Privacy Policy

Last updated: January 1, 2026

1. Data We Collect

We collect your email address (for magic-link authentication), learning progress (lessons completed, quiz scores, spaced repetition schedules), certificates, imported creator content metadata, and locale preferences.

2. How We Use Your Data

Your data is used for authentication, delivering a personalised learning feed, spaced repetition scheduling (SM-2 algorithm), certificate issuance, payment processing, and platform analytics.

3. Data Sharing

We do not sell your data. We share it only with: Stripe (payment processing), Cloudflare (hosting and CDN), and Resend (transactional emails). All third parties operate under data processing agreements.

4. Cookies & Storage

We use a session cookie for authentication and localStorage for locale preference. We do not use third-party tracking cookies or advertising trackers.

5. Data Retention

Data for active accounts is retained until you request deletion. Certificates are preserved permanently as verifiable credentials. Inactive accounts may be purged after 2 years.

6. Your Rights

You may access, correct, export, or delete your data at any time. You can request data portability and withdraw consent. Submit requests to legal@edyvo.com — we respond within 30 days.

7. Security

All data is encrypted in transit via TLS and stored at rest on Cloudflare infrastructure. Passwordless authentication eliminates password-based attack vectors. Access is restricted to authorised team members.

[ CONTACT ]

Questions about privacy? Email legal@edyvo.com