Privacy Policy
wonk.us · Effective date: October 14, 2026
1. Who we are
Wonk is a personalized learning platform operated by Upcocreate LLC ('Wonk', 'we', 'us', or 'our'). Our website is wonk.us and our app is app.wonk.us. If you have any questions about this Privacy Policy, contact us at hello@wonk.us.
2. What information we collect
2.1 Information you give us directly
- Your email address when you sign in, and your name, nickname or profile photo if you add them to your profile. We also keep the email addresses of people we have invited, so we can recognize an invited person when they sign in.
- Location information (state, country, and area type such as rural, suburban or metro), only if you give it to us in a research form or onboarding question. You provide it voluntarily.
- Demographic information (age range, education level, household income bracket, industry of work), only if you give it to us in a research form or survey. You provide it voluntarily.
- Learning preferences: topics you're interested in, how you like to learn, your goals, and how much time you have
- Content you create: course topics you ask us to build, free-text responses, typed answers to questions, and anything else you submit through the platform
2.2 Information we collect automatically
- Feed and question interactions: which questions you answered, whether you answered correctly, and the questions you liked, saved, skipped or flagged
- Usage data: pages visited, features used, session duration, and general navigation patterns
- Device information: browser type, operating system, and screen size — used to optimize your experience
- IP address: used for security and to keep the service running
- Learning activity: the questions you answer, whether you got them right, how many tries it took, hints you use, your lesson and mission progress, and the grades and skill scores we calculate from them
- Beans: the in-app points you earn and spend, and a record of each change
- Learning time: how long you actively spend learning in the app
- Feedback: flags, comments, likes and ratings you give to questions and courses
- Sign-in data: the one-time codes and links we email you, and the session that keeps you signed in
- Cookies: in the app we use only the essential cookies that keep you signed in. Our website may use cookies from services built into it, such as HubSpot forms.
2.3 Information from research participants (pre-launch)
If you participated in our user research program, we collected additional information through our research forms including your responses to questions about learning habits, platform usage, and feature preferences. This information is used solely for product development and is not used for marketing.
3. How we use your information
We use the information we collect to:
- Create and manage your account, including emailing you sign-in codes and links
- Personalize your learning feed and course recommendations based on your topics, preferences, and behavior
- Generate and adjust the courses, questions and explanations you see
- Mark your answers, work out your grades, beans and skill scores, and schedule what to review again
- Improve the platform — understanding what works and what doesn't
- Send you product updates, early access notifications, and service communications (you can opt out at any time)
- Respond to your support requests and questions
- Conduct user research and product development (research participants only, with your consent)
- Ensure platform security and prevent fraud or abuse
- Comply with legal obligations
We do not use your information to serve advertising. We do not sell your data to third parties. We do not use your data to train third-party AI models without your explicit consent.
4. How we share your information
We share your information only in the following limited circumstances:
4.1 Service providers
We work with trusted third-party service providers who help us operate the platform. These providers are contractually required to protect your data and use it only to provide services to us:
- Supabase — database and authentication (US East region)
- Vercel — hosting and content delivery
- Namecheap (Private Email) — sends the sign-in emails and receives messages sent to hello@wonk.us
- GitHub (GitHub Pages) — hosts the wonk.us website
- Stripe — payment processing (when paid features are available). Stripe is PCI-DSS compliant. We never store your full payment card details.
- HubSpot — email marketing and communications
- GoHighLevel — CRM and research form management (pre-launch research phase)
- Anthropic — AI model provider. We send it course topics and learning goals so it can generate questions and explanations, and, when a question needs your written answer to be graded, that answer. We do not send your name or email address.
4.2 Legal requirements
We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the safety of any person or to prevent fraud or abuse of Wonk or its users.
4.3 Business transfers
If Wonk is acquired, merges with another company, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our platform before your information becomes subject to a different privacy policy.
4.4 With your consent
We may share your information with third parties when you have explicitly given us permission to do so.
5. Data retention
We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:
- Account information: retained until you delete your account or request deletion
- Learning preferences and history: retained to maintain your personalized experience, deleted when your account is deleted
- Learning activity (answers, grades, beans, skill scores, learning time): kept while your account is active so your progress and scores stay correct; deleted when your account is deleted
- Feed and question interactions (likes, saves, flags): kept while your account is active, then deleted or anonymized when your account is deleted
- Research form responses: kept only as long as we need them for product development, then deleted or anonymized
- Payment records: retained for 7 years as required by financial regulations (when applicable)
- Invite list: if we invited you but you never signed in, we keep your email on the invite list until you ask us to remove it
When you ask us to delete your account, we delete or anonymize your personal information within 30 days, except where we are required to keep it for legal or regulatory reasons. Records of in-app activity, such as beans, may be kept without your name or email address. Courses that Wonk generated from a subject you chose are not personal information. They may stay in Wonk after you leave, but we remove the link to your account so they can't be traced back to you.
Your information is stored on servers in the United States. If you use Wonk from outside the United States, your information is transferred to and processed in the United States.
6. Your rights and choices
You have the following rights regarding your personal information:
Access and portability
You can request a copy of all personal information we hold about you. We will provide it in a machine-readable format within 30 days.
Correction
You can update your name or nickname in your profile. To correct anything else, including research form data, email us at hello@wonk.us.
Deletion
To delete your account, email us at hello@wonk.us from the address you use to sign in. We will delete or anonymize your personal information within 30 days.
Opt-out of marketing communications
Every marketing email we send includes an unsubscribe link. You can also email hello@wonk.us to opt out. Note: we may still send you transactional emails (account confirmations, security alerts) even if you opt out of marketing.
California residents (CCPA)
California residents have additional rights under the California Consumer Privacy Act, including the right to know what categories of personal information we collect and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact hello@wonk.us.
European residents (GDPR)
If you are located in the European Economic Area, UK, or Switzerland, you have rights under the General Data Protection Regulation including the right to access, rectify, erase, restrict processing of, and port your personal data, as well as the right to object to processing. Our legal basis for processing your data is: contract performance (to provide the service you signed up for), legitimate interests (improving the platform, security), and consent (marketing communications, research participation). To exercise your GDPR rights, contact hello@wonk.us. You also have the right to lodge a complaint with your local data protection authority.
7. Data security
We take reasonable technical and organizational measures to protect your information against unauthorized access, loss, or alteration. These include:
- Encryption in transit (TLS/HTTPS) and at rest
- Row-level security on our database — each user can only access their own data
- Access controls limiting which team members can access personal data
- Regular security reviews
No method of data transmission over the internet is 100% secure. While we work hard to protect your information, we cannot guarantee absolute security. If we become aware of a data breach that affects your rights and freedoms, we will notify you within 72 hours as required by applicable law.
8. Children's privacy
Wonk is for people 18 and older, and we do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from someone under 18, we will delete that information promptly. If you believe we have, please contact us at hello@wonk.us.
9. Third-party links
Our platform may contain links to third-party websites or services. This Privacy Policy applies only to Wonk. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or by displaying a prominent notice on our platform at least 14 days before the changes take effect. The date at the top of this policy reflects when it was last updated. Your continued use of Wonk after changes take effect constitutes your acceptance of the updated policy.
11. Contact us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Email: hello@wonk.us
Website: wonk.us
Mailing address: Upcocreate LLC, 1550 Wilson Blvd, Suite 700, PMB 513, Arlington, VA 22209