Privacy Policy

Information We Collect

We collect the following categories of information to provide our AI-powered personalized learning platform:

Account and Profile Information

Email address and authentication credentials
Display name and user profile preferences
Subscription tier (Learner or Mastery Plan)
Account creation date and last login information

Learning Data and Progress

Roadmap Information: Skills selected, experience levels, learning goals, time commitments, and roadmap preferences
Learning Progress: Lessons completed, current lesson position, days accessed, and completion timestamps
Quiz Responses: Answers submitted, scores achieved (including individual attempt data), and performance metrics
Exercise Submissions: Code submissions, written responses, solutions provided, and AI feedback generated
Theory Completion: Sections marked complete, time spent on lessons, and interaction patterns
User Notes: Notes created in the Learning Vault, custom annotations, and saved concepts

Usage and Behavioral Data

Platform interactions: clicks, page views, feature usage patterns
Learning velocity and pace metrics
Session duration and frequency of access
Device information: browser type, operating system, device model
IP address and general location data (city/country level)
Referral source and user acquisition channel

Technical Data

Browser and device identifiers (via cookies and local storage)
Crash reports and error logs
Platform version and feature flag assignments
API usage patterns and endpoint calls

Communication Data

Support inquiries and help desk communications
Email communication preferences
Feedback provided through surveys or feature requests

How We Use Your Information

Your data enables the core functionality of LearnOptima's AI-powered personalization:

AI Roadmap Generation

Your skill selection, experience level, learning goals, and time commitment are processed by Claude, GPT-4, and Gemini AI models to generate personalized 30-day or 100-day learning roadmaps tailored specifically to your needs.

Adaptive Learning

Quiz scores and exercise responses inform real-time content difficulty adjustments. Our algorithms analyze performance patterns to slow down on difficult concepts, accelerate through mastered material, and recommend targeted reviews.

Progress Analytics

We track learning velocity, retention patterns, time investment, and skill mastery to provide detailed analytics dashboards (available on Mastery Plan). This data powers the learning trajectory visualization and performance insights.

Exercise Evaluation

Coding and written responses are analyzed using AI to provide intelligent feedback, check correctness against expected solutions, and offer personalized improvement suggestions.

Engagement Features

We calculate daily streaks, generate milestone notifications, and send streak-recovery emails based on your access patterns to maintain motivation and accountability.

Platform Security

Usage patterns and authentication data are analyzed to detect suspicious activity, prevent abuse, and protect account security.

AI Model Training and Improvement

We use aggregated and anonymized learning data to:

Improve AI model accuracy for content generation and feedback
Enhance adaptive learning algorithms
Identify curriculum gaps and optimize content quality
Benchmark learning effectiveness across different skills and populations

Important: Individual identifiable information is removed before this analysis. We do not train models on personally identifiable learning data without explicit consent.

Communications

Send service notifications, roadmap generation updates, and lesson recommendations
Notify about streak recovery opportunities and learning milestones
Provide customer support and respond to inquiries
Share platform updates, maintenance notices, and feature announcements

Information Sharing and Disclosure

Core Principle: We do not sell personal data to third parties. We do not monetize your learning data through data brokers.

We share information only in these specific circumstances:

Service Providers

We employ third-party service providers under strict data processing agreements:

Cloud Infrastructure: Firebase (Google Cloud Platform) for authentication, data storage, and backend services
AI Models: Anthropic (Claude), OpenAI (GPT-4), and Google (Gemini) process prompts and educational content for roadmap generation and feedback
Analytics: Firebase Analytics for usage pattern analysis and performance monitoring
Email Services: Email service providers for notification delivery

These providers are contractually obligated to maintain data confidentiality and use data only for specified purposes.

Legal Requirements

We may disclose personal information when required by law or in response to:

Court orders, subpoenas, or other legal process
Investigations of suspected illegal activity
Protection of legal rights, privacy, or safety of our users, employees, or the public
Compliance with applicable laws and regulations

Business Transactions

In the event of merger, acquisition, bankruptcy, or sale of assets, user data may be transferred as part of that transaction. You will be notified of any such change and any choices regarding your data.

