Privacy Policy

1. What We Collect

We collect only what we need to deliver courses and improve your learning experience:

• Account details: name, email, password hash.
• Course usage: lessons viewed, progress, quiz results.
• Payment confirmations (via our processors) — no full card data is stored by us.
• Technical data: device, browser, IP (for security), coarse location.
• Optional communications: support messages, feedback, and survey answers.

2. How We Use Data

• Provide and personalize learning content.
• Process enrollments and confirm payments.
• Secure the platform and prevent fraud.
• Measure performance and improve features (only with your consent for analytics cookies).
• Send important service notices. Marketing is optional and requires consent.

3. Legal Bases

• Contract: to provide purchased courses and support.
• Legitimate interests: platform security and service improvement (balanced and minimal).
• Consent: analytics, A/B testing, and marketing.
• Legal obligations: accounting and compliance records.

4. Cookies

We use essential cookies for core functionality, and optional analytics/marketing cookies with your consent. You can manage preferences anytime using “Cookie Settings”.

• Essential: session, CSRF, load-balancing.
• Analytics (optional): usage metrics to improve lessons.
• Marketing (optional): measure campaign effectiveness.

5. Data Retention

We keep data only as long as necessary:

• Account data: for the lifetime of your account.
• Payment records: 5–10 years per tax law.
• Support messages: up to 24 months.
• Analytics: 13 months or less when enabled.

6. Security

We apply defense-in-depth: encryption in transit (HTTPS), credential hashing, least-privilege access, logging, and backups. If we detect a breach affecting you, we will inform you and authorities as required.

7. Your Rights

Depending on your location, you may have the right to access, rectify, erase, restrict or object to processing, data portability, and withdraw consent. You also have the right to complain to a supervisory authority.

8. International Transfers

When data is processed outside your region, we use safeguards like Standard Contractual Clauses and vendor due diligence.

9. Third Parties

We work with payment processors, analytics (if you consent), email providers, and infrastructure vendors. We require contractual privacy commitments and minimal data sharing.

10. Children

Our courses are intended for individuals aged 16+. If you believe a child provided data, contact us and we will promptly delete it.

11. Changes to This Policy

We may update this policy. Material changes will be communicated via email or in-app notice. You can always review the latest version here.