Privacy Policy

Who we are

Heddle is operational infrastructure for credentialing exam prep, built and operated by Jake Lawrence. If you have questions about this policy or how your data is handled, email hello@heddle.app.

What we collect

• Account information — your email address, name, and the identifier returned by your sign-in provider (Google, GitHub, LinkedIn, or magic link), so we can authenticate you and attribute the content you create.
• Content you create inside Heddle — blueprints, item banks, weekly curricula, student-facing forms, and similar materials you author or upload while using the product.
• Request metadata — IP address, user-agent string, and timestamps captured by our hosting and database providers for security, debugging, and abuse prevention.

What we don't collect

Heddle does not use third-party analytics, advertising trackers, or cross-site tracking. We do not set cookies for marketing or profiling purposes; the only cookies we set are the ones strictly required to keep you signed in. Because of this, we do not show a cookie banner.

How we use your data

• To operate the service and let you sign in to your account.
• To send transactional email — magic-link sign-in messages, account notices, and direct replies to support requests.
• To investigate bugs, abuse, and security incidents.
• To comply with applicable law.

Sub-processors

Heddle runs on a small set of vendors who process data on our behalf:

• Supabase — managed PostgreSQL database and authentication adapter (where account records and content live).
• Resend — transactional email delivery (magic-link sign-in and account notices).
• Vercel — application hosting and edge runtime.

Before any credentialing program is invited to put real candidate data into Heddle, sub-processor disclosures and a Data Processing Addendum will be formalized with that program.

Data retention and deletion

We retain account and content data for as long as your account is active. If you want your account or specific content removed, email hello@heddle.app and we will action the request promptly, subject to any legal hold obligations.

Your rights

You can request access to, correction of, export of, or deletion of the personal data we hold about you by emailing hello@heddle.app. We honor these rights regardless of where you live; if you are in a jurisdiction with specific statutory rights (such as the EU, UK, or California), those rights apply in full.

Children

Heddle is not directed to children under 13 and we do not knowingly collect data from them. If you believe a child has signed up, please contact us and we will remove the account.

Changes to this policy

Material changes will be announced to active accounts and reflected in the "Last updated" date at the top of this page.

Contact

Questions, requests, or concerns: hello@heddle.app.