Last updated: March 2026
DevMentor AI is committed to being transparent about how we handle your data. This policy explains what we collect, why we collect it, and how you can control it. We don't sell your data. We never will.
Contents
When you register, we collect your name, email address, and (if using credentials login) a bcrypt-hashed password. We never store plain-text passwords. If you sign in with Google, we only receive the profile data Google shares with us: name, email, and profile photo.
To personalise your roadmap, we ask for your learning goal, current experience level, preferred technology stack, and estimated hours available per week. This data is stored in your user profile and used exclusively to generate and update your roadmap.
Daily check-in submissions, including what you worked on, any blockers, your mood rating, and optional free-text notes, are stored and used to generate personalised AI responses and to build your progress history.
Code you paste for review is stored against your account to power the review history feature. We do not use your code to train AI models.
We track which features you use and how often to improve the product. We do not sell this data to third parties or use it for advertising.
Your onboarding data, check-ins, and roadmap progress are passed as context to our AI provider (Google Gemini API) to generate personalised responses. This context is sent per-request and is used only to serve your response.
Aggregated, anonymised usage patterns help us understand which features are working. We do not analyse individual conversations to improve our product without consent.
If you opt in, we may send transactional emails such as streak reminders or weekly learning digests. You can unsubscribe from any email at any time.
Your data is stored in MongoDB Atlas. We use a connection singleton pattern to prevent connection pool exhaustion. Database credentials are never exposed to the client.
Sessions are managed via NextAuth.js v5. Session tokens are signed with a secret stored as an environment variable and are never accessible from the browser.
All third-party API keys (AI provider, email, file uploads) are stored as server-side environment variables. They are never included in client bundles or exposed via API responses.
Email/password accounts use bcrypt hashing with a minimum cost factor of 12. We cannot recover your plain-text password — if you forget it, you will need to reset it.
We use Google's Gemini API to power AI features. Content you submit may be processed by Google's infrastructure per their API Terms of Service. We send only the minimum context needed to serve your request.
If you choose 'Sign in with Google', your authentication is handled by Google. We only receive the profile data you authorise Google to share.
DevMentor AI is deployed on Vercel. Your requests are processed by Vercel's serverless infrastructure. Vercel's privacy policy governs any data they process.
Transactional emails are sent via Resend. Your email address is shared with Resend only when an email is being sent to you.
You can request a copy of all personal data we hold about you by emailing us. We will respond within 30 days.
You can delete your account at any time from the dashboard settings. Deleting your account permanently removes your profile, roadmap, check-ins, code reviews, and conversation history from our systems.
If any data we hold about you is inaccurate, you can update it directly in the dashboard or contact us to make the correction.
If you have any questions about this Privacy Policy or how we handle your data, contact us at olayeyeayomide2000@gmail.com. We typically respond within 2 business days.