Privacy Policy

Last updated: 2026-10-05 UTC

What we collect

• Account data - your email address (for sign-in links)
• Work data - the answers, prompts, code, and documents you submit for grading
• Session data - timing and edit counts during assessments, used as process evidence
• Employer data - names, emails, and screening activity

Creator projects and sharing

We store your drafts, revision notes, saved AI suggestions, and essential project actions. Drafts are private to your account or the signed session in your browser. A project URL alone does not grant private access. When you publish, anyone with the public snapshot link can view its title, public creator name, audience, takeaway, hook, script, and scenes. Your email, private revision note and AI feedback are excluded. Remixing requires your explicit permission. Shared snapshots remain unchanged when you edit the private draft.

You can withdraw a snapshot or delete a project from its workspace. Deletion removes the project and its snapshots from the live service. Existing copies, authorized remixes and backups are not removed by that action.

Private teams and portfolios

Joining a cohort shares your name and sign-in email with its organizer. Project squads are separate: only explicitly invited accounts that accept can view a shared version. Organizers do not automatically receive access to learner-owned projects. Learners invite peers using an email they already know; we do not give learners the cohort contact list.

Squad snapshots include your title, audience, takeaway, script, hook and scenes; private revision notes are excluded. Active members can see names and peer feedback. Comparing versions requires access to both. A private portfolio item can be reviewed by its active squad members; peer acceptance is not an expert certification. Owners can keep their own portfolio evidence after a squad closes. Leaving or removal ends peer access; authors can still withdraw their notes from Teams or their portfolio review history.

Public portfolio work samples require a separate preview and consent. They contain only your chosen public creator name, artifact title and storyboard, version, AI-use disclosure and publication date. Account email, squad membership, private notes, reviews, disputes and outcome evidence are excluded. Anyone with the public link can view or download it. Withdrawing the sample or portfolio entry, deleting its source project, or moderation removes access on EKO; copies already saved elsewhere may remain. Reports store a reason category and an opaque deduplication identifier, with private operator decisions.

Learning journeys and outcomes

Learning journeys store your subject, generated path and lessons, answers, hints used, feedback, provisional practice levels and review dates. With your consent, the subject, relevant learning history and answers go to the configured AI provider. These records are private to your account or signed browser session. Public learning snapshots contain only the display name, title and takeaway you explicitly submit for publication; they do not include your lessons, answers or account email. You can withdraw them from the workspace.

Outcome evidence and review records are private to you and authorized operators. Verified paid-work records appear publicly only with your explicit permission and you can withdraw that permission. We record challenge/source attribution and essential completion actions to understand usefulness; these counts are not proof of unique people or earnings. Content reports are accessible to operators for moderation.

Existing credential records

Credential payloads omit account email, but historical records can contain holder labels and assessment information. Treat a public verification link as public information. You share a credential by sharing its link.

How we use data

To provide learning practice, save work, enable sharing and remixes, prevent abuse, and understand whether learners finish and use their projects. New skill certification, employer services, and payment settlement are paused during the pilot. We do not sell your data.

AI processing

The optional creator AI coach sends saved audience, takeaway, hook, script, and scenes to the provider named on the request form, only after you confirm. It excludes account email and the private revision note. Provider handling depends on the configured service and its agreement; do not submit sensitive information or material you lack permission to share. With your confirmation, interviews send your topic and answers to the configured AI provider to prepare questions and feedback. Method practice sends your prompt, an output sample, and notes for hidden-case checks and coaching. Account email is excluded. Saved interviews created without this consent continue as local reflection. AI feedback is fallible and does not certify skill or exam readiness.

Blockchain anchoring

New blockchain writes are paused. Existing public anchors cannot be removed from the blockchain by deleting data in EKO. A hash is not encryption and may be associated with a known document or public record.

Cookies

We use one session cookie for sign-in and one preference for theme. No tracking cookies.

Third parties

Hosting uses Railway. Sign-in email uses the configured SMTP provider; optional AI coaching uses the provider shown before your request.

Retention and deletion

We keep account and work data while your account is active. To delete your data, email hello@ekoai.space and we will remove it, subject to necessary security records and backup retention. Public blockchain records and copies made by other people cannot be recalled by EKO.

Contact

Privacy questions: hello@ekoai.space.