Privacy Policy

1. Who we are

Learn N' Succeed is operated by Aetheis Ltd, a company registered in the Republic of Mauritius under BRN C18158785, with its registered office in Port Louis, Mauritius. We are the data controller for personal information collected through learn-n-succeed.com.

For any privacy-related inquiry, contact us at privacy@learn-n-succeed.com.

2. What data we collect

We collect the following categories of personal data:

• Account data: email, name, password (hashed), language preference, country, role, organization (if applicable).
• Course progress data: modules viewed, lessons completed, workbook answers, quiz results, time spent per lesson.
• AI Coach interactions: transcripts of your conversations with the AI Coach, including your prompts and the AI responses. Used to personalize your coaching experience and improve service quality.
• Payment data: international payments in EUR are processed by Paddle.com Market Ltd (Merchant of Record); payments in Mauritian rupees are processed by our payment provider MIPS (Mauritius). We never store full card numbers. We retain transaction IDs and amounts for accounting and reconciliation.
• Technical data: IP address (retained for security and analytics), device, browser, language, referrer, UTM parameters.
• Communications: email correspondence, support tickets, scheduled coaching calls.

3. Why we collect this data (legal basis)

• Contract performance (GDPR Art. 6(1)(b)): to provide the courses, AI coaching, and platform services you signed up for.
• Legitimate interest (Art. 6(1)(f)): to improve the platform, detect fraud, and ensure security.
• Legal obligation (Art. 6(1)(c)): for accounting, tax, and consumer-protection requirements.
• Consent (Art. 6(1)(a)): for marketing emails and non-essential cookies. You can withdraw consent at any time.

4. AI Coach and Anthropic Claude

Our AI Coach feature is powered by Anthropic Claude (Anthropic PBC, San Francisco, USA), under a Data Processing Agreement that includes:

• Your prompts and the AI responses are processed by Anthropic on U.S. servers to generate the response.
• Anthropic does not train its models on your data (per their commercial terms).
• Anthropic retains data for up to 30 days for abuse-detection purposes only.
• We retain transcripts for up to 12 months to personalize your coaching experience (memory across modules, forgetting-curve nudges).

You can request deletion of your AI Coach transcripts at any time (see Section 8).

5. How long we keep your data

• Account data: retained while your account is active, plus 36 months after closure (legal requirement).
• Course progress: retained while your account is active, plus 12 months after closure.
• AI Coach transcripts: 12 months from last interaction, or until you request deletion.
• Payment records: 10 years (Mauritius accounting requirements).
• Marketing email opt-in: until you unsubscribe.

6. Who we share your data with

We share data with the following processors, under contract:

• Supabase (EU region): database and authentication.
• Vercel (EU + global edge): hosting and CDN.
• Anthropic Claude (USA): AI Coach.
• MIPS / Aetheis Ltd (Mauritius): payment processing.
• Paddle (EU / Merchant of Record): international payment processing, invoicing and tax.
• hCaptcha (Intuition Machines): bot protection on signup and public forms.
• Resend (EU): transactional and marketing emails.
• Bunny.net (EU): video streaming (when activated).

We never sell your data. We never share with third-party advertisers without your explicit consent.

7. Cross-border transfers

Some processors (Anthropic, Vercel) operate from the United States. Transfers are protected by Standard Contractual Clauses (SCC) as required under GDPR Chapter V.

8. Your rights (GDPR)

You have the right to:

• Access your personal data (Art. 15) — request a JSON export at privacy@learn-n-succeed.com.
• Rectify inaccurate data (Art. 16) — update your name and phone in account settings, or email us for anything else.
• Erase your data (Art. 17, “right to be forgotten”) — request via privacy@learn-n-succeed.com.
• Restrict processing (Art. 18).
• Data portability (Art. 20) — export your data in a machine-readable format.
• Object to processing based on legitimate interest (Art. 21).
• Withdraw consent (Art. 7) — unsubscribe link in every marketing email, or via account settings.
• Lodge a complaint with the Data Protection Office of Mauritius (dataprotection.govmu.org), or with your local supervisory authority if you are in the EU.

We respond to all requests within 30 days.

9. Cookies

We use three categories of cookies:

• Essential cookies: authentication session, CSRF tokens, language preference. Cannot be disabled.
• Analytics cookies (opt-in): Google Analytics 4 (when activated). IP anonymized.
• Marketing cookies (opt-in): Facebook Pixel and TikTok Pixel (when activated). For ad attribution.

You can manage your preferences via the cookie banner on first visit, or reopen it any time with the “Cookie preferences” link in the site footer.

10. Security

We follow industry best practices: TLS 1.3 for all transfers, AES-256 encryption at rest (Supabase managed), password hashing handled by our authentication provider, CSRF protection, rate limiting, hCaptcha on signup, Row Level Security policies in the database.

In the event of a data breach affecting your personal data, we will notify you and the relevant authorities within 72 hours as required by GDPR Art. 33.

11. Children

Our services are intended for users aged 18 and over. We do not knowingly collect data from minors. If you are a parent and believe your child has provided us with data, contact us and we will delete it.

12. Changes to this policy

We may update this policy. Material changes will be notified by email to all registered users at least 30 days before they take effect. Continued use of the service after the effective date constitutes acceptance.

13. Contact

For any privacy-related question or request:

• Email: privacy@learn-n-succeed.com
• Post: Aetheis Ltd, Port Louis, Mauritius