Privacy Policy

Leama · Effective date: 23 June 2026 · Last updated: 23 June 2026

This Privacy Policy explains what personal data Leama ("we", "us") collects when you use the platform, why we collect it, how long we keep it, and the rights you have over it. It applies to everyone who creates an account or uses Leama.

1. Who is responsible for your data

Leama is the data controller for the personal data described below. If you have any questions about this policy or wish to exercise your rights, contact us at privacy@leama.example.

2. What data we collect and why

We collect only what we need to run the service:

Email address — to identify your account, sign you in, and send essential service emails (verification, password reset, account changes). Legal basis: performance of our contract with you.
Display name — shown in the app for your own benefit. Legal basis: performance of contract.
Password — stored only as a salted hash, never in plain text. Legal basis: performance of contract.
IP address and browser information — recorded for each active sign-in session so we can protect the service against abuse and so you can recognise your own devices in settings. Legal basis: our legitimate interest in security.
Learning progress — which lessons you have completed and where you left off, so we can show your progress. Legal basis: performance of contract.
Preferences — theme, font size, sound, language, and timezone. Legal basis: performance of contract.
Subscription status — your tier and, if paid, its validity period. Legal basis: performance of contract.

3. How we use your data

We use your data solely to provide and maintain the learning platform: to authenticate you, deliver and track lessons, apply your preferences, manage subscriptions, send essential service emails, and keep the service secure. We do not use your data for advertising, and we do not profile you for any purpose unrelated to delivering the service.

4. Cookies

Leama uses only strictly necessary first-party cookies: a session cookie to keep you signed in, a security (CSRF) cookie to protect form submissions, and a small preferences value. We do not use advertising or third-party tracking cookies, so no cookie-consent banner is required.

5. Who we share data with

We do not sell your personal data, and we do not share it with third parties for their own purposes. We rely on service providers to operate Leama — for example, to deliver transactional emails such as verification and password-reset messages, and, if paid plans are introduced, to process payments. Such providers act only on our instructions under a data processing agreement, and we name them in this policy when introduced.

6. How long we keep it

We keep your account data for as long as your account exists. When you delete your account, your data — including progress, preferences, sessions, and subscription records — is permanently removed. Sign-in session records (including IP addresses) are removed automatically when the session expires. Short-lived email tokens (verification, reset) are deleted shortly after use.

7. Your rights

You have the right to:

Access and portability — download a copy of all data tied to your account at any time from Settings → Account → "Download my data".
Rectification — change your email, display name, and password in Settings.
Erasure — permanently delete your account and all associated data from Settings → Account.

To exercise any right not available directly in the app, contact us at the address in section 1. If you believe we have mishandled your data, you may also lodge a complaint with your local data protection authority.

8. How we protect your data

Connections to Leama are encrypted in transit. Passwords are stored only as hashes, access to admin functions is restricted, and we apply standard protections against common web vulnerabilities. No system is perfectly secure, but we take reasonable measures to safeguard your data.

9. Children

You must be at least 13 years old to use Leama, consistent with our Terms of Service. We do not knowingly collect data from children under 13.

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Significant changes will be communicated through the platform.

Questions about your privacy? Contact us at privacy@leama.example.

← Back to registration