Welcome to Learni's Privacy Policy. At NENU Corp, doing business as Learni, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy provides a comprehensive explanation of how we collect, use, share, and safeguard your data when you use our educational platform at learni.app and all related services.

Our commitment to privacy is fundamental to everything we do. We believe that educational technology should enhance learning without compromising user privacy. We have designed our platform from the ground up with privacy in mind, ensuring that your personal information is treated with the utmost care and respect.

This policy applies to all users of our platform, including educators, students, educational institutions, and any other individuals who access or use Learni. By creating an account, accessing, or using our services, you acknowledge that you have read, understood, and agree to the collection and use of your information as described in this Privacy Policy.

We are transparent about our data practices and are committed to giving you control over your personal information. If you have any questions or concerns about this policy or our privacy practices, please contact us at team@learni.app.

We collect various types of information to provide and improve our educational services. The information we collect falls into several categories, each serving specific purposes in delivering a personalized and effective learning experience.

Account Information

When you create an account on Learni, we collect basic information necessary to establish and maintain your account. This includes your full name, which helps us personalize your experience and enables proper identification within educational contexts. We collect your email address as your primary means of account access and communication. If you choose to provide it, we also collect your institution or school name, which helps us understand your educational context and potentially connect you with your institution's features. We record your account type, distinguishing between educator and student accounts to provide appropriate features and permissions. Your password is collected and immediately encrypted using industry-standard hashing algorithms, ensuring that even we cannot access your actual password.

Educational Content and Activity

The core of our service involves educational content, and we collect information related to your educational activities. This includes all quizzes and questions you create as an educator, allowing you to build and manage your educational materials. We collect student responses to quizzes, including answer selections and written responses, to provide immediate feedback and track learning progress. Performance metrics and scores are collected to generate insights for both educators and students. Any study notes or materials you create or upload are stored securely to support your learning journey. We also track course enrollments to manage access permissions and organize educational content appropriately.

Usage and Interaction Data

To improve our service and understand how users interact with our platform, we collect usage information. This includes tracking which features you use and actions you take within the platform, helping us understand which tools are most valuable to our users. We monitor time spent on different activities to provide insights into study patterns and engagement levels. Quiz completion rates and patterns are analyzed to help educators understand student engagement and identify areas where students may need additional support. We track page views and navigation paths to optimize the user interface and ensure a smooth user experience.

Technical and Device Information

We collect certain technical information to ensure the security and proper functioning of our platform. Your IP address is collected for security purposes and to determine your general geographic location for compliance with regional regulations. We collect information about your browser type and version to ensure compatibility and optimal performance. Device information, including device type and operating system, helps us provide a responsive experience across different platforms. Screen resolution and device settings information ensures that our interface displays correctly on your device. Time zone information is collected to properly timestamp activities and schedule features according to your local time.

Communication Data

When you communicate with us through our platform or support channels, we collect the content of your messages, feedback, and support requests. This helps us provide better customer service and improve our platform based on user feedback.

Information We Do Not Collect

It is equally important to be clear about what we do not collect. We do not collect sensitive personal information such as social security numbers, financial information beyond what is necessary for payment processing through Stripe, health or medical information, or biometric data. We do not use tracking technologies for advertising purposes or collect information from third-party social media platforms unless you explicitly choose to connect such accounts.

We use the information we collect for various purposes, all aimed at providing, maintaining, and improving our educational platform. Our use of your information is always aligned with our mission to create effective, privacy-respecting educational technology.

Service Provision and Account Management

The primary use of your information is to provide our core educational services. We use your account information to create and maintain your account, authenticate your identity when you log in, and ensure secure access to your educational content. Your profile information helps us personalize your experience and display appropriate content based on your role as an educator or student.

Educational Features and Content Delivery

We use your educational content and activity data to deliver the full range of our platform's features. This includes storing and organizing the quizzes and educational materials you create, processing quiz submissions in real-time to provide immediate feedback to students, and generating comprehensive analytics and performance reports for educators. We use this data to track learning progress over time and identify areas where students excel or need additional support.