Aggregated Data

We may share aggregated, de-identified data that cannot reasonably identify you:

Industry benchmarks (e.g., "average completion time for Python roadmaps")
Curriculum effectiveness studies
Public case studies with explicit anonymization

Data Storage and Retention

Where Your Data Is Stored

Primary: Google Cloud Platform (Firebase) with multi-region redundancy
Geographic Locations: Data may be stored in the United States and other Google Cloud regions
Backups: Encrypted backups maintained in separate secure locations for disaster recovery

Retention Periods

Active Account: All learning data retained while your account is active
Account Deletion: Data deleted within 30 days of account deletion request
Backup Copies: Backup copies may persist for up to 90 days for disaster recovery
Analytics: Aggregated usage analytics retained indefinitely for platform improvement
Support Records: Support communications retained for 1 year for quality assurance
Compliance: Data retained longer if required by applicable laws

Data Deletion

Upon account deletion, we:

Delete your account data from active databases within 30 days
Remove your roadmaps, lesson progress, notes, and quiz responses
Anonymize or delete personally identifiable information
Maintain aggregate data for platform analytics (without identifying you)

Note: Backup copies may persist briefly beyond deletion for redundancy purposes.

Your Rights and Choices

Depending on your location, you have the following rights regarding your personal data:

Right to Access

Request a copy of all personal information we hold about you in a portable, machine-readable format.

Right to Correction

Update, correct, or amend inaccurate or incomplete information. You can edit profile information directly in account settings.

Right to Deletion

Request deletion of your account and associated personal data. Deleted data cannot be recovered, though backup copies may persist briefly.

Right to Portability

Download your learning progress, notes, roadmap data, and certificates in standard formats for transfer to other platforms.

Right to Object

Opt-out of non-essential data processing, including marketing communications and optional analytics.

Right to Restrict Processing

Request limitation of how we process your data while we verify accuracy or address disputes.

How to Exercise Your Rights

Submit requests through any of these methods:

Account Settings: Use your account management portal for data access and deletion
Email: teamlearnoptima@valynx.net
Support Form: Submit requests via our contact page
Response Time: We aim to respond within 30 days; complex requests may require up to 60 days

Communication Preferences

You can manage your communication preferences:

Update email preferences directly in your account settings
Unsubscribe from marketing emails using the link in every email
Disable push notifications through your browser or device settings
Note: Service notifications (roadmap updates, quiz results) cannot be disabled as they are essential

Industry Standard

Security Measures

We implement comprehensive technical, administrative, and physical safeguards to protect your information:

Technical Controls

Encryption in Transit: TLS 1.2+ encryption for all data transmitted between your browser and our servers
Encryption at Rest: AES-256 encryption for sensitive data stored in databases
HTTPS Only: All connections to our platform use HTTPS; no unencrypted HTTP allowed
Web Application Firewall: Protection against common attacks (SQL injection, XSS, DDoS)
Intrusion Detection: Continuous monitoring for suspicious activities

Authentication and Access Control

Firebase Authentication: Secure credential management with Google infrastructure
Password Requirements: Minimum complexity enforced at signup
Session Management: Automatic logout after 30 minutes of inactivity
Access Logs: All access to sensitive systems logged for audit purposes
Principle of Least Privilege: Employee access limited to data necessary for their role

Infrastructure Security

Cloud Provider: Google Cloud Platform with SOC 2 Type II compliance
Firewalls: Network-level restrictions on database access
DDoS Protection: Google Cloud DDoS mitigation automatically enabled
Regular Patching: Systems updated with security patches within 24-48 hours of release

Data Protection and Recovery

Automated Backups: Daily encrypted backups with geographically distributed copies
Disaster Recovery: Tested recovery procedures with 24-hour recovery time objective
Data Redundancy: Multi-region replication to prevent data loss

Administrative Safeguards

Employee Training: All staff complete mandatory security and privacy training
Background Checks: Conducted for employees with data access
Non-Disclosure Agreements: All staff bound by confidentiality obligations
Vendor Management: Third-party service providers audited and contractually bound

Important Disclaimer: While we maintain comprehensive security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security. In the event of a security incident, we will notify affected users as required by law.

