Privacy Policy

1. Data we collect

We collect only what the platform needs to work for you:

• Account data: your name, email address and password (stored only as a secure hash).
• Learning data: course enrollments, progress, quiz results, and the content you write into your auto-saved workbooks.
• Transactional data: purchases and coupons applied, payments themselves are processed by Stripe; we never see or store your full card details.
• Communication data: newsletter subscriptions and support emails, including your preferences.
• Technical data: standard server logs (IP address, browser type) kept for security and troubleshooting.

2. How we use your data

Your data is used to operate the platform: to authenticate you, save your progress and workbooks, deliver your courses and certificates, process payments, send transactional emails (verification, receipts, alerts), and, only with your consent, send the newsletter and course-launch updates. We also use aggregated, anonymized learning data to understand which parts of courses work well so we can improve them.

We do not sell your personal data. Ever.

3. Who we share data with

We share data only with the processors required to run the service:

• Stripe, payment processing (card data stays with Stripe under its own PCI-DSS controls).
• Our email/SMTP delivery provider, to send transactional and newsletter emails you have opted into.
• Our hosting and database providers, to serve the platform.

4. Cookies and local storage

The platform uses essential cookies and browser local storage to keep you signed in and remember your preferences. Learning progress is tied to your account, not to tracking cookies. See the Cookie Policy for the full list and how to control them.

5. Data retention and security

Account and learning data are retained for as long as your account is active so your lifetime access keeps working. You can request deletion of your account and personal data at any time; we will remove personal data unless we are required to keep transaction records by law. Data is transmitted over encrypted connections (HTTPS) and access inside the company is restricted to what is necessary.

6. Your rights

You can access, correct, export or delete your personal data, and withdraw newsletter consent at any time from the platform or by contacting support. We respond to all genuine rights requests within a reasonable timeframe and in line with applicable data-protection law.

7. Corporate learners

Where your employer purchased seats for a corporate training program, the employer may receive aggregated completion reporting for its own learners. Individual workbook content is only shared with an employer where the program terms explicitly say so.