Privacy

RoadCode is a paid study service. To run it we hold only what the service needs:

• Your name, email address and Guyana mobile number. Given at signup. The email identifies your account and receives your code, your receipt and your password resets. The mobile number is how a Mobile Money payment is matched to you.
• Your payments. A reference, the amount, the date and whether it succeeded. We never see or store your card or wallet details — you pay on Mobile Money Guyana's own page and they tell us only the outcome.
• Your study progress and quiz scores, so they follow you between devices.
• Your devices. Your account works on a limited number of devices. We store a one-way hash of a random identifier — never anything that identifies your phone or computer — plus a coarse label such as “Chrome on Windows”, and the IP address each device was last seen from. That last one is only so you can tell two similar-looking devices apart on your account page before removing one; it is never used to decide which device you are on. It is deleted with everything else if you close your account.
• Security events. Sign-ins, failed sign-ins and administrative actions, with the IP address they came from. This is how account takeover is detected.

You, and the people who run RoadCode. Nobody else. We do not sell personal data, we do not share it for advertising, and there are no advertising or analytics trackers on this site — which is also why there is no cookie banner: the only cookies here are the ones that keep you signed in and remember your device.

Three suppliers process data on our behalf in order to provide the service: Supabase (the database and sign-in system), Netlify (hosting), and SendGrid (email delivery). Payments are handled by Mobile Money Guyana, who are responsible for your payment details under their own terms.

• Your account details — until you close your account.
• Security events — about 90 days, then deleted automatically.
• Payment records — kept after you close your account, because they are financial records. Mobile Money Guyana holds its own copy of every transaction regardless of what we do.

Close my account is self-service on your account page. It removes your name, email, phone number, devices and study history straight away. Your payment records remain, as explained above, but they no longer identify you.

Closing an account is immediate and cannot be undone, and there is no refund for time remaining on a pass.

Traffic is encrypted in transit. Passwords are hashed by our sign-in provider and are never visible to us. Study content is readable only by an account with an active pass, enforced by the database itself rather than only by the app. Administrator accounts require a second factor.

Questions about any of this, or a request we have not covered: support@roadcode.gy.