Who is responsible
AI Fluency School is responsible for the learning-platform data described here. Questions and privacy requests can be sent to hello@aifluencyschool.com. Paddle is the merchant of record for purchases and separately controls the payment information it collects at checkout.
Information we process
- Account name, email address, login methods, and email status.
- Session security data such as IP address and user agent.
- Course progress, quiz answers and scores, projects, downloads, and certificates.
- Subscription, customer, transaction, and cancellation identifiers received from Paddle. We do not store full card details.
- Profile biography, avatar, public-profile preference, and optional Discord account identifiers.
- Privacy-conscious aggregate site analytics when Plausible is enabled.
Why we process it
We use this information to create and secure accounts, deliver paid and free learning services, record assessment results, issue credentials, support learners, prevent abuse, reconcile billing, and understand whether the site works. These purposes rely on performing the service you request, legitimate security and product interests, legal duties, and consent where the law requires it.
Processors and transfers
Service providers include Paddle for commerce, Resend for transactional email, Hetzner for infrastructure and avatar storage, Bunny for video and downloads, Plausible for aggregate analytics when configured, Discord when you choose to link it, and Google or GitHub when you choose social login. These providers may process information in other countries under their own safeguards and terms.
Public information
Profiles are private by default. If you make a profile public, its name, biography, avatar, and certificate links can be viewed by anyone. Certificate links contain an unpredictable sharing token and are marked not to be indexed, but anyone who receives a link can view the learner name, course, issue date, display serial, and PDF. Turn the profile off before sharing if this is not acceptable.
Retention and deletion
Account and learning records are kept while the account is active and as needed to operate the service or meet legal obligations. Deleting an account removes its profile, progress, quiz attempts, subscriptions, and certificates from the live application through database cascades; download records retain no user identifier after deletion. Paddle and infrastructure backups or legal records follow the relevant provider and statutory retention requirements.
Your choices and rights
You can keep your profile private, unlink Discord, and update profile information in settings. Contact us to request access, correction, export, restriction, objection, or deletion. We may need to verify the request and may retain information where law requires it. You may also complain to the data-protection authority that applies to you.
Cookies and security
Essential cookies maintain authentication and checkout state. We do not use advertising cookies. Reasonable technical controls are used, but no internet service can promise absolute security. Security reports are handled through the process on the security page.