1. Who we are
Step Through, operated from India, is responsible for your personal data (the data controller under the GDPR and the data fiduciary under India’s Digital Personal Data Protection Act, 2023). Contact us about privacy, including grievances, at support@stepthroughcode.com.
2. Data we collect and why
Free lessons can be taken without giving us any personal data.
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Account: email; if you use Google or GitHub, also your name, profile picture and provider ID; GitHub may also supply your username | Sign-in and your account | Contract |
| Learning progress | Save and sync your progress | Contract |
| Purchases: course, date, payment reference | Give you access to what you bought; tax records | Contract; legal obligation |
| Usage analytics and error reports, linked to a random ID | Improve lessons and fix errors | Legitimate interests |
| Support emails | Answer your request | Legitimate interests |
Under Indian law, we process your data with the consent you give when you create an account. You can withdraw it at any time by deleting your account. We never see your card or UPI details.
5. How long we keep it
- Account and progress: until you delete your account, then removed from backups within 30 days.
- Analytics and error reports: up to 12 months.
- Payment records: as long as tax law requires.
6. Your rights
You can ask us to access, correct, delete or export your data, object to or restrict its use, withdraw consent, or nominate someone to act for you. Email support@stepthroughcode.com from the address on your account.
You can also complain to the Data Protection Board of India or, in the EU or UK, your local data protection authority.
7. Children
Accounts are for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, contact us and we will delete it.