Privacy Policy

1. Who this policy applies to

This policy covers personal information for which Hyphun is the controller — website visitors, people who book a demo or start a trial, and account holders who subscribe to the Service.

When a customer runs their own academy on Hyphun LMS, the personal data of their learners (names, emails, progress, attendance, submissions) is controlled by that customer. For this data Hyphun acts only as a processor, handling it on the customer's instructions under our customer agreement. If you are a learner, please direct privacy requests to the institution that invited you.

2. Information we collect

We collect information in the following ways:

• Information you give us — your name, work email, organization, role, phone number and message when you book a demo, start a trial, subscribe, or contact us.
• Payment information — handled by our payment providers. Card payments are processed by Stripe; crypto payments are made to on-chain wallet addresses. We do not store full card numbers.
• Account & usage data — your login, plan configuration, the content you create, and activity within the platform needed to operate your account.
• Automatically collected data — IP address, device and browser type, pages viewed and referring URLs, collected via cookies and analytics.
• Learner data (as processor) — data your organization uploads or generates about its learners, held on your behalf.

3. Cookies & analytics

We use a small number of essential cookies to run the site and the application. We also use Google Analytics 4 to understand aggregate, non-identifying usage so we can improve the product.

You can block or delete cookies in your browser settings. Where consent is required by local law, we ask for it before setting non-essential cookies.

4. How we use information

We use personal information to:

• provide, operate and secure the Service;
• process payments, subscriptions, trials and renewals;
• set up, brand and migrate content into your platform, and provide support;
• detect, prevent and investigate fraud, abuse and security incidents;
• improve our products and understand how the site is used;
• send you service messages and — where permitted — marketing you can opt out of at any time;
• comply with legal obligations.

5. Legal bases

Where data-protection law applies, we rely on: performance of our contract with you; our legitimate interests in running and improving the Service; your consent (for example, marketing and non-essential cookies); and compliance with legal obligations.

6. Where your data is hosted

Hyphun LMS can be hosted in the region you choose, so customer and learner data can stay within a preferred jurisdiction for data-residency requirements. Our hosting and infrastructure sub-processors operate in the selected region.

7. Sharing & sub-processors

We do not sell personal information. We share it only with service providers who help us run the Service, under contracts that protect it — including cloud hosting, payment processing (Stripe), transactional email delivery, and analytics (Google).

We may also disclose information where required by law, to protect our rights or users' safety, or in connection with a corporate transaction.

8. Data retention

We keep personal information for as long as needed to provide the Service and to meet legal, accounting and reporting obligations. Learner data held on a customer's behalf is retained per our customer agreement and is returned or deleted after termination, subject to any legal retention period.

9. Security

We protect information with encryption in transit, access controls, and operational safeguards appropriate to the risk. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work continuously to protect your data.

10. Your rights

Subject to applicable law, you may request access to, correction of, deletion of, or a copy of your personal information, and you may object to or restrict certain processing or withdraw consent.

For learner data that we hold as a processor, please contact the institution that controls it. To exercise any right for data we control, email us at the address below.

11. Children's privacy

Hyphun LMS is provided to organizations, some of which teach minors. Where a school or institution uses the Service for learners who are children, that institution is responsible as the controller for obtaining any required consents and for its lawful basis. Hyphun processes such data only on the institution's instructions and does not knowingly collect children's data directly for its own purposes.

12. International transfers

Your information may be processed in countries other than your own. Where we transfer personal data across borders, we use appropriate safeguards as required by applicable law.

13. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised, and we will notify you of material changes where required.

14. Contact us

If you have questions about this policy or how we handle your data, contact Hyphun Technologies FZE at info@hyphun.com.