Legal
Privacy policy
Last updated: September 2026
MessyDev is built around one rule: your data belongs to you. Here's the plain-English version of what that means.
What we collect
- Account details: your email address and display name when you sign up, including through Google sign-in.
- Learning activity: exercises you complete, lesson progress, XP, streaks, reflections, and founder-journey checklists, so your workshop and studio remember where you left off.
- Ask Messy conversations: the questions you ask and the answers, so mentors can follow up when you request a human.
- Billing: if you upgrade to Pro, payments are processed by Stripe. We see your plan status, never your full card number.
- Connected tools: if you link GitHub, Vercel, or similar accounts, we store encrypted access tokens so Messy can act only when you ask. Tokens are never shown back to you or to anyone else.
What we don't do
- We don't sell your data.
- We don't run advertising or third-party trackers.
- We don't use your code or conversations to train models.
- We don't post to Product Hunt, social networks, or anywhere else on your behalf — Messy drafts, you ship.
How we use it
- To personalise your learning path, difficulty, and Messy's coaching.
- To show your own progress dashboard, lesson progress, and funnel numbers.
- To send account emails (welcome, receipts, important changes) — never marketing you didn't ask for.
Cookies and device storage
- Strictly necessary storage keeps you signed in and remembers device preferences like text size, motion, and language. These are always on — the site doesn't work without them.
- Optional learning analytics only run if you tap Accept on the consent banner. Decline and nothing optional is stored or sent.
- Your choice is remembered on your device. Clear your browser storage and we'll ask again.
Who else handles your data
- Hosting and app platform: Lovable, which serves messydev.com and runs the site's server-side code.
- Database, accounts and storage: Lovable Cloud, built on Supabase, which holds your account, progress, playbooks and notes.
- Payments: Stripe, if you upgrade to Pro. Card details go to Stripe directly and never reach us.
- Sign-in: Google, only if you choose Google sign-in.
- AI answers: the text you send to Messy is passed to the AI models behind it (currently Google and OpenAI models, via Lovable's AI gateway) to produce a reply. It is not used to train those models.
- Email: our email provider, for account and receipt emails.
- These providers only ever receive what they need to do their part, and none of them are allowed to use your data for their own purposes.
Your controls
- Disconnect any tool from your account at any time; the stored token is deleted.
- Update your profile and display name in your account page.
- Email mike@messydev.com to export or delete your account and learning data.
Data retention
- We keep your data while your account is active. If you ask us to delete your account, we remove your personal data within 30 days, except billing records we're legally required to keep.
Changes
- If this policy changes materially we'll email you before it takes effect. The 'last updated' date above always shows the current version.
Questions? Email mike@messydev.com.