Privacy Policy

We collect what the Academy needs in order to teach you, and nothing we merely find interesting. We do not sell it, we do not advertise against it, and we do not train models on it. You can export it or delete it whenever you like.

Your account: an email address, a display name, a handle, a date of birth, and whatever you choose to add to your profile. The date of birth is held because the Academy is 18-and-over and we have to be able to show that it is.

Your learning: enrollments, progress, submitted work, grades, feedback, attendance, certificates, notes and flashcards.

Your participation: forum posts, replies, reactions, group work, and any image you attach.

Your purchases: what you bought, when, how much, what tax applied, and whether it was refunded. Not your card details, which we never receive.

Technical records: sign-in events, IP addresses and browser information, kept so we can investigate a compromised account and enforce a ban. These are held for twelve months.

Most of it because we cannot deliver a course you bought without it. Some of it, the security records and the audit log, because we have a legitimate interest in the platform not being abused, and because a transcript that could be quietly edited would be worth nothing.

Financial records are kept for as long as tax law requires, which is longer than the rest and not at our discretion.

Instructors see the work, grades and progress of students on their own courses, and nothing from any other course.

Other students see what you post publicly: your handle, your display name, your forum activity, and your position on the leaderboard if you appear on it. They never see your grades, your notes, your purchases or your email address.

Four suppliers process data on our behalf: Supabase (database and authentication), Vercel (hosting), Stripe (payments) and Resend (email). Each is bound to use it only to provide that service.

We disclose data to nobody else unless the law compels it, and we will tell you when that happens unless we are forbidden to.

The Notes Locker is not visible to instructors, moderators or the Owner. That is enforced by the database rather than by a promise in this document: there is no read policy that would let staff see them, so there is no screen anywhere that could.

We set cookies to keep you signed in and to remember your interface preferences. There are no advertising cookies and no third-party analytics trackers on the Academy.

Export everything we hold about you, as a file, from your settings.

Correct anything wrong with it, directly, in the same place.

Delete your account. This erases your personal data, anonymises what has to remain for other people's records, since a forum thread does not vanish from under the people who replied to it, and cannot be undone.

Object to a use, or ask us to restrict it. Write to us and a person will answer.

Complain to your data protection authority if we get it wrong. We would rather you told us first, but it is your right either way.

Data is stored in the region our database provider operates in, and may be processed elsewhere by the suppliers named above under standard contractual protections.

Learning records are kept while your account exists, because a transcript you cannot produce later is not a transcript. Security records are kept twelve months. Financial records are kept as long as the law requires. Everything else goes when you do.