Privacy Policy

Last updated: 15 September 2026

CoursePapa is an AI-assisted course builder. You type a topic, the app designs a curriculum, then matches a real YouTube video to each lesson. This policy explains what personal data we collect, why, how long we keep it, and how you can have it deleted.

Who we are

CoursePapa is operated as an online service reachable at coursepapa.steprotech.com. For any privacy question or request, contact us at [email protected].

What we collect and why

• Account details — your name, email address and a securely hashed password. Required to create your account and sign you in.
• Signup abuse signals — the IP address, browser user-agent and a device fingerprint hash recorded when you register. We use these only to enforce one account per person and to block automated signups. The fingerprint is a hash computed in your browser; it is not a tracking cookie and is not shared.
• Your course content — the topics you generate, the curriculum, lesson titles, and which videos were matched.
• Learning progress — which lessons you have completed and your last watched position, so you can resume.
• Certificates — issued when you complete a course, including a verification code.
• Session cookie — a single first-party cookie that keeps you signed in. We do not run advertising or third-party analytics cookies.

YouTube API Services

CoursePapa uses YouTube API Services to search for lesson videos and to read public video information. By using CoursePapa you also agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.

• Videos play through the standard YouTube embedded player, so Google may set its own cookies and collect playback data as it would on YouTube. We never modify, block or overlay the player's standard features and ads.
• We do not access your YouTube or Google account, and we do not ask for or store Google credentials.
• Video titles, channel names, durations, thumbnails and links displayed in the app come from YouTube API Services and remain the property of their creators. We do not host, download or re-upload video content.
• Search results and video details are cached only to avoid repeating API calls, and are refreshed or discarded in line with YouTube's API terms.
• You can revoke CoursePapa's access to your Google account at any time from the Google security settings page (CoursePapa does not request Google account access, so in practice there is nothing to revoke).

AI processing

Lesson topics, course titles and public video metadata (title, description, tags, engagement counts and public comments) are sent to our AI provider — currently DeepSeek, reachable at api.deepseek.com — to design curricula and to score how well a video teaches a lesson. We do not send your password, email address or payment details to the AI provider.

How long we keep it

• Account data and your courses are kept for as long as your account exists.
• When you delete your account, we remove your account record, your courses, lessons, progress and certificates. This happens immediately for self-serve deletion.
• Requests made by email are actioned within 30 days.
• We may retain minimal records where the law requires it (for example, abuse prevention), but never your course content.

Your choices and rights

• Delete your account and data — sign in, open Profile, and use Delete my account. It is immediate and cannot be undone.
• Or ask us — email [email protected] and we will delete your account for you within 30 days.
• Access or correct — your name and password can be changed in Profile; we do not collect anything else about you.

Sharing

We do not sell your data and we do not share it with advertisers. Data is shared only with the processors needed to run the service: YouTube API Services (video data), our AI provider (course design and video scoring) and Google Fonts (page typography).

Security

Passwords are stored as one-way hashes, sessions are protected by CSRF tokens, and optional two-factor authentication is available in your profile. No system is perfect; if we ever become aware of a breach affecting your data we will tell you.

Children

CoursePapa is not intended for children under 13, and we do not knowingly collect their data.

Changes

If this policy changes we will update the date at the top of this page and, for material changes, tell you on your dashboard.

See also our Terms of Use · Questions? [email protected]