Privacy Policy

Effective Date: April 29, 2026

01 Introduction and Scope

Welcome to Pedestal. We are committed to protecting your personal information and your right to privacy. This Privacy Policy ("Policy") governs the data processing practices of the Pedestal mobile application and its associated services (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read and understood the terms of this Policy. This document serves as a legal notice to inform you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

02 Information Collection and Processing

To provide a seamless gamified financial education experience, we collect several types of information for various purposes:

  • Account Information: When you register for a Pedestal account, we collect personally identifiable information (PII) including, but not limited to, your email address and display name.
  • Engagement and Usage Data: We automatically collect information on how the Service is accessed and used. This includes technical data such as your device's Internet Protocol (IP) address, browser type, device identifiers, and timestamps of your activity.
  • Learning Analytics: To facilitate our gamification engine, we track internal metrics including Learning Progress, Experience Points (XP), and Streak Milestones.

03 Purpose of Processing (How We Use Data)

Pedestal processes your data under the legal basis of "Contractual Necessity" and "Legitimate Interest." Specifically, your data is used to:

  • Maintain and provide the core functionalities of the Pedestal experience.
  • Personalize educational content and track academic milestones.
  • Monitor the usage of the Service to detect, prevent, and address technical issues or fraudulent activity.
  • Communicate administrative updates or security alerts.

04 Data Security and Architecture

We prioritize the integrity and confidentiality of your data. Pedestal employs a Zero-Trust Security Model facilitated through our enterprise-grade backend partners, Supabase and Google Firebase.

  • Encryption: All data in transit is protected via Transport Layer Security (TLS), and data at rest is secured using industry-standard AES-256 encryption.
  • Infrastructure: By leveraging decentralized authentication and authorized access protocols, we ensure that your personal information is shielded from unauthorized access or disclosure.

05 Data Sharing and Third-Party Disclosure

We do not sell, trade, or otherwise transfer your PII to outside parties for marketing purposes. Data sharing is strictly limited to:

  • Service Providers: We may employ third-party companies (e.g., Firebase, Supabase) to facilitate our Service or perform Service-related tasks under strict confidentiality agreements.
  • Legal Compliance: We may disclose your information where required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).

06 User Rights and Data Retention

Under applicable data protection laws (including GDPR and relevant local frameworks), you possess the following rights:

  • Right of Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You have the right to correct any incomplete or inaccurate information.
  • Right to Erasure: You may request the permanent deletion of your account and associated data at any time. To exercise this right, please visit our Account Deletion Page.

We retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy and to comply with our legal obligations.

07 Updates to This Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. You are advised to review this Privacy Policy periodically for any changes.

08 Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact our legal compliance team at:

pedestalfinance@gmail.com