Privacy Policy

LearnFast ("we", "us", "our") operates the LearnFast presentation feedback platform available at learnfastapp.com. We are committed to protecting your personal data and processing it lawfully, fairly, and transparently.

For any privacy-related queries, contact us at: info@learnfastapp.com

We collect the following categories of personal data:

Account data — your name, email address, and password (stored as a secure hash via Firebase Authentication).

Session data — the titles, codes, and timestamps of presentation sessions you create.

Feedback data — anonymous audience scores submitted during your sessions (not linked to individual audience members unless they voluntarily provide a name).

Self-reflection scores — the scores you submit about your own performance after a session.

Notes and commitments — presenter notes and development commitments you save within the platform.

Subscription data — your plan status, Stripe customer ID, and billing history (payment card details are handled directly by Stripe and never stored by us).

Pilot scheme data — pilot code, associated organisation name, and expiry date where applicable.

Language preference — your selected language (English or French).

Usage data — session activity and engagement, used to improve the platform.

We use your personal data to:

— Provide, operate, and maintain the LearnFast platform — Generate personalised resource recommendations based on your session scores — Send you session summary emails and account-related notifications — Process subscription payments and manage your account — Improve the platform through aggregated, anonymised analytics — Comply with legal obligations

Our lawful basis for processing is: contract performance (providing the service you have signed up for), legitimate interests (improving the platform), and legal obligation where required.

We share your data with the following trusted third parties only to the extent necessary to provide the service:

Firebase / Google Cloud (Google LLC) — authentication, database (Firestore), and hosting. Data may be processed in the United States. Google is certified under the EU-US Data Privacy Framework.

Stripe Inc. — payment processing. Your payment card details go directly to Stripe and are never stored by LearnFast. Stripe is PCI-DSS Level 1 certified.

Twilio Inc. — SMS notifications. Only used for account-related alerts.

YouTube Data API (Google LLC) — surfacing relevant video resources based on your session results. No personal data is shared with YouTube.

Podcast Index — sourcing podcast recommendations. No personal data is shared.

We do not sell your personal data to any third party.

Audience members who join a session via QR code or link are not required to create an account. Feedback responses are collected anonymously by default. If an audience member voluntarily enters their name, it is visible to the session presenter only.

Audience members do not need to provide any personal data to participate and no tracking cookies are set on the feedback submission page.

We use a minimal number of cookies:

Authentication cookie (learnfast_auth) — set when you sign in to keep your session active. This is a strictly necessary cookie.

Firebase Auth session tokens — stored in browser local storage to maintain your login state.

We do not use advertising, tracking, or analytics cookies. We do not use third-party cookie networks.

We retain your personal data for as long as your account is active. If you delete your account, your data is deleted from our systems within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g. Stripe billing records, which are retained for up to 7 years in accordance with financial regulations).

Anonymised, aggregated analytics data may be retained indefinitely.

Under UK and EU data protection law (UK GDPR / GDPR), you have the following rights:

Right of access — you may request a copy of the personal data we hold about you. Right to rectification — you may ask us to correct inaccurate data. Right to erasure — you may request deletion of your account and associated data. Right to data portability — you may request your data in a structured, machine-readable format. Right to restrict processing — you may ask us to limit how we use your data in certain circumstances. Right to object — you may object to processing based on legitimate interests.

To exercise any of these rights, contact us at info@learnfastapp.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We take data security seriously. All data is encrypted in transit using TLS. Firestore security rules ensure users can only access their own data. Authentication is handled by Firebase Auth, which uses industry-standard security practices.

No method of transmission over the internet is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.

Your data may be processed in the United States by Google Cloud (Firebase) and Stripe. Both organisations participate in the EU-US Data Privacy Framework and provide appropriate safeguards for international data transfers.

LearnFast is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you by email or by a prominent notice within the app.

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Email: info@learnfastapp.com Website: learnfastapp.com