Privacy Policy
Last updated: October 13, 2026
This Privacy Policy explains what information Skill Tree (operated by JEL Labs LLC, "we," "us," or "our") collects, how we use it, and the choices you have. It applies to your use of the Skill Tree web application and to using Skill Tree inside an AI assistant such as Claude (the "Service").
1. Information we collect
Information you provide
- Email address — used to create your account and send one-time sign-in codes.
- Your work in the Service — your progress through lessons, the skills you build and save, and the settings you choose, such as the names you give the people in your lessons.
- Your work profile — when you use Skill Tree inside an assistant such as Claude, the assistant can propose a short description of your work (for example your role, industry, the tools you use, and who you work with, by role). You confirm it before it is used, and it is stored on your account to make lessons more relevant to you.
Information collected automatically
- Activity records — when you finish a lesson, save a skill, export a skill, or hand a skill to Claude, we record the time and whether it happened on the website or inside an assistant. We use these to run the Service and, if you belong to an organization, to show its admins the counts described in section 3.
- Usage data — records of AI model calls associated with your account in older features, including token counts and computed cost, used to enforce usage limits.
- Basic technical data — standard request information (such as timestamps) handled by our hosting provider to operate and secure the Service.
Sign-in
- If you sign in with a Microsoft work or school account, Microsoft tells us your email address and an account identifier. We do not receive your Microsoft password.
Payment information
- Earlier purchases were processed by Stripe. We do not receive or store your full card number. For those purchases we store a Stripe customer identifier and your access status. We no longer sell anything.
We do not use third-party advertising trackers, and we do not sell your personal information.
2. How we use information
- To provide, operate, and secure the Service and your account.
- To show your progress to you, and to personalize lessons to your confirmed work profile.
- To enforce usage limits and prevent abuse and excessive cost.
- To send invitations, sign-in codes, and messages about your account or support requests.
- To comply with legal obligations.
3. Organizations
If an organization, such as your employer, invites you and you accept, the organization's owners and admins can see, for you:
- your email address, your role, your team label, and when you joined;
- which lessons you have finished, with counts and dates, and when you were last active;
- which capabilities your work shows you have practiced or used, and which exercise types and vocabulary words you are still working through;
- how many skills you have saved, how many are your own custom skills, and how many times you handed a skill to Claude; and
- whether you use the website, Claude, or both.
They cannot see your answers, the prompts or text of your skills, your skill names, your work profile, or your conversations with an assistant. They see only what you do after you join. You can leave the organization at any time from your account, and its admins will then no longer see your activity. The organization controls who it invites and who may view its dashboard. Finishing a lesson is not the same as mastering it, and the dashboard does not rank people.
4. AI processing
Lessons and exercises are graded by our own rules, not by an AI model. Some older features send the content you submit to Anthropic for processing; Anthropic processes this data under its own terms and does not use data submitted through its business API to train its models. When you use Skill Tree inside an AI assistant, the assistant is run by its provider under its own terms. Skill Tree receives the actions you take in the app (such as your answers and the skills you save) and what the assistant files for you through the connection, such as your work profile. Do not submit real confidential, personal, or sensitive information into the Service.
5. Service providers (subprocessors)
We share information with the following providers strictly to operate the Service:
| Provider | Purpose | Data involved |
|---|---|---|
| Supabase | Authentication & database | Email, account, progress, saved skills, activity records |
| Render | Application hosting | Technical request data |
| Resend | Sending invitation emails | Email address of the person invited |
| Google (Gmail SMTP) | Sending sign-in emails | Email address |
| Microsoft (Entra ID) | Optional work or school account sign-in | Email address and account identifier |
| Stripe | Earlier purchases | Payment details, customer identifiers |
| Anthropic | AI processing in older features | Content you submit to those features |
Each provider is bound by its own privacy and security terms.
6. Cookies and local storage
We use browser storage and a session token strictly to keep you signed in and to run the game. We do not use advertising or cross-site tracking cookies.
We also store a random identifier in your browser so we can count how many people visit the site and how far they get. It is first-party — the counts stay on our own servers, nothing is sent to an advertising or analytics company, and the identifier is not linked to you unless you create an account. Clearing your browser storage removes it.
7. Data retention
We keep your account information and content for as long as your account is active or as needed to provide the Service. Records of earlier purchases are kept as needed for accounting and legal purposes. You may request deletion of your account and associated personal data (see "Your rights").
8. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To make a request, email [email protected] from the address associated with your account. We will respond within a reasonable time and as required by applicable law.
9. Data security
We use reasonable technical and organizational measures — including encrypted transport, a hosted managed database, and server-side enforcement of access — to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children's privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us information, contact us and we will delete it.
11. International users
The Service is operated from the United States. If you access it from elsewhere, you understand that your information will be processed in the United States and other countries where our providers operate.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, provide additional notice where appropriate.
13. Contact
Privacy questions or requests: [email protected].