Privacy Policy
This Privacy Policy explains how AcademIA ("we", "us", "our") collects, uses, stores, and shares personal data when you use our website, courses, and related services (the "Platform").
1. Data We Collect
We may collect:
- Account data: email, password hash, role, verification status, last login.
- Profile data: country/location, language, and settings you provide.
- Learning data: enrolled courses, purchases, progress, module/page history, quiz results.
- Technical data: device/browser info, IP-derived analytics signals, session and event logs.
- Payment data: payment metadata from Stripe (we do not store full card numbers).
2. How We Use Data
We use data to:
- Create and secure your account.
- Provide access to courses and track your progress.
- Process purchases and entitlements.
- Send required emails (verification, password reset, receipts, security alerts).
- Improve product quality, content, and user experience.
- Detect fraud, abuse, and policy violations.
3. Analytics (Google Analytics)
We use Google Analytics to understand usage patterns and improve the Platform. Google Analytics may collect information such as page visits, interactions, browser type, and approximate location based on IP.
Where applicable, analytics operates based on your consent preferences (for example through our cookie/privacy banner). You can also limit tracking by using browser privacy controls, blocking cookies, or Google opt-out tools.
4. Cookies and Local Storage
We use cookies and local storage for authentication, settings, learning continuity, and analytics preferences. Some storage is required for core functionality and security.
5. Legal Basis
Depending on your jurisdiction, we process data based on one or more of the following:
- Performance of a contract (providing the Platform).
- Legitimate interests (security, quality, fraud prevention).
- Consent (analytics/preferences where required).
- Compliance with legal obligations.
6. How We Share Data
We may share data with service providers that support the Platform, including:
- Payment processing providers (e.g., Stripe).
- Email delivery providers (verification and reset flows).
- Analytics providers (e.g., Google Analytics).
- Infrastructure and hosting providers.
We do not sell personal data.
7. Data Retention
We keep personal data only as long as needed for service delivery, legal compliance, dispute resolution, and enforcement of agreements. Retention periods may vary by data type and legal requirements.
8. Security
We use reasonable technical and organizational measures to protect data, including encrypted transport (HTTPS), access controls, and secure password handling. No method of transmission or storage is fully risk-free.
9. Your Rights
Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to request portability where applicable.
To exercise rights, contact us using the details below.
10. Children
The Platform is not intended for children under 13. If we learn we collected data from a child under 13 without proper authorization, we will take steps to delete it.
11. International Transfers
Your data may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will be posted on this page with an updated "Last Updated" date.
13. Contact
Email: contact@core-dynamics.io
Company: CoreDynamics
Address: Dubai PO: 9581