Privacy Policy

“Personal Information” means any information about an identifiable individual, as defined under PIPEDA. “User” refers to any person who accesses or uses the Services, including students, parents, and guardians.

We collect the following categories of personal information:

• Account information: name, email address, and authentication credentials (including Google OAuth tokens)
• Academic records: course enrolments, assignment submissions, grades, progress data, and Ontario Student Transcript information
• Payment details: billing name, address, and payment method information processed through our payment provider (Stripe)
• Usage data: pages visited, features used, session duration, device information, browser type, IP address, and interaction data with our AI Coach
• Communications: messages, support requests, and feedback you send to us

We collect personal information through:

• Information you provide directly when creating an account, enrolling in courses, or contacting us
• Automated collection through cookies, analytics tools, and server logs
• Third-party authentication providers (Google OAuth)
• Your use of our AI Coach and learning platform

We use your personal information to:

• Provide, maintain, and improve the Services
• Create and manage your account
• Process course enrolments and issue credits through our accredited partner (AsyncAcademy, BSID #665288)
• Deliver personalized AI coaching and learning feedback
• Process payments and issue receipts
• Communicate with you about your account, courses, and updates
• Ensure academic integrity
• Comply with legal and regulatory obligations
• Analyze usage patterns to improve our platform

By creating an account and using the Services, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. You may withdraw your consent at any time by contacting us, subject to legal or contractual obligations. Withdrawal of consent may affect our ability to provide certain Services.

We may share your personal information with the following third parties:

• AsyncAcademy (BSID #665288): our accredited school partner, for credit issuance and academic record keeping
• Google: for OAuth authentication services
• Neon: our database provider, for secure data storage
• Vercel: our hosting provider, for platform delivery and performance
• Stripe: our payment processor, for secure payment handling

We may also disclose your information when required by law, to enforce our Terms of Service, or to protect the rights, property, or safety of VibeLearn, our users, or others.

We retain your personal information for as long as necessary to provide the Services and fulfil the purposes described in this Policy. Specific retention periods include:

• Academic records: retained for a minimum of 7 years, in accordance with Ontario education record-keeping requirements
• Account information: retained for the duration of your account and for a reasonable period after deletion
• Payment records: retained as required by applicable tax and financial regulations
• Usage data: retained in anonymized or aggregated form for analytics purposes

We use cookies and similar technologies to enhance your experience, remember your preferences, and analyse platform usage. Types of cookies we use include:

• Essential cookies: required for authentication and core platform functionality
• Analytics cookies: help us understand how users interact with our platform so we can improve the experience
• Preference cookies: remember your settings such as theme and language preferences

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Services.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Our Services are designed for high school students, some of whom may be under the age of 18. For users under 13 years of age, we require verifiable parental or guardian consent before collecting personal information. Parents and guardians may contact us at any time to review, update, or request deletion of their child’s personal information.

Under PIPEDA and applicable Canadian law, you have the right to:

• Access your personal information held by us
• Request correction of inaccurate personal information
• Withdraw consent to the collection, use, or disclosure of your personal information
• Request deletion of your personal information, subject to legal retention requirements
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, contact us at the address provided below.

In the event of a breach of security safeguards involving personal information that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as soon as feasible. Notification will include a description of the breach, the types of information involved, and steps individuals can take to reduce the risk of harm.

Your personal information may be stored and processed on servers located outside of Canada, including in the United States, through our service providers (Vercel, Neon, Stripe). When your data is transferred outside of Canada, it remains subject to the laws of the jurisdiction in which it is stored and may be accessible to law enforcement and national security authorities of that jurisdiction.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy on our website and updating the “Last updated” date above. Your continued use of the Services after any changes constitutes acceptance of the updated Policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: