Draft policy document
Privacy — draft
This draft describes the Academy app as currently implemented. It must be reviewed and completed before public launch.
Account and learning data
We store account details, course enrollments, lesson progress, bookmarks and notes in the Academy database. Tutors can see enrollment and progress for their own courses.
Media and service providers
Uploaded course media is stored in private S3-compatible object storage. The app uses a database, email delivery and web hosting services. The final notice must identify the actual providers and locations used at deployment.
Security and retention
We use authenticated sessions, access checks and HTTPS in the production configuration. A final policy must specify retention periods, deletion procedures, lawful bases, rights requests and a privacy contact.
Local preferences
The browser may store non-sensitive interface preferences such as theme. Account and learning records are held server-side.