Privacy policy

Last updated 30 October 2026

CodeVyu teaches programming and runs coding tests. This page explains what we collect, why, who sees it, and how you can get it back or have it deleted. We wrote it to be read.

What we collect

Your account: your name, your email address (children have a username instead), a hash of your password or PIN (never the password itself), your role (learner, teacher, parent) and your chosen track.
Your learning: the code you submit and the results, which lessons you finished, hints you opened, drafts, and the days you were active (for streaks). Your browser sends its timezone so we can work out what "today" means for you. We don't store it.
Classes and tests: which classes you joined, your test attempts, scores, and teacher feedback. During a test we record integrity events your teacher turned on: leaving fullscreen, switching tabs or windows, and pasting or copying text. We store the type, the time and the length of pasted text, not its content.
Vyubot conversations: when you ask Vyubot for help we send the problem, your current code, your latest results and your question to our AI provider so it can reply. We keep the conversation so you and, for children, a parent can read it, and so we can fix mistakes in Vyubot.
Technical data: your IP address is used briefly to limit abuse, and our server logs record the page requested, the response and how long it took. We don't build advertising profiles.

Cookies and local storage

We use cookies only to keep you signed in. We also store your preferences (theme, where you placed Vyubot, your block workspace) in your browser's local storage. We don't use advertising or analytics cookies and we don't load third-party trackers.

Who can see your data

Your teachers can see the work you do in their classes, including your profile and progress, test answers, scores and integrity events.
A child's parent can see the child's progress and every Vyubot conversation, and can change their PIN or delete their account.
Service providers that run CodeVyu for us: our hosting provider, our email provider (for verification, password reset and the weekly parent summary), and our AI provider for Vyubot replies and optional problem drafting. They process data to provide the service.
We don't sell your data and we don't share it for advertising.

Children

Children under 13 can't create their own account. A parent creates it, so no email address is collected from the child. Parents give consent by creating the account and can review, correct or delete everything about their child at any time from the Family page. Vyubot is told when it is talking to a child and keeps its replies short and about coding.

How long we keep it

We keep your data while your account exists. When you delete your account, your submissions, progress, conversations and notifications are deleted immediately. Encrypted backups roll off on a short schedule, so deleted data can remain in a backup for up to 30 days before it disappears.

Your choices

See and download your data: Settings → Your data → Download.
Delete your account: Settings → Your data → Delete account. Parents can delete a child's account from the Family page.
Correct your details: Settings → Profile.
Turn off the weekly parent email from the Family page.

If you live somewhere with data protection rights (for example India's DPDP Act or the GDPR), these are the tools for exercising them. If something isn't covered here, ask us.

Security

Passwords are stored with Argon2 hashes. Your sessions use short-lived tokens in secure cookies. Code you submit runs in an isolated sandbox with no network access. Access to administration tools is limited and logged.

Changes and contact

If we change this policy in a way that matters, we'll tell signed-in users before it takes effect.