Artificial Intelligence and Smart Learn Features

Our Smart Learn AI features use your educational data to provide personalized learning experiences. We analyze quiz performance patterns to generate customized study recommendations, create adaptive learning paths based on individual progress, and provide AI-powered explanations and hints when students struggle with concepts. All AI processing is done with privacy in mind, using anonymized data whenever possible and never sharing personally identifiable information with AI providers.

Platform Improvement and Development

We continuously analyze usage patterns to enhance our platform. This involves identifying which features are most valuable to users and prioritizing development accordingly, detecting and fixing bugs or technical issues that affect user experience, and developing new educational tools based on user needs and feedback. We optimize platform performance to ensure fast, reliable access to educational content.

Communication and Support

We use your contact information to send important service-related communications, including account notifications, security alerts, and updates about significant changes to our platform. If you contact our support team, we use your information to respond to your inquiries and resolve any issues you may experience.

Security and Compliance

Your information is used to maintain the security and integrity of our platform. This includes detecting and preventing fraudulent activity, investigating and addressing violations of our terms of service, and complying with legal obligations and requests from law enforcement when required by law.

What We Explicitly Do Not Do

We want to be absolutely clear about the boundaries we set on data usage. We will never sell or rent your personal information to third parties for any reason. We do not use your educational data for advertising purposes or to build advertising profiles. We do not share your data with marketing companies or data brokers. We do not engage in commercial profiling or use your educational activities to make assumptions about your interests outside of education. We do not use your data for any purpose not directly related to providing and improving our educational services.

Data Minimization Principle

We follow the principle of data minimization, meaning we only collect and use the minimum amount of information necessary to provide our services effectively. If we no longer need certain information for the purposes outlined in this policy, we will securely delete or anonymize it.

We take the sharing and disclosure of your information very seriously. We only share your information in specific, limited circumstances, always with appropriate safeguards in place to protect your privacy.

Service Providers and Third-Party Partners

To operate our platform effectively, we work with carefully selected third-party service providers. Each of these providers has been chosen for their commitment to security and privacy, and all are bound by strict contractual obligations to protect your data.

Payment Processing: We use Stripe as our payment processor for all subscription and payment-related services. Stripe handles all payment card information directly, meaning we never see or store your credit card numbers, bank account details, or other sensitive financial information. Stripe is certified to the highest industry standards for payment processing and data security.

Infrastructure and Hosting: Our platform is hosted on Hetzner's secure cloud infrastructure. Hetzner provides the servers and infrastructure necessary to deliver our service reliably and securely. They have access only to the technical infrastructure and cannot access your personal educational content without our explicit instruction for technical support purposes.

Security and Performance: We use Cloudflare for content delivery, DDoS protection, and enhanced security features. Cloudflare helps ensure that our platform loads quickly and remains available even under high traffic or potential attack scenarios. They process only the minimum technical information necessary to provide these services.

Analytics: We use Plausible Analytics, a privacy-focused analytics service that helps us understand how users interact with our platform. Unlike traditional analytics services, Plausible does not use cookies, does not track users across websites, and is fully compliant with privacy regulations. They provide us with aggregated, anonymized insights about platform usage.

Artificial Intelligence Services: For our AI-powered features, we work with leading AI providers such as OpenAI and Google. When using these services, we take special precautions to protect your privacy. We anonymize data before sending it to AI services, removing any personally identifiable information. We never share complete user profiles or link AI queries to specific user accounts. We use AI services only for educational enhancement, not for profiling or data analysis.

Educational Institution Partnerships

If you access Learni through an educational institution, we may share certain information with your institution's administrators. This typically includes enrollment information, general usage statistics, and performance metrics as authorized by your institution. We only share this information based on explicit agreements with educational institutions and always in compliance with educational privacy laws such as FERPA.

Legal Requirements and Safety

We may disclose your information in certain legal circumstances. This includes situations where we are required to comply with a valid legal process such as a court order, subpoena, or search warrant. We may also disclose information to protect the rights, property, or safety of Learni, our users, or others, including to prevent imminent physical harm or to investigate potential violations of our terms of service. In cases of business transfers, such as a merger or acquisition, user information may be transferred as part of the business assets, but it would remain subject to the promises made in this privacy policy.

Consent-Based Sharing

We may share your information in other circumstances with your explicit consent. This might include sharing your success stories or testimonials (with your permission), connecting you with other users for collaborative educational purposes at your request, or integrating with third-party educational tools that you choose to connect to your account.

