Privacy Policy

We collect information in the following ways:

• Account information you provide directly — your name, email address, password (stored as a secure hash, never in plain text), and an optional profile photo.
• Information from third-party sign-in — if you register or log in using Google (or another supported provider), we receive your name, email address, and profile picture from that provider, as permitted by your settings with them.
• Learning activity — the courses you enroll in, your lesson progress, quiz attempts and answers, assignment submissions and files you upload, and certificates you earn.
• Communications — messages you send us for support, and records of notifications we send you (e.g. enrollment confirmations, assignment feedback, certificate issuance).
• Preferences — your chosen interface language and, where stored, your light/dark theme preference.
• Technical data — IP address, browser type, device information, and access timestamps, collected automatically for security, fraud prevention, and troubleshooting.

We use the information we collect to:

• Provide, operate, and maintain the Service, including enrolling you in courses and tracking your progress.
• Authenticate your account and keep it secure.
• Grade quizzes and assignments, and issue completion certificates.
• Send you service-related communications, such as enrollment confirmations, assignment reviews, and password reset emails.
• Respond to your support requests.
• Detect, investigate, and prevent fraudulent, unauthorized, or illegal activity.
• Improve and develop the Service.

We use cookies and comparable technologies (such as browser local storage) to keep you signed in, protect your account, and remember your language and display preferences. We do not currently use advertising or third-party tracking cookies.

For full details on what we use and how to manage your preferences, see our Cookie Policy, linked in the footer of every page.

We do not sell your personal information. We share information only in the following circumstances:

• Service providers — we use trusted third parties to operate the Service on our behalf, such as email delivery providers for transactional email (e.g. password resets and course notifications) and hosting providers who store our infrastructure and data. These providers are only permitted to use your data to perform services for us.
• Instructors — if you enroll in a course, the instructor of that course can see your enrollment, progress, quiz results, and assignment submissions for that course, so they can teach and grade effectively.
• Legal requirements — if required to do so by law, or in the good-faith belief that such action is necessary to comply with legal process, protect our rights, or protect the safety of our users or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy continuing to apply to your information.

We retain your personal data for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

We use administrative, technical, and physical safeguards designed to protect your information, including encrypted connections (HTTPS), hashed passwords, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data — most of this you can update directly from your Profile settings.
• Request deletion of your personal data.
• Object to or restrict certain processing of your data.
• Request a copy of your data in a portable format.

To exercise any of these rights, contact us using the details in the "Contact Us" section below. We will respond within a reasonable timeframe.

The Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

Your information may be processed and stored in countries other than your own. Where we transfer information internationally, we take reasonable steps to ensure it receives an adequate level of protection.

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this Policy periodically.

If you have questions about this Privacy Policy or how we handle your data, please contact us at support@trackaat.com.