Privacy Policy

1. Introduction

Welcome to Learnrail, operated by Blue Horizon Ltd ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at learnrail.org, our web application at app.learnrail.org, and our mobile application (collectively, the "Platform").

By using our Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Platform.

2. Information We Collect

2.1 Personal Information You Provide

When you create an account or use our Platform, we may collect the following personal information:

• Account Information: First name, last name, email address, and password
• Profile Information: Phone number, profile picture (avatar), and biography
• Payment Information: Subscription plan selection, payment method preference, and bank transfer receipts (we do not store credit card numbers directly)

2.2 Information Collected Automatically

When you use our Platform, we automatically collect certain information:

• Learning Activity: Course enrollments, lesson progress, video watch positions, quiz scores, and completion timestamps
• AI Interactions: Messages exchanged with our AI Tutor to provide personalized learning assistance
• Goal and Accountability Data: Goals you create, check-in records, milestones, and messages with your accountability partner
• Gamification Data: Points earned, badges unlocked, streak information, and leaderboard rankings
• Device Information: Device type, operating system, browser type, IP address, and session tokens
• Usage Data: Pages visited, features used, timestamps, and general interaction patterns

2.3 Information from Third Parties

We may receive information from third-party payment processors (such as Paystack) regarding the status of your payment transactions. We do not receive or store your full payment card details.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide Our Services: To create and manage your account, deliver course content, track your learning progress, and enable video resume functionality so you can continue watching from where you stopped
• Personalized Learning: To power our AI Tutor with context about your current course and lesson, providing relevant and helpful educational assistance
• Goal Tracking: To help you set, track, and achieve your learning and career goals
• Accountability: To facilitate communication between you and your assigned accountability partner
• Gamification: To calculate points, levels, streaks, and leaderboard rankings that motivate your learning
• Career Guidance: To provide AI-powered career assessments and course recommendations based on your interests and goals
• Communication: To send you notifications about your learning progress, account updates, and important platform changes
• Payment Processing: To process subscription payments and manage your subscription status
• Improvement: To analyze usage patterns and improve our Platform, content, and features
• Security: To detect and prevent fraud, unauthorized access, and other security threats

4. Data Sharing and Third Parties

We do not sell your personal information to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

We work with trusted third-party service providers to operate our Platform:

• Bunny.net: Content delivery network (CDN) for video streaming. Bunny.net processes video delivery requests but does not receive your personal account data.
• AI Service Providers: We use third-party AI models to power our AI Tutor. Conversation data is sent to process your learning queries. We do not share your full personal profile with AI providers.
• Paystack: Payment processing for subscription transactions. Paystack handles payment data according to their own privacy policy and PCI-DSS standards.
• Hosting Providers: Our servers and database are hosted on secure infrastructure.

4.2 Accountability Partners

If you are paired with an accountability partner through our Platform, your partner will be able to see your name, avatar, and messages you exchange. Partnership statistics (days together, check-ins) are also visible to both parties.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal processes, such as a court order or government request.

5. Data Storage and Security

We take the security of your data seriously and implement appropriate technical and organizational measures:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS/HTTPS
• Password Security: Passwords are hashed and salted before storage; we never store plain-text passwords
• Token-Based Authentication: We use JWT (JSON Web Tokens) for secure session management with automatic token refresh
• Device Management: You can view and manage active login sessions, with limits on simultaneous device connections
• Secure Storage: Sensitive data on mobile devices is stored using platform-specific secure storage mechanisms

While we strive to use commercially acceptable means to protect your personal data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5.1 Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain certain information.

Learning progress and course completion records may be retained in anonymized form for analytics and platform improvement purposes.

6. Cookies and Tracking

Our web application uses cookies and similar technologies for the following purposes:

• Essential Cookies: Required for authentication, session management, and basic Platform functionality
• Preference Cookies: To remember your settings and preferences (such as video playback position)
• Analytics: To understand how users interact with our Platform and identify areas for improvement

Our mobile application uses local storage and secure storage for authentication tokens and user preferences. It does not use traditional browser cookies.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you
• Correction: You can update or correct your personal information through your profile settings
• Deletion: You can request deletion of your account and associated personal data by contacting us at support@learnrail.org
• Data Portability: You can request your data in a machine-readable format
• Objection: You can object to the processing of your personal data in certain circumstances
• Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time

To exercise any of these rights, please contact us at support@learnrail.org. We will respond to your request within 30 days.

8. Children's Privacy

Our Platform is designed for users aged 13 and above. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected data from a child under 13, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at support@learnrail.org.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you via email or through a prominent notice on our Platform.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@learnrail.org
• Company: Blue Horizon Ltd
• Website: https://learnrail.org