Privacy Policy

1. Who we are

Kọ Learning (“we”, “us” or “our”) provides the Kọ online learning platform. We are based in the United Kingdom and process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any privacy questions, contact us at: privacy@kolearning.app.

2. What data we collect

We collect only the personal data needed to run the platform:

• Account data: name, email address and password hash when you sign up or are added by an admin.
• Learning data: course enrolments, module progress, quiz and mock-exam scores, attempt history, and certificates issued.
• Study materials: documents you upload to the study area (PDFs, Word files, plain text) so we can generate bite-size modules and practice questions for you.
• Payment data: Stripe handles card and billing details on our behalf. We do not store full card numbers on our servers.
• Technical data: basic server logs needed to keep the service secure and available.

3. How we use your data

We use your data to:

• Provide and manage your account.
• Deliver courses, modules, quizzes and certificates.
• Generate study modules and practice questions from your uploads.
• Process course payments and study subscriptions.
• Apply admin-provided enrolment or free-access codes.
• Keep the platform secure and troubleshoot issues.

We rely on UK GDPR lawful bases of contract performance (to provide the service), legitimate interests (security and support) and, where required, consent.

4. Cookies and similar technologies

We use only essential cookies and tokens needed for authentication, session management and payment processing. We do not use analytics or advertising cookies.

5. Who we share data with

We do not sell personal data. We share limited data with trusted service providers:

• Stripe — for payment processing.
• Lovable Cloud — for secure database, file storage and authentication infrastructure.

Both providers process data under contracts that require them to protect your information.

6. How long we keep your data

We keep your personal data for as long as your account is active and for up to 12 months afterwards, or for as long as necessary to meet legal, accounting or operational requirements. Study documents are removed when you delete them or close your account.

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data (“right to be forgotten”).
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, email us at: privacy@kolearning.app. We aim to respond within one month.

8. Children’s privacy

Kọ is not directed at children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it.

9. Security

We use industry-standard measures to protect your data, including encrypted connections, access controls and private file storage. No system is completely secure, so please keep your password confidential and let us know immediately if you suspect unauthorised access.

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of the page. Continued use of Kọ after changes means you accept the updated policy.

11. Contact us

If you have any questions about this privacy policy or how we handle your data, email: privacy@kolearning.app.