Last updated: February 27, 2026
BacBacGo ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, applications, and services (collectively, the "Service"). By using the Service, you consent to the practices described in this policy. We encourage you to read this policy carefully.
We collect the following categories of information: (a) Account Information: when you register, we collect your name, email address, and password. If you sign up via a third-party provider (e.g., Google), we receive your name and email from that provider. (b) Payment Information: when you subscribe to a Pro Plan, our payment processor (Stripe) collects your payment card details. We do not store your full card number on our servers—only a tokenized reference and billing metadata (plan type, subscription status, billing dates). (c) Usage Data: we automatically collect information about how you interact with the Service, including pages visited, lessons completed, test scores, time spent on tasks, streak data, and feature usage. (d) Device and Technical Data: we collect your IP address, browser type, operating system, device identifiers, and referring URL. (e) Communications: if you contact us via the contact form or email, we retain the content of your messages.
We use your information for the following purposes: (a) to provide, operate, and maintain the Service; (b) to process transactions and manage your subscription; (c) to personalize your learning experience and track your progress; (d) to grade your tests and provide AI-powered feedback; (e) to send you transactional emails (welcome emails, test results, billing notifications); (f) to respond to your inquiries and support requests; (g) to detect, prevent, and address fraud, abuse, and security issues (including referral fraud detection); (h) to analyze usage trends and improve the Service; (i) to comply with legal obligations. We do not sell your personal information to third parties.
We use essential cookies to authenticate your sessions and remember your preferences (e.g., language choice, dark/light mode). We use Cloudflare Turnstile for bot protection, which may set cookies to verify legitimate traffic. We use Vercel Analytics to collect anonymized, aggregated usage data—this does not use cookies and does not track individual users across websites. You can control cookie settings through your browser preferences. Disabling essential cookies may impair your ability to use certain features of the Service.
We share data with the following third-party services, strictly as necessary to operate the Service: (a) Supabase — authentication and database hosting (stores your account data); (b) Stripe — payment processing (processes your card details securely under PCI DSS compliance); (c) Resend — transactional email delivery (receives your email address to send notifications); (d) Google Gemini API — AI-powered test grading (receives anonymized question/answer pairs, not your personal identity); (e) Cloudflare — bot protection and security (processes your IP address); (f) Vercel — hosting and analytics (processes anonymized usage data). Each third-party service operates under its own privacy policy. We recommend reviewing their respective policies.
We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., billing records may be retained for up to 5 years for tax and accounting purposes). Anonymized and aggregated data that cannot identify you may be retained indefinitely for analytical and service improvement purposes.
Depending on your jurisdiction, you may have the following rights regarding your personal data: (a) Right of Access: you can request a copy of the personal data we hold about you; (b) Right to Rectification: you can update your account information at any time through the Settings page; (c) Right to Deletion: you can delete your account and all associated personal data through the Settings page. This action is irreversible; (d) Right to Data Portability: you can request your data in a structured, commonly used format; (e) Right to Object: you can object to our processing of your data for certain purposes. To exercise any of these rights, please contact us at support@bacbacgo.com. We will respond to your request within 30 days.
The Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at support@bacbacgo.com. If we discover that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
Your information may be processed and stored in countries other than Morocco, including countries where our third-party service providers operate (such as the United States and the European Union). These countries may have different data protection standards. By using the Service, you consent to the transfer of your information to these countries. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
We implement industry-standard security measures to protect your personal information, including: encryption of data in transit (TLS/HTTPS), secure password hashing, role-based access controls, rate limiting on sensitive API endpoints, input sanitization to prevent injection attacks, and regular security reviews. However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on the Service at least 14 days before the changes take effect. The "Last updated" date at the top of this page indicates when this policy was last revised. Your continued use of the Service after any changes constitutes your acceptance of the updated policy. For questions or concerns about this Privacy Policy, please contact us at support@bacbacgo.com.