Privacy policy

[Company legal name] is the controller of personal data processed through the Service. This policy explains what we collect and why.

What we collect - Account data: name, email address, password (stored only as a salted scrypt hash), preferred currency and marketing preference. - Learning data: lessons watched, playback position, completion, saved courses, notes you write. - Billing data: subscription status, plan, invoices and amounts. Card details are collected and stored by our payment provider (Stripe), never by us. - Technical data: a session cookie that keeps you signed in, basic server logs (IP address, user agent) for security.

Why we use it (legal bases) - To provide the Service you signed up for (contract). - To process payments and keep accounting records (contract, legal obligation). - To keep the Service secure and prevent abuse (legitimate interests). - To send newsletters, only if you opted in (consent — withdraw any time).

Processors We use carefully selected providers to run the Service: hosting and database, payment processing (Stripe), video hosting [e.g. Vimeo / Bunny / Cloudflare / Mux], and email delivery [provider]. They process data only on our instructions. Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses.

Retention Account and learning data are kept while your account exists. When you delete your account we remove it, except billing records we must keep for tax and accounting law (typically [X] years).

Your rights Depending on where you live you may have rights to access, correct, delete, restrict or port your data and to object to processing. Contact [support@your-domain.com]. You may also complain to your local data-protection authority.

Cookies See the Cookie policy. We don’t use advertising cookies.

Contact [Company legal name], [Registered address] · [support@your-domain.com] · [Data protection officer / EU or UK representative, if required]