Privacy Policy

Data we collect

• Account details such as your name, email address, role, verification status, and encrypted password credentials.
• Learning records such as lesson progress, quiz and drill results, notes, review history, preferences, and onboarding choices.
• Security and operational records such as sign-in timestamps, rate-limit identifiers stored as hashes, audit events, browser details submitted with feedback, and service diagnostics.
• Billing identifiers only when paid services are used. Full payment-card details are handled by the payment provider and are not stored by the Academy.

Why we process it

We use this information to provide the service, personalize learning routes, protect accounts, prevent abuse, respond to support requests, understand privacy-safe beta conversion, and improve curriculum quality. We do not sell personal data or use lesson answers for advertising.

Analytics and cookies

We use essential authentication cookies and privacy-limited Vercel Analytics and Speed Insights. Telemetry is filtered to remove query strings and other sensitive URL data. See the Analytics Disclosure for event details and controls.

Sharing, transfers, and retention

Data may be processed by infrastructure, database, email-delivery, analytics, and payment providers only as needed to operate the service. Records are retained while an account is active and for limited periods afterward where required for security, legal, dispute, or backup purposes. Beta feedback and diagnostic records are reviewed and periodically removed when no longer useful.

Your choices and rights

Depending on the circumstances, Jamaica’s Data Protection Act, 2020 may provide rights to be informed, access or correct personal data, object to or restrict certain processing, and request deletion or transfer. Rights are not absolute and identity verification may be required. Use Account Data Export in Settings or contact support to make a request.

Security and contact

We use access controls, scoped authorization, encrypted transport, password hashing, rate limits, audit logging, and token expiration. No internet service can guarantee absolute security. Privacy and data-rights requests may be sent to netdefendja@gmail.com.