Privacy Policy

Depending on how you interact with our services, we may collect:

• Identifiers: name, email address, and account ID.
• Usage: lesson completions, quiz attempts, and progress markers.
• Technical: approximate device type and event timestamps to help diagnose issues.

We avoid collecting sensitive categories of personal data. If you voluntarily include sensitive information in messages to support, we process it only to respond to you.

• Service delivery: provide lessons, track progress, and maintain your account.
• Legitimate interests: security monitoring, abuse prevention, and product improvement.
• Consent: optional marketing communications and non-essential cookies where required.
• Legal obligations: compliance, record keeping, and responding to valid requests.

If you opt into marketing, every message includes an unsubscribe mechanism. Operational emails (e.g., password resets) may still be sent because they are necessary to provide the service.

• Essential: required for core functionality like session management and security.
• Preferences: remember settings like theme and interface language.
• Analytics: aggregated measurement of product usage to improve the experience.

You can manage cookies in your browser settings. Some features may not function correctly if you block essential cookies.

• Right to access and receive a copy of personal data we hold about you.
• Right to correct inaccurate or incomplete personal data.
• Right to delete personal data (subject to legal/contractual limits).
• Right to object to or restrict certain processing, where applicable.
• Right to data portability for data you provided to us, where applicable.
• Right to withdraw consent (for consent-based processing).

To make a request, email [email protected]. We may need to verify your identity to protect your data.

• Account data: while your account is active, plus a limited period for security and compliance.
• Support messages: retained to resolve issues and maintain service continuity.
• Analytics: kept in aggregate form where possible.

When retention ends, data is deleted, de-identified, or aggregated, unless longer retention is required by law.

If personal data is transferred across borders, we rely on contractual and technical protections appropriate to the destination and type of data.

• Vendor due diligence and access controls
• Encryption in transit where supported
• Minimum-necessary access, auditing, and monitoring

We aim to respond within a reasonable timeframe. Complex requests may require additional time for verification and processing.