Privacy Policy
// LAST_UPDATED: 2026-01-01
1. Data We Collect
We collect your email address (for magic-link authentication), learning progress (lessons completed, quiz scores, spaced repetition schedules), certificates, imported creator content metadata, and locale preferences.
2. How We Use Your Data
Your data is used for authentication, delivering a personalised learning feed, spaced repetition scheduling (SM-2 algorithm), certificate issuance, payment processing, and platform analytics.
3. Data Sharing
We do not sell your data. We share it only with: Stripe (payment processing), Cloudflare (hosting and CDN), and Resend (transactional emails). All third parties operate under data processing agreements.
4. Cookies & Storage
We use a session cookie for authentication and localStorage for locale preference. We do not use third-party tracking cookies or advertising trackers.
5. Data Retention
Data for active accounts is retained until you request deletion. Certificates are preserved permanently as verifiable credentials. Inactive accounts may be purged after 2 years.
6. Your Rights
You may access, correct, export, or delete your data at any time. You can request data portability and withdraw consent. Submit requests to legal@edyvo.com — we respond within 30 days.
7. Security
All data is encrypted in transit via TLS and stored at rest on Cloudflare infrastructure. Passwordless authentication eliminates password-based attack vectors. Access is restricted to authorised team members.
[ CONTACT ]
Questions about privacy? Email legal@edyvo.com