This Privacy Policy describes how Roger You
("we", "us", "our") collects, uses, and shares information when you use
Lemma — Quant Prep (the "App").
By using the App, you agree to the practices described here. If you do
not agree, do not use the App.
1. Information we collect
We collect the following categories of information:
Account information. When you sign in, we receive a
stable user identifier and (depending on the provider) your email
address and name from Apple, Google, or via email one-time code. If
you use the App without signing in, an anonymous user identifier is
generated locally and stored on our backend.
Usage data. Workouts you complete, problems you
attempt, answers you submit, time spent, XP, streaks, and per-category
performance metrics.
Device data. Operating system, device model, App
version, locale, and a push-notification token if you grant
notification permission.
Support content. Any messages you send via the
in-app "Report a bug · Send feedback" form.
Subscription state. If you purchase a subscription,
our payments processor (RevenueCat, operating on top of Apple and
Google in-app purchase systems) tells us whether your subscription
is active. We do not receive your payment card details.
2. How we use information
To authenticate you and keep you signed in.
To sync your progress across devices.
To compute leaderboards, achievements, and league standings.
To send push notifications you've opted in to (e.g. streak reminders).
To respond to bug reports and feedback.
To enforce subscription entitlements.
To detect and prevent abuse, fraud, and security incidents.
To improve the App by analysing aggregate, non-identifying usage patterns.
3. Who we share information with
We do not sell your personal information. We share information only
with third-party service providers that operate the App's
infrastructure on our behalf:
Supabase — database, authentication, and backend
hosting.
Apple and Google — identity
providers for Sign in with Apple and Sign in with Google.
RevenueCat — subscription management.
Apple Push Notification service /
Firebase Cloud Messaging — push notification
delivery.
We may also disclose information when required by law, to enforce our
Terms of Service, or to protect the rights, safety, or property of
users or the public.
4. Data retention
We retain your account and usage data while your account is active.
If you delete your account, we delete or anonymise associated data
within 30 days, except where retention is required for legal,
accounting, or fraud-prevention reasons.
5. Your rights
Depending on where you live, you may have rights to:
Access the personal information we hold about you.
The App is not directed to children under 13 (or the
equivalent minimum digital-consent age in your jurisdiction). We do
not knowingly collect personal information from children under that
age. If you believe a child has provided us with information, contact
us and we will delete it.
7. Security
We use industry-standard technical and organisational measures to
protect your information, including encryption in transit (TLS) and
encryption at rest. No system is fully secure; we cannot guarantee
absolute security.
8. International transfers
Your information may be processed in countries other than the one in
which you live. We rely on appropriate safeguards (such as Standard
Contractual Clauses) where required.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes
will be flagged in the App or by email. Your continued use of the App
after a change becomes effective constitutes acceptance.
10. Contact us
Roger You
Email: rogeruinquiries@gmail.com
Address: Available upon request via the contact email above.