Privacy Policy

Data we collect

• Account details such as your name, email address, role, verification status, and encrypted password credentials.
• Learning records such as lesson progress, quiz and drill results, notes, review history, preferences, and onboarding choices.
• Security and operational records such as sign-in timestamps, rate-limit identifiers stored as hashes, audit events, browser details submitted with feedback, and service diagnostics.
• Billing identifiers only when paid services are used. Full payment-card details are handled by the payment provider and are not stored by the Academy.

Why we process it

We use this information to provide the service, personalize learning routes, protect accounts, prevent abuse, respond to support requests, understand privacy-safe beta conversion, and improve curriculum quality. We do not sell personal data or use lesson answers for advertising.

Analytics and cookies

We use essential authentication cookies and privacy-limited Vercel Web Analytics. Telemetry is filtered to remove query strings and other sensitive URL data. See the Analytics Disclosure for event details and controls.

Sharing and retention

Data may be processed by infrastructure, database, email-delivery, analytics, and payment providers only as needed to operate the service. Records are retained while an account is active and for limited periods afterward where required for security, legal, dispute, or backup purposes. Beta feedback and diagnostic records are reviewed and periodically removed when no longer useful.

International processing and transfers

Some service providers may process or store personal data outside Jamaica, including in the United States or other locations where they operate. Where Jamaican law requires it, we take reasonable steps designed to use providers, contractual protections, and security measures that provide an appropriate level of protection for transferred personal data.

Children's privacy

The Academy is intended for invited learners pursuing education or professional development and is not directed to children. We do not knowingly create accounts for children without the authorization required by applicable law. A parent or guardian who believes a child provided personal data without appropriate authorization should contact us so the account and information can be reviewed.

Your choices and rights

Depending on the circumstances, Jamaica’s Data Protection Act, 2020 may provide rights to be informed, access or correct personal data, object to or restrict certain processing, request deletion or transfer, and not be subject to certain solely automated decisions. Rights are not absolute and identity verification may be required. Contact support to make a request; self-service data downloads are not enabled.

Security, contact, and complaints

We use access controls, scoped authorization, encrypted transport, password hashing, rate limits, audit logging, and token expiration. No internet service can guarantee absolute security. NetDefend Group operates the Academy and privacy and data-rights requests may be sent to netdefendja@gmail.com.

If a privacy concern is not resolved through support, you may have the right to make a complaint to Jamaica’s Office of the Information Commissioner. Its current contact information and request guidance are available at oic.gov.jm.