Account Policy and Abuse Prevention

To maintain platform integrity and provide fair access, we enforce strict account policies:

Account Ownership

One account per individual user only
Accounts are non-transferable and non-shareable
Account credentials must not be shared or used by multiple people
Temporary, test, or fraudulent accounts are prohibited

API and Technical Abuse

API usage must comply with published rate limits and fair use guidelines
Automated scraping or data harvesting is prohibited
Reverse engineering, decompiling, or attempting to extract proprietary information is forbidden
Creating bots or scripts to bypass platform features violates terms
Any attempt to gain unauthorized access to systems or other users' data will be reported to authorities

Fraudulent Access

Using multiple accounts to circumvent limitations is prohibited
Accessing accounts with fraudulent credentials or stolen information violates policy
Attempting to gain unauthorized Mastery Plan features violates terms
Payment fraud, subscription abuse, or chargebacks will result in termination

Consequences of Policy Violation

Immediate action: Any violation of these policies will result in immediate account suspension and permanent ban without prior notice. This includes:

Permanent account termination
Deletion of all associated learning data and progress
Revocation of any certificates earned
Blocking of email addresses and associated devices
Reporting to law enforcement if criminal activity is suspected
Addition to LearnOptima's permanent ban list shared across all Valynx services

No appeals process: LearnOptima reserves the right to enforce these policies immediately and without exception. Violations will not be subject to reinstatement requests or appeals.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience and analyze platform usage:

Essential Cookies

Required for core platform functionality. Cannot be disabled without breaking the platform.

Authentication tokens (user login state)
Session identifiers
CSRF protection tokens
Theme preferences (light/dark mode)

Analytics Cookies

Help us understand how you use LearnOptima to improve features and performance.

Firebase Analytics tracking user interactions
Page view and event tracking
Performance monitoring data
Crash reporting information

You can opt-out of analytics in your account settings.

Preference Cookies

Remember your settings and customizations across sessions.

UI preferences (collapsed/expanded sections)
Display preferences (font size, contrast)
Notification preferences
Language selection

Third-Party Cookies

Firebase (Google) may set cookies for authentication and analytics. Google's cookie policy applies to their data collection.

Managing Cookies

You can control cookies through your browser settings:

Browser Controls: All modern browsers allow you to view, delete, and block cookies
Essential Cookies: Cannot be disabled without breaking the platform
Analytics: Opt-out available in LearnOptima account settings
Third-Party: Use browser privacy settings to block third-party cookies

International Data Transfers

LearnOptima operates globally and your data may be transferred to and processed in countries outside your country of residence.

Primary Data Processing Locations

Primary: United States (Google Cloud Platform regions)
Secondary: European regions (for backup and redundancy)
AI Processing: Data sent to Anthropic (US), OpenAI (US), and Google (US) for model processing

Legal Safeguards

Data Processing Agreements: Standard Contractual Clauses with all data processors
GDPR Compliance: Compliance with EU General Data Protection Regulation requirements
Privacy Shield Alternative: Mechanisms in place for EU-US data transfers
Data Transfer Impact Assessment: Regular review of transfer adequacy

Important: By using LearnOptima, you consent to the transfer, storage, and processing of your data in the United States and other countries where our service providers operate. These countries may have different data protection laws than your home country.

Children's Online Privacy

LearnOptima is not designed for users under 13 years old and we do not knowingly collect personal information from children under 13.

Age Requirements

Minimum Age: 13 years old (COPPA compliance in the United States)
Teen Users (13-18): Require parental consent in some jurisdictions
Legal Responsibility: By creating an account, you represent you meet age requirements or have parental consent

Children's Data Protection

If we become aware a user is under 13, we will delete their account and data immediately
We do not use analytics, tracking, or marketing for users under 13
Parents/guardians can request data deletion or access for their child at any time

Parental Contact

If you believe a child has created an account, or to exercise parental rights:

Email: teamlearnoptima@valynx.net
Include child's account email and your relationship
We will respond within 7 business days

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors.

How We Notify You

Minor Changes: Non-material changes posted to this page with updated date
Material Changes: Email notification to your registered email address
Major Changes: Prominent notice on platform homepage; may require affirmative consent
Timing: Notification provided at least 30 days before changes take effect

Your Acceptance

Continued use of LearnOptima after policy updates constitutes acceptance
You have the right to delete your account if you disagree with changes
For significant changes, you may be required to affirmatively accept

Version History

Current Version: January 5, 2026
Previous Versions: Available upon request at teamlearnoptima@valynx.net

Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us:

Email

teamlearnoptima@valynx.net

For privacy inquiries and data requests

Support

Contact Page

For general inquiries and support

Account Management

Your account settings portal

For data access, correction, and deletion requests

Response Timeline

Acknowledgment: Within 24 hours of receipt
Standard Requests: Responded to within 7-10 business days
Complex Requests: May require up to 30-60 days (GDPR standard)
Weekend/Holidays: First business day response

Data Protection Authority

If you believe we have violated your privacy rights, you have the right to file a complaint with your local data protection authority (also known as a supervisory authority). For EU residents, this is typically your country's data protection office.