Aggregate and Anonymized Data

We may share aggregated and anonymized data that cannot be used to identify you personally. This might include publishing general statistics about platform usage, sharing educational insights based on anonymized performance data, or contributing to educational research with completely de-identified data sets.

Data Protection Standards

For all information sharing scenarios, we maintain strict standards. We require all third parties to agree to confidentiality obligations and appropriate security measures. We limit shared information to the minimum necessary for the specific purpose. We regularly audit our third-party relationships to ensure continued compliance with our privacy standards. We maintain a record of what information is shared and for what purposes.

We believe in empowering you with control over your personal information. You have various rights regarding your data, and we provide multiple ways for you to exercise these rights.

Access to Your Information

You have the right to know what personal information we have collected about you. You can access your information through your account settings, where you can view and manage your profile information, review your educational content and activity history, and see the data associated with your account. We also provide data export tools that allow you to download your information in commonly used formats, making it easy to review or transfer your data.

Correction and Update Rights

You have the right to correct inaccurate information or update information that has changed. You can edit most of your profile information directly through your account settings at any time. For information that cannot be directly edited, or if you need assistance with corrections, our support team is available to help ensure your information is accurate and up to date.

Data Portability

We support your right to data portability. You can export your educational content, including quizzes you've created, performance data, and study materials, in standard formats such as CSV, JSON, or PDF. This allows you to maintain your own records, transfer to another platform if desired, or analyze your data using external tools.

Account Deletion and Data Erasure

You have the right to delete your account and have your personal information erased from our systems. When you request account deletion, we will remove your personal information from our active databases, except where we have a legal obligation to retain certain records. Some anonymized data may be retained for statistical purposes, but this cannot be linked back to you. We will notify you of any information that cannot be deleted and explain the legal basis for retention.

Communication Preferences

You have control over how we communicate with you. You can opt out of non-essential communications such as newsletters, product updates, and promotional content through your account settings or by using the unsubscribe links in our emails. Note that we will still send essential service communications related to your account security, legal updates, or critical platform changes.

Privacy Rights for Specific Regions

For European Union Residents (GDPR): If you are a resident of the European Union, you have additional rights under the General Data Protection Regulation. These include the right to object to certain processing of your data, the right to restrict processing in specific circumstances, and the right to lodge a complaint with your local data protection authority. We process data under the legal bases of consent, contractual necessity, and legitimate interests in providing educational services.

For California Residents (CCPA/CPRA): If you are a California resident, you have specific rights under California privacy laws. These include the right to know what categories of personal information we collect and how we use it, the right to request deletion of your personal information, the right to opt-out of any sale of personal information (though we do not sell personal information), and the right to non-discrimination for exercising your privacy rights.

For Other Jurisdictions: We respect privacy rights granted under all applicable laws. If you reside in a jurisdiction with specific privacy rights not mentioned here, please contact us to learn how we support your rights under local law.

Exercising Your Rights

To exercise any of these rights, you can use the self-service options in your account settings for immediate action, contact our support team at team@learni.app with your specific request, or use our dedicated privacy request form available on our website. We will respond to your request within the timeframe required by applicable law, typically within 30 days.

Verification Process

To protect your privacy and security, we may need to verify your identity before processing certain requests. This typically involves confirming your account ownership through your registered email address or answering security questions about your account. We will never ask for sensitive information like passwords as part of the verification process.

Children's Privacy Rights

For users under 18 years of age, we provide additional protections. Parents or guardians may request access to their child's information, request corrections or deletions, and manage privacy settings on behalf of their child. Educational institutions acting in loco parentis may also exercise these rights for student accounts under their management.

The security of your personal information is of paramount importance to us. We implement comprehensive security measures to protect your data from unauthorized access, disclosure, alteration, and destruction.

Technical Security Measures

We employ industry-standard encryption to protect data both in transit and at rest. All connections to our platform use TLS (Transport Layer Security) encryption to ensure that data transmitted between your device and our servers cannot be intercepted. Sensitive data stored in our databases is encrypted using AES-256 encryption. Passwords are hashed using bcrypt with salt, ensuring that even we cannot access your actual password.

