# Privacy Policy Revision: 2026-10-04.1. Updated: October 4, 2026. Effective date: October 4, 2026. This Privacy Policy covers the website, Waitlist, and free invited mobile Beta. Reading it does not record agreement or enable optional tracking. ## Who we are and scope Balushi Digital LLC, a Delaware company in the United States, operates Lizards. Contact us at info@trylizards.com. Our mailing address is 8 The Green, STE B, Dover, DE 19901, United States. This is a mailing address, not a statement that it is an operating office. This policy covers the Lizards website, Waitlist, free invitation-only mobile Beta, support communications, and editorial contributions. Lizards is an independent supplementary study aid for university Courses, using Lesson Videos, Practice, and a progress Map. The service is intended for people aged 18 or older. The Waitlist accepts adults throughout the United States; Beta invitations are selective, availability is limited, and joining does not guarantee access or an invitation date. ## Website and Waitlist To join the Waitlist, you supply required name and email, optional university and Course interest, and an optional Beta request. Our server adds a signup date. We use these details to maintain the Waitlist, consider requests and invitations, understand Course interest, and send access-related communications. The optional Beta request is separate from joining the Waitlist. Signup currently confirms on the page and does not automatically send a confirmation email. Signups are sent through our AWS-hosted handler to a private Google Workspace Sheet. The Sheet remains the signup destination. A failed or uncertain response can require a manual retry and may create duplicate rows; a request to leave the Waitlist should identify the email addresses you used so we can address matching entries. You may ask us to stop Waitlist or Beta invitation communications at info@trylizards.com. Necessary replies to your requests and legal or service notices are handled separately. This website uses locally hosted fonts and assets. It has no analytics or advertising SDK, tracking cookies, or browser-storage tracking. Hosting and network processing still occur to deliver the page and process submissions. We do not arrange for third parties to collect website visitors' activity across other websites for advertising through this site. Browser Do Not Track signals do not change this website's behavior because it has no such tracking to switch off. Do Not Track is distinct from other privacy preference signals and does not replace the mobile app's optional tracking choice or rights that apply under law. ## Mobile profile and study progress The mobile Beta stores your supplied name and email, study progress, preferences, and tracking choice on your device. Progress includes your studied Course, XP, Streak, completed Levels, and watched Lesson Videos. There is no verified cloud account, password, or remote progress-sync service in this Beta. Name and email are self-reported; an email format check does not verify that you own it. Local device storage is separate from the shared Course content backend. Opting into analytics can send identified activity and existing progress to PostHog as described below. The legal-acceptance flow also sends the minimum identity and agreement evidence to separate company-controlled storage, even when optional tracking is declined. These are different purposes; the Course database is not a store for personal Learner profiles or legal receipts. ## Necessary delivery and technical records AWS services deliver our website, handle signup requests, and provide Course information and Lesson Videos. Requests involve network and technical metadata, which may include IP addresses, request identifiers, requested content, status, and timing. Necessary Course and video requests can occur before optional tracking consent and when it is declined. Reviewed Course-delivery application logs include request and content identifiers, including selected Level and Question identifiers. Reviewed application and API log groups have a 14-day setting. That setting is not a retention promise for all AWS processing, provider operational records, Waitlist entries, or analytics. Caching a Lesson Video is also different from retaining personal activity data. ## Optional identified analytics and Session recordings The mobile Beta offers one combined optional choice for identified product analytics and unmasked Session recordings with PostHog. You may decline and use the learning features after completing any required service agreement. Agreeing to Terms does not authorize tracking. Collection depends on your choice and the platform and build's release gates; consent alone does not turn on a recording gate that is off. We do not initialize PostHog tracking or send product analytics before this optional permission. If you allow tracking, your supplied email is used as the PostHog identity and your supplied name is a profile property. Collection is identified, not anonymous. Shared or mistyped email addresses may associate activity incorrectly. Analytics can include app version and platform, session and occurrence identifiers, selected Courses and Levels, navigation, timing, Practice answers and correctness, hints, progress, XP, Lesson Video playback and watch activity, and structured loading or playback failures. An existing local progress baseline may be sent after opt-in, including completed and watched Levels. Earlier study history is not necessarily excluded from that baseline. When recording gates permit, Session recordings capture unmasked visible app screens and interactions. These may include readable name and email on Profile, Practice answers, Lesson Video frames where supported, and touches. This is a recording of activity visible inside the app, not a camera or microphone recording feature. Do not place sensitive information on visible screens expecting it to be hidden from a consented recording. You can change Usage tracking in Profile. Confirming withdrawal stops new collection and recordings. Already captured, consented data in upload queues may finish uploading. Withdrawal does not delete previously collected analytics or recordings; request historical deletion separately at info@trylizards.com. Re-enabling tracking resumes observation and may send the applicable local progress baseline; it does not reconstruct activity that was never captured while tracking was off. ## Necessary legal agreement records The acceptance service records agreement independently of PostHog and marketing. Where required, it records supplied name and email, an affirmative agreement and applicable eligibility confirmation, agreement purpose, the exact document revision and checkbox-copy identifiers or hashes, the Privacy Policy revision shown, server receipt time, relevant client or release context, and a random submission or receipt identifier. Mobile receipts can use a random profile or installation binding; Contributor records also identify the Source material covered. The service acknowledges only after durable company-controlled storage, with a minimal receipt cached on the mobile device where applicable. Identity remains self-reported. A receipt is evidence of the submitted act and wording, not identity authentication or proof that all