control what appears and can turn it off at any time.

4. Service providers

We use Lovable and its managed cloud infrastructure for hosting, database, authentication, and email delivery. Your data is stored on that infrastructure. If you sign in with Google, Google receives the sign-in request; we receive your email and basic profile in return.

These providers process data on our behalf under their own security and privacy commitments. We do not sell your personal information, and we do not share it with advertisers.

5. Data location and retention

Data is stored on our provider's cloud infrastructure and may be processed in the United States or other regions where that provider operates. Your account and project data are retained while your account is active. If you delete your account, we delete your projects and personal information from active systems within a reasonable period, subject to backup retention windows and legal obligations.

6. Security

We use row-level security on the database so users can only read and write their own projects (and projects explicitly shared with them). Passwords are hashed. Traffic is served over HTTPS. No system is perfect — please tell us right away if you spot a security issue.

7. Your rights

Depending on where you live (for example, under GDPR, UK GDPR, or CCPA), you may have rights to access, correct, export, or delete your personal information, and to object to certain processing. To exercise any of these, email us at info@theopenpracticeacademy.com.

8. Cookies and local storage

We use a small number of first-party cookies and browser storage entries strictly to keep you signed in and remember interface preferences. We do not use advertising cookies or cross-site tracking.

9. Children's privacy

The Platform is not directed to children under 13 (or under 16 in parts of the EU). If you believe a child has created an account, contact us and we'll remove it.

10. Changes to this policy

We'll update this page as the Platform evolves. Material changes will be announced in-app or by email.

11. Contact

The Open Practice Academy — info@theopenpracticeacademy.com.