Privacy Policy
Last updated October 8, 2026. strongyes.io is run by First Bite Labs LLC. This page names every company that handles your data for us, what each one gets, and what you can export or delete. strongyes.io does not sell your personal information.
What we store
If you sign in with Google, GitHub or an email link, we store your email address, name and user ID. Signed in, your practice-room sessions are saved to your account. Signed out, they stay in your browser.
Problems open as lessons with Coco, except a practice-room session you saved, which reopens in the practice room. On a lesson, your code stays in your browser and your conversation with Coco is not saved. If you press Keep on a sentence while signed in, we save that sentence, up to 240 characters, with the code and run result it came from. A later passing run is saved with it too, and so is a Submit, with the lines that ran and the values your variables held at up to 32 steps. In the practice room, a session holds your messages with Coco, your code and your test results.
strongyes.io never stores your audio. In the practice room, what you say is turned into text and saved with the session, like a typed message.
Signed in, strongyes.io keeps memories so Coco can pick up where you left off: the sentences you keep; a one-line note (the problem and the date) for each practice-room session saved in this browser, copied the first time you open your profile; and, only if you switch memory on in your profile, notes a model writes from each finished practice session, with an internal note on how much of the idea you put in your own words. Turning memory off stops new memories and stops Coco from reading them.
We also store answers you give to short surveys and check-ins. Stripe handles checkout and card details; we never see your card number. We store each purchase, its Stripe IDs, your plan and access dates, and the IP address and browser you checked out from, with the version of these policies you agreed to.
Coco and the AI model providers
Coco is an AI, not a person. AI models from the companies below write her replies, and each model provider gets what that reply needs. Do not paste secrets or confidential employer code.
On a lesson, your code, the lines you mark on it, your question, your guess, your run result, earlier questions and answers from the visit, and sentences you kept go to OpenRouter, which passes them to Anthropic’s Claude to write Coco’s reply (to Anthropic directly if OpenRouter is down). Your question or what you said, earlier questions from the visit, your guess and your run result also go to TypeSafe’s Jev, through OpenRouter, to choose what Coco draws (to Google’s Gemini, through OpenRouter, if Jev is unavailable).
When you press Talk, your microphone audio goes to OpenAI’s Realtime API with your code, the lines you mark on it, your run result and what is on the page, plus your memories if you are signed in. OpenAI also turns your speech into text so Coco can follow it. The call is live only: strongyes.io does not record it, and OpenAI’s tracing is off for it.
In the practice room, your messages, code and test results go to Anthropic’s Claude, plus your memories if you are signed in. Claude also draws diagrams of code there, and, when memory is on, writes the notes from a finished session. OpenAI turns the text of your memories into search vectors, and the problem you are on into a search, so Coco can find the memories that matter.
Running your code
Your code and its test input go to Judge0, a code runner strongyes.io hosts on its own server at DigitalOcean, reached through Cloudflare. They carry no name or email.
Services that run strongyes.io
- Vercel hosts the site and sees each request, including your IP address.
- Supabase stores your account and everything listed above, and handles sign-in.
- Resend sends sign-in links and the links you email yourself to open strongyes.io on a computer. It gets your email address and the message.
- Upstash keeps short-lived counters that stop overuse, keyed by a random browser ID, your IP address or your user ID (a hash of your email for sign-in links). Each expires within two days, except the count of free talking minutes your account has used, which stays after you delete your account unless you email us to remove it. If you once turned on the daily problem email, which we no longer send, Upstash still holds your email address, your company focus and which problems were sent, until you delete your account.
- Grafana Cloud receives request timings and the paths of pages and API calls, to watch that the service is healthy.
- If you connect GitHub, Google Calendar or Notion, we store the access it grants and the items you choose until you disconnect it or delete your account, and OpenAI turns their text into search vectors.
Analytics and diagnostics
- PostHog, in the US, receives the pages you visit with their full address, named product events, error messages, and your user ID once you sign in. It does not record your screen or capture clicks on its own.
- Vercel Analytics and Speed Insights count page views, named events and page speed.
- Ahrefs Analytics counts page views when it is on.
- Sentry receives errors and performance traces without your IP address. For one visit in ten, and every visit that hits an error, Sentry replays the page with all text, inputs and media masked. Signed-in users can send a bug report through Sentry with an optional name and email.
- Jam receives the page address, your browser and your screen size only when someone records a bug report with it.
These run for every visitor; there is no consent prompt yet.
Export, delete and forget
Signed-in users can export or delete their data from the profile page.
The export downloads your profile, plan, practice sessions with their messages and code, session notes, surveys and check-ins, activity events, connected-service details (never the access itself), and every memory, including memories you forgot, until they are purged. The export leaves out purchase and billing records, overuse counters, what your browser stores, and what Stripe, PostHog, Sentry and Resend hold.
Deleting your account cancels any open checkout at Stripe, deletes your profile, practice sessions, messages, notes, surveys and other practice data, and marks your memories deleted. Deleting keeps your sign-in record, your purchase and billing records, notes staff wrote while helping you, and the count of free talking minutes your account has used; Stripe keeps its own customer record. Email us to remove your sign-in record or that count too.
Forgetting a memory hides it from Coco right away, with ten seconds to undo. A kept lesson sentence takes its saved code with it. Forgotten memories stay in our database until they are purged.
How long we keep it
We keep your account and practice data until you delete it or ask us to. We delete on request; automatic retention windows are being switched on. Overuse counters expire on their own within two days, except the count of free talking minutes your account has used, which stays until you ask us to remove it.
Age
strongyes.io is not meant for anyone under 16, and we do not knowingly keep data about them. If you think someone under 16 has an account, email us and we will delete it.
Questions
Email leo@strongyes.io or use the contact page.