Infrastructure Security

Our infrastructure is designed with security at its core. We use secure cloud hosting with regular security updates and patches. Our servers are protected by firewalls and intrusion detection systems. We implement DDoS protection through Cloudflare to ensure platform availability. Regular security audits and vulnerability assessments are conducted to identify and address potential weaknesses.

Access Controls

We strictly limit access to personal information to authorized personnel only. Employees and contractors with access to user data are bound by confidentiality agreements and are trained in data protection best practices. We use role-based access controls to ensure that individuals can only access the information necessary for their specific job functions. All access to user data is logged and regularly audited.

Data Breach Response

Despite our best efforts, no security system is completely impenetrable. In the unlikely event of a data breach, we have a comprehensive incident response plan. We will promptly investigate any suspected breach, take immediate action to secure our systems and prevent further unauthorized access, assess the scope and impact of the breach, and notify affected users within 72 hours as required by applicable laws. We will also provide guidance on steps you can take to protect yourself and cooperate with law enforcement and regulatory authorities as appropriate.

Your Role in Security

Security is a shared responsibility. You can help protect your account by using a strong, unique password for your Learni account, enabling two-factor authentication when available, keeping your account credentials confidential, logging out of shared or public devices, and promptly reporting any suspicious activity to our security team.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Active Account Data

As long as your account remains active, we retain your account information and educational content to provide our services. This includes your profile information, educational materials you've created, performance data and analytics, and communication history with our support team.

Inactive Account Policy

If your account becomes inactive (no login for 24 consecutive months), we may reach out to confirm whether you wish to maintain your account. If we cannot reach you or you do not respond, we may deactivate your account and schedule your data for deletion, while providing you with an opportunity to reactivate and recover your data within a grace period.

Post-Deletion Retention

After you delete your account, we may retain certain information for limited periods. Some data may be kept in backup systems for up to 90 days as part of our disaster recovery procedures. Certain records may be retained for legal compliance, such as transaction records for tax purposes (typically 7 years) and records necessary to resolve disputes or enforce our terms. Anonymized data that cannot be linked back to you may be retained indefinitely for analytics and service improvement.

Educational Institution Data

For accounts associated with educational institutions, retention periods may be governed by the institution's policies and applicable educational records laws. We work with institutions to ensure compliance with regulations like FERPA while respecting user privacy rights.

As a U.S.-based company, we primarily process and store data in the United States. If you access our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

Legal Basis for Transfers

We ensure that international data transfers comply with applicable laws. For transfers from the European Economic Area (EEA), UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, ensuring that service providers meet adequate data protection standards, and obtaining your consent where required by law.

Your Rights Regarding International Transfers

If you are located in a jurisdiction that restricts international data transfers, you have the right to request information about the safeguards we use for such transfers, object to the transfer of your data in certain circumstances, and withdraw consent for transfers where we rely on consent as the legal basis.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We are committed to providing notice of any material changes.

Notification of Changes

When we make material changes to this Privacy Policy, we will notify you by email to the address associated with your account at least 30 days before the changes take effect. We will also display a prominent notice on our platform and update the "Last Updated" date at the top of this policy.

Your Choices Regarding Changes

If you disagree with any changes to this Privacy Policy, you may close your account before the changes take effect. Continued use of our services after the changes take effect constitutes acceptance of the revised policy.

Archive of Previous Versions

We maintain an archive of previous versions of our Privacy Policy. If you would like to review earlier versions, please contact our privacy team.

We welcome your questions, comments, and concerns about privacy. If you have any questions about this Privacy Policy or our privacy practices, please don't hesitate to contact us.

Contact Information

Email: team@learni.app
Subject Line: Privacy Inquiry
Response Time: We aim to respond to all privacy inquiries within 48 hours.

Mailing Address:
NENU Corp
Attn: Privacy Team
Erie, Pennsylvania, USA

Data Protection Officer

While we are not legally required to have a Data Protection Officer, we have designated a privacy team responsible for overseeing our data protection strategy and implementation. You can reach our privacy team at the contact information above.

Supervisory Authorities

If you are located in the European Economic Area and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority. However, we encourage you to contact us first so we can try to resolve your concerns directly.

Thank you for trusting Learni with your education and your privacy. We are committed to maintaining that trust through transparent and responsible data practices.