Privacy Policy

This Privacy Policy describes how Jashby (“Jashby”, “we”, “us”) collects, uses, and protects personal data when you visit jashby.com, create an account, or interact with our learning services. We take privacy seriously and comply with applicable data protection laws including the Australian Privacy Act 1988 (Cth), the UK GDPR, the EU GDPR, and the California Consumer Privacy Act (CCPA). If you have questions, email support@jashby.com.

Personal data we collect

We collect information in three ways: directly from you, automatically when you use the Services, and from third-party partners that you connect (such as Google for authentication).

• Account data. Name, email address, authentication provider ID, and password or OAuth tokens needed to operate your account.
• Anonymous session identifiers. Temporary IDs issued when you explore Jashby without registering. They are linked to device and browser information so we can remember your progress during the guest session.
• Learning data. Levels you attempt, progress, preferences, and feedback so we can recommend relevant content.
• Device & usage data. IP address, browser type, device information, pages viewed, and interactions collected via analytics cookies and similar technologies.
• Support communications. Messages you send to support, survey responses, and troubleshooting notes so we can resolve issues.

We do not knowingly collect information from children under the age of 13 (or the minimum digital consent age in your region). If we learn that a child has provided personal data we will delete it.

How we use your information

• Provide, secure, and maintain the Services.
• Personalise learning paths, recommendations, and onboarding questions.
• Store temporary progress for guest sessions and prompt you to upgrade to a full account.
• Process payments and manage subscriptions.
• Send transactional communications about your account or service updates.
• Send marketing emails when you opt in. You can opt out at any time.
• Monitor performance, run analytics, and improve the platform.
• Detect, investigate, and prevent fraud or abuse.
• Comply with legal obligations and enforce our Terms of Service.

Email marketing

We only send marketing emails when you have given consent (for example, by checking the box during signup or in the account area). Each marketing message contains an unsubscribe link. Guest sessions do not receive marketing messages. We use Brevo (formerly Sendinblue) to securely deliver marketing communications and manage mailing preferences on our behalf once you create an account and opt in. You can also update preferences in your account settings or email support@jashby.com. We maintain suppression lists to ensure opt-outs are respected and we do not sell email addresses to third parties.

Cookies & tracking technologies

We use cookies, pixels, and similar technologies to run the platform and understand usage. Essential cookies are required for the site to work. Analytics and advertising cookies are optional and require your consent. Guest visitors see the same consent options; essential cookies are used to remember progress during a guest session. For full details see our Cookie Policy.

How we share information

We only share personal data when necessary. Typical recipients include:

• Service providers that host our infrastructure, process payments, send emails, or deliver analytics (for example Google, Vercel, Firebase, Brevo).
• Professional advisers (lawyers, accountants) where necessary for compliance or contract enforcement.
• Authorities or regulators when required by law or to protect our rights, users, or the public.
• A successor entity in the event of a merger, acquisition, or corporate restructuring. We will notify you of any such change.

We require each partner to protect your data and use it only for the specific task we have engaged them to perform.

International transfers

We are based in Australia but rely on global service providers. When data is transferred outside Australia, the United Kingdom, or the European Economic Area we use approved safeguards such as the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, or equivalent mechanisms recognised under Australian privacy law.

Data retention

We keep personal data for as long as your account is active and for a limited period afterwards to comply with legal obligations, resolve disputes, and enforce agreements. Guest session identifiers and related usage data are retained for up to 30 days after your last activity unless you upgrade to a full account. When data is no longer needed we securely delete or anonymise it.

Your rights

Depending on where you live, you may have the following rights over your personal data:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to legal or contractual obligations.
• Object to or restrict certain processing, including marketing communications.
• Request a copy of your data in a portable format.
• Withdraw consent where processing relies on consent (for example, optional marketing emails).

To exercise your rights email support@jashby.com. We may need to verify your identity (for example, by asking for the email address on your account or the guest session identifier shown in the product) before fulfilling the request.

Security

We use technical and organisational safeguards such as encryption in transit, access controls, monitoring, and regular reviews to protect your data. No system is completely secure; please report any suspected vulnerabilities to support@jashby.com.

California privacy notice

California residents have the right to know the categories of personal information we collect and disclose. We collect identifiers (such as email), commercial information (e.g. subscription history), Internet activity, and inferences about learning preferences. We do not sell personal information. To exercise CCPA rights contact us at support@jashby.com.

Changes to this policy

We may update this policy to reflect regulatory changes or improvements to the Services. We will post the new policy here, update the “Last updated” date, and notify you of material changes via email or in-app notice.

Contact

If you have questions about this policy or would like to exercise your rights, email support@jashby.com. Our team is based in Australia, and email is the fastest way to reach us.