Privacy

Polymath Daily is a free educational newsletter and reading app. This page explains what we collect, why, who we share it with, and how to get rid of it. It's written in plain English on purpose.

Email address — when you subscribe to the daily newsletter. We use it to send you the lesson and nothing else.

Account profile — if you sign in with email, Google, or Apple, we receive your email address and (for OAuth providers) your display name. We don't request anything beyond that.

Reading progress — when you read a lesson or finish a quiz, we store which lesson and your quiz score. This powers streaks, your "Day N" counter, and unit completion badges. If you're not signed in, this lives only on your device.

Subscription preferences — your timezone and preferred send hour, plus whether you've enabled email and/or browser push notifications. You set these; we use them to time the daily send.

Push tokens — if you opt in to browser push, your browser hands us a token that lets us deliver notifications. We store it; we delete it the moment you opt out.

We do not collect: location data, device identifiers beyond what your browser sends with normal requests, contact lists, payment info (we don't take payments), or anything else not in the list above.

Strictly to operate the product: deliver the daily lesson, render your progress on the website, send notifications you asked for, and keep the app working. That's the entire list.

We do not sell your data. We do not share it with advertisers. We do not use it to train AI models. We don't run third-party analytics, ad retargeting pixels, or behavioral profiling tools.

We use a small set of service providers. Each gets only the data it needs to do its job:

Data is stored on Supabase's US infrastructure. If you're in the EU or UK, your data is transferred to and processed in the US under standard contractual clauses provided by our processors.

As long as your account is active, plus a short window after deletion to remove derived backups. Email logs are kept ~90 days for delivery troubleshooting, then purged.

We use browser localStorage to keep you signed in (a Supabase refresh token) and to remember your reading progress when you're not signed in. We don't set tracking cookies, ad cookies, or third-party cookies of any kind.

Polymath Daily isn't directed at children under 13, and we don't knowingly collect data from anyone under 13. If you believe a child has signed up, email sam@polymath-daily.com and we'll remove the account.

If we materially change how we handle data, we'll update this page and email subscribers a heads-up before the change takes effect. Older versions of this page are kept in our git history; ask if you want one.

Questions, requests, or complaints: sam@polymath-daily.com.