Privacy Policy

The Service is operated by JV Pursuits LLC. For privacy questions or requests, contact us at jake@tinyrisks.com.

Account and contact information. When you sign up, we collect your email address and authentication data (such as magic-link tokens and session identifiers). You may optionally provide a display name or profile name.

Course activity. We store which videos you watch, completion status, playback position, and course progress so you can resume where you left off and so drip-unlock rules work.

Submissions. If you submit text, audio, video, or images through the Service (for example during onboarding or after doing a tiny risk), we store that content and related metadata (type, timestamp, context). Audio and video may be automatically transcribed so content can be reviewed and, where applicable, displayed as text.

Comments and community content. Comments you post on course videos, and content you share in community features (such as the mosaic or ripples), are stored and may be visible to other signed-in users, subject to moderation.

Feedback. Optional feedback you leave on videos.

Email preferences. We record whether you are enrolled in course-related emails and whether you have unsubscribed from marketing messages.

Technical and usage data. Our hosting and infrastructure providers automatically collect standard log data (such as IP address, browser type, device information, referring URLs, and timestamps) for security, debugging, and performance.

Cookies and similar technologies. We use cookies and similar tools (such as local storage and pixels) to keep you signed in, remember preferences, and understand how the Service is used. We may add analytics or advertising tools from third-party platforms in the future — for example, to measure traffic, ad performance, or whether someone who saw an ad later signed up. When we do, those tools may collect device identifiers, pages viewed, referral sources, and approximate location derived from IP address.

Legal acceptance. If you agree to our Terms at signup, we record the version accepted and the date of acceptance.

We use your information to:

• create and manage your account;
• deliver the course, including video playback and unlock pacing;
• store and display your submissions, comments, and community posts;
• moderate user-generated content for safety and quality;
• send transactional emails (such as sign-in links and replies);
• send optional course-related emails (such as reminders), which you can opt out of;
• improve, secure, and troubleshoot the Service;
• measure site usage, campaign performance, and signup conversion when we use analytics or ad platforms;
• comply with law and enforce our Terms.

If you are in the European Economic Area or United Kingdom, we process personal data on these bases:

• Contract — to provide the Service you signed up for.
• Legitimate interests — to secure the platform, moderate content, improve the course, and send essential service-related communications.
• Consent — where required for non-essential emails, non-essential cookies, or advertising/analytics tracking; you may withdraw consent by unsubscribing or adjusting cookie preferences where offered.
• Legal obligation — where we must retain or disclose data to comply with applicable law.

We do not sell your personal information. We share data only with service providers that help us run the Service, including:

• Supabase — authentication, database, and file storage;
• Vercel — website hosting;
• Mux — video streaming and encoding;
• Resend — email delivery;
• OpenAI — automatic transcription of audio/video submissions;
• Anthropic — automated moderation of certain user-submitted text.

We may also use analytics, advertising, or measurement platforms (such as tools from Google, Meta, or similar providers) that set their own cookies or pixels. Those providers process data under their own policies as well as ours. We do not sell your personal information for money; some ad platforms may treat certain data sharing as “selling” or “sharing” under California law when used for cross-context behavioral advertising — we will disclose and offer opt-outs if and when we enable those tools.

These providers process data on our behalf under contractual obligations. We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer.

Other users. Comments and certain approved submissions or community posts may be visible to other signed-in users. Onboarding submissions are treated as private and are not shown in public community views.

Essential cookies. Required for the Service to work — for example, keeping you logged in and protecting your session. These do not require consent in most jurisdictions.

Analytics and advertising. We may add third-party analytics or ad-tracking tools to understand traffic, measure campaigns, and see whether ads lead to signups. When active, those tools may use cookies, pixels, or similar identifiers. Where required by law (including in the EEA/UK), we will ask for consent before placing non-essential tracking cookies.

Your choices. You can block or delete cookies through your browser settings. Blocking essential cookies may break sign-in or course features. When we run a cookie consent banner or preference center, you can use it to manage non-essential cookies. You can also use industry opt-out tools (such as DAA opt-out or Your Online Choices (EU)) for interest-based advertising, where available.

We keep your account data while your account is active. If you ask us to delete your account, we will delete or anonymize personal data unless we must retain it for legal, security, or backup reasons. Email logs and server logs are retained for a limited period consistent with operational needs.

Marketing emails. You can unsubscribe from non-essential course emails using the link in any marketing message or the unsubscribe page on the Service.

Access, correction, deletion. Depending on where you live, you may have the right to access, correct, delete, or export your personal data, or to object to or restrict certain processing. Email jake@tinyrisks.com to make a request. We may need to verify your identity.

California residents.We do not sell personal information for money. California residents may have additional rights under the CCPA/CPRA, including the right to know what categories of data we collect, to request deletion, and to opt out of the sale or sharing of personal information used for cross-context behavioral advertising. If we enable ad-tracking tools that qualify, we will provide a “Do Not Sell or Share My Personal Information” link or equivalent control.

EEA/UK residents. You may lodge a complaint with your local data protection authority. We encourage you to contact us first so we can try to resolve your concern.

We use reasonable technical and organizational measures to protect your information, including encrypted connections and access controls. No method of transmission or storage is 100% secure.

We are based in the United States. If you access the Service from outside the U.S., your information may be processed in the U.S. or other countries where our providers operate. Where required, we rely on appropriate safeguards for cross-border transfers.

The Service is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new “Last updated” date. Material changes may also be communicated by email or in-app notice where appropriate.

Questions about this policy: jake@tinyrisks.com