Privacy Policy

• Account information — your email address and a securely hashed password. We never store your password in readable form.
• Profile information — your display name, if you choose to set one (optional).
• Payment information — handled entirely by Stripe, our payment processor. We do not store your card number or full payment details on our servers.
• Subscription status — whether you have an active membership, its type, and when it renews.
• Usage data — which videos you have watched and your viewing progress within each video, so you can resume where you left off.

We use your data to:

• Provide and maintain the subscription service
• Process payments and manage your membership through Stripe
• Remember your watch progress so you can continue from where you left off
• Send transactional emails (e.g., payment confirmation, account notices)
• Improve the platform over time

We do not use your data for advertising purposes, and we do not sell your information to third parties.

Your account data is stored on Supabase (supabase.com), a secure cloud database platform. We use row-level security to ensure each user can only access their own data.

Payment data is stored and processed by Stripe (stripe.com), which operates under PCI DSS compliance certification — the highest standard for card data security.

Passwords are cryptographically hashed before storage and are never accessible in readable form, even to our team.

We share your data only to the extent necessary to operate the service:

• Supabase — cloud infrastructure for account, subscription, and viewing progress data
• Stripe — payment processing and subscription billing

We do not sell, rent, or trade your personal information. We do not share your data with advertisers, analytics companies, or any other third parties beyond those listed above.

Thailand's Personal Data Protection Act B.E. 2562 (PDPA) gives you the following rights regarding your personal data:

• Right of access — you may request a copy of the personal data we hold about you.
• Right of correction — you may request that inaccurate or incomplete data be corrected.
• Right of erasure — you may request that your personal data be deleted. To delete your account and all associated data, contact us and we will process your request within 30 days.
• Right to withdraw consent — you may withdraw your consent to data processing at any time. Please note that withdrawal may prevent us from continuing to provide the service.
• Right to data portability — you may request a copy of your data in a commonly used format.
• Right to object — you may object to the processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us at the email on our website.

We use session cookies to keep you signed in to your account. These are strictly necessary for the service to function.

We do not use advertising cookies, tracking cookies, or third-party analytics services that track you across websites. You can control cookies through your browser settings.

Our service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us immediately and we will delete their account and data promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice on the platform. The “Last updated” date at the top of this page shows when the Policy was last revised.

Continued use of the platform after changes take effect constitutes your acceptance of the updated Policy.

For privacy questions, data access requests, or to exercise your rights under the PDPA, please contact us at the email address on our website. We aim to respond to all privacy enquiries within 3 business days.