claimed source rights exist. We do not collect IP addresses, Session recordings, or hardware fingerprints solely to add receipt evidence. ## Support and editorial contributions If you contact us, we process your sender details, message, and any attachments to respond, handle privacy or content complaints, and maintain appropriate follow-up records. Email and communications providers process messages. Please avoid sending unnecessary sensitive information. Contributors supply Source material through existing channels; this website is not a public upload library. We use supplied identity, material references, communications, and appropriate agreement evidence to evaluate and manage contributions. Source material may contain third-party information. Contributors must have the required rights and remove confidential or unnecessary personal information. Course preparation uses editorial AI tools, including OpenAI and Anthropic, to help process Source material and prepare lessons. We remove unnecessary personal information before supplying material. Narration and voice selections are sent to Fish Audio for voice generation. These are editorial tools, not a Learner-facing AI chat service. Provider handling depends on the actual account, settings, and agreements; we make no universal promise of zero retention or that providers never use editorial inputs for training. Provider and voice-rights verification remains a release check. ## Recipients and purposes AWS supplies hosting, delivery, technical processing, and the separate legal-record storage. Google Workspace supplies the private signup Sheet and relevant communications tools. PostHog receives the optional identified analytics and eligible Session recordings described above. Support and communications providers process correspondence. Editorial AI and voice providers process relevant Source material or narration. Authorized company personnel and service providers access information for the stated work; legal advisers and authorities may receive information when reasonably necessary for legal duties, rights, security, or claims. A business transfer may involve necessary information subject to applicable law and appropriate notice and safeguards. We do not sell Learner or Waitlist personal information, use it for advertising, or use identifiable Learner information to train AI. This operating commitment is distinct from processing Source material through editorial AI tools under a Contributor's authorization. Information may be processed in places where providers operate; we do not promise that every provider stores all information only in the United States. ## Retention and security We retain Waitlist information while needed to manage interest and access-related communications, then review it for removal, including matching duplicates on a valid request. We retain support and contribution correspondence while needed for the request, editorial work, permissions, or justified legal purposes. Device information remains subject to local controls and device or backup behavior. Provider copies, backups, and operational data may have their own retention and deletion processes. Optional analytics have provider-dependent retention rather than an additional Beta-specific automatic expiry. PostHog's plan-based event query windows do not themselves guarantee physical deletion. The existing Session recording setting is 30 days; that setting does not cover all analytics or downloaded or exported copies. We handle deletion requests through the relevant provider tools and address copies we control. Deletion can be asynchronous, and requesting or initiating deletion does not mean every copy disappears immediately. Limited agreement evidence may be retained separately from study or analytics data when necessary to establish the applicable wording and agreement, meet legal duties, or address claims. We review necessity based on the agreement's continuing relevance, applicable duties and claim periods, pending disputes or preservation requirements, and whether the record can be reduced. We limit access and securely dispose of records when no longer justified. We do not promise a single fixed period for every category or keep personal evidence indefinitely merely because an archive exists. Public legal text archives contain wording, not personal receipts or Contributor descriptions. We use reasonable safeguards appropriate to the information, including restricted access and separation of personal records from public Course content. No transmission or storage system is perfectly secure, and ordinary local profile storage is not a verified cloud account or a secure vault. We do not claim that all provider security, backup, or deletion settings have been independently verified. ## Your choices and requests Email info@trylizards.com to ask to leave the Waitlist, stop invitation communications, correct information, access it, or request deletion. Tell us which service and supplied email addresses are involved, what you want changed, and enough context to locate the information. Do not send identity documents unless we explain why they are necessary. We use reasonable identity verification proportionate to the request and the risk; the app's self-reported email alone is not verified ownership. Depending on where you live and the law that applies, you may have additional access, correction, deletion, portability, objection, restriction, consent-withdrawal, appeal, or complaint rights. We consider requests under applicable law, explain limitations or justified retained records, and provide any applicable response or appeal information. This policy does not assert that all state laws apply or that the service is exempt from them. You may contact an appropriate regulator without contacting us first. Turning off tracking stops future collection subject to consented queues, rather than erasing history. Logging out removes the local profile and resets its tracking choice; study progress can remain on that device. Resetting progress changes local learning information and does not delete uploaded analytics, Waitlist entries, or legal evidence. Removing the app is not a server deletion request, and device backups may affect local copies. Ask us separately about company/provider-held information; local profile restoration does not establish a prior legal receipt or current tracking consent. ## Age and policy changes Lizards is intended for adults aged 18 or older. Do not join the Waitlist or submit information if you are under 18. If you believe we hold information from someone under 18, contact info@trylizards.com so we can investigate and take appropriate action, including deletion where required. An adult-only policy is not proof that every existing profile's age has been verified. We will label intentional revisions with their updated and effective dates, preserve exact earlier text, and use appropriate in-service or email notice for material changes. We will obtain any permission required for a changed practice before carrying it out. A Privacy Policy notice is not an agreement checkbox or permission for optional analytics. ## Contact For privacy questions, requests, content complaints, or legal notices, contact Balushi Digital LLC at info@trylizards.com or by mail at 8 The Green, STE B, Dover, DE 19901, United States.