Privacy Policy

Last updated: 26 May 2026

RunDrill is a learning service that runs inside AI agents. This policy explains what we collect, why, and the choices you have. It covers the RunDrill website (rundrill.com) and the RunDrill service at mcp.rundrill.com.

What we collect

• Account. Your email address. If you sign in with GitHub, Google, or Apple, we receive your basic profile from that provider — your name, email, and the provider account ID — and nothing more.
• Learning activity. Your progress within courses: the exercises you do, your answers, and the mistakes you make. We use this to adapt future exercises to you.
• Technical data. Standard request information (such as IP address and timestamps) and error reports, kept to run the service reliably and securely.

How we use it

• To sign you in and keep your session active.
• To run your courses and adapt them to your progress.
• To send you one-time sign-in codes and account-related email.
• To keep the service secure, debug problems, and prevent abuse.

We do not sell your data, and we do not use it for advertising.

Sign-in and email

RunDrill uses passwordless sign-in. We email you a one-time code, sent through our email provider (Resend). If you use a social provider, sign-in happens through GitHub, Google, or Apple instead.

Google user data

If you sign in with Google, we request only your basic profile and email address, and only to create or identify your RunDrill account. RunDrill's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. We do not share this data with third parties except as needed to run the service, and we never use it for advertising.

Service providers

We rely on a few processors to run RunDrill: identity providers for social sign-in (GitHub, Google, Apple), an email-delivery provider (Resend), and our hosting and error-monitoring infrastructure. They process data only on our behalf.

RunDrill is designed to run inside third-party AI agents (for example Claude or Gemini). Those agents are operated by their own companies under their own privacy policies; your use of them is governed by their terms, not ours.

Cookies

We use a single session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

Data retention

We keep your account and learning data while your account is active. You can ask us to delete it at any time (see Contact), after which we remove it within a reasonable period, except where we must keep records to meet legal obligations.

Your rights

You can ask to access, correct, export, or delete your data. Email us and we will help.

Security

Traffic is encrypted with TLS, and access to data is limited to what the service needs. No system is perfectly secure, but we take reasonable steps to protect your information.

Children

RunDrill is not intended for children under 13 (or the minimum age in your country). We do not knowingly collect their data.

Changes

We may update this policy. When we do, we will change the date at the top. Significant changes will be made clear on this page.

Contact

Questions or requests about your data: [email protected].