Wild Learning — Your Personalized Path

1. Introduction

Wild Academy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our self-hosted learning platform, including our AI-powered features, learning path generation, and organizational cohort-based learning services.

By using Wild Academy, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, password, profile picture, and timezone when you create an account
Profile Information: Bio, learning preferences, goals, and other optional profile details
Organization Information: If you join an organization, we collect organization membership details and role information
Payment Information: Billing details processed through our payment provider (Stripe) for subscription management
Communications: Messages, questions, and feedback you send to us or interact with through our AI companion

2.2 Automatically Collected Information

Learning Progress: Course enrollments, lesson completions, quiz attempts and scores, learning path progress, and time spent on content
Usage Analytics: Pages visited, features used, session duration, and interaction patterns (privacy-focused, GDPR compliant)
AI Interactions: Questions asked to the AI companion, chat history, and feedback ratings
Device Information: Browser type, operating system, IP address, and device identifiers
Gamification Data: Points earned, badges unlocked, leaderboard rankings, and achievement milestones

3. How We Use Your Information

Provide Services: Deliver learning content, generate personalized learning paths, track progress, and issue certificates
AI Features: Power the AI companion with context-aware assistance, generate learning recommendations, and improve response quality
Personalization: Customize learning experiences, recommend relevant content, and adapt to your learning style
Analytics: Understand usage patterns, improve platform performance, and enhance user experience
Communication: Send service updates, course notifications, cohort announcements, and administrative messages
Security: Protect against fraud, unauthorized access, and ensure platform integrity
Compliance: Meet legal obligations, enforce terms, and respond to legal requests

4. AI Companion & Data Processing

Our AI companion uses Gemini 2.5 Flash to provide intelligent learning assistance. Here's how we handle AI-related data:

Chat History: Stored in our database to provide context-aware responses and maintain conversation continuity
Vector Embeddings: Your questions and content are converted to embeddings for semantic search using pgvector (PostgreSQL extension)
Third-Party Processing: AI requests are processed by Google's Gemini API under their privacy policy and data processing terms
Data Retention: Chat sessions are retained for account duration and can be deleted upon request
No Training: Your data is not used to train Google's AI models per our agreement with Gemini API

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Within Organizations: If you're part of an organizational cohort, your progress and achievements may be visible to organization administrators and cohort members
Service Providers: Trusted third parties who assist in operating our platform (payment processing, AI services, analytics)
Legal Requirements: When required by law, subpoena, court order, or to protect rights and safety
Business Transfers: In connection with mergers, acquisitions, or asset sales (with notice)
With Your Consent: Any other sharing will be done with your explicit permission

6. Third-Party Services

Wild Academy integrates with the following third-party services:

Stripe: Payment processing (subject to Stripe's Privacy Policy)
Google Gemini API: AI companion services (subject to Google's Terms)
Authentication Providers: Google OAuth, Discord OAuth (subject to their respective privacy policies)
Cloudflare R2: Media storage for videos, images, and certificates

We are not responsible for the privacy practices of these third parties. Please review their privacy policies.

7. Data Security

We implement industry-standard security measures to protect your information:

Encryption in transit (HTTPS/TLS)
Secure password hashing (bcrypt)
Regular security audits and updates
Database access controls and monitoring
Secure session management with NextAuth.js

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Your Privacy Rights

Depending on your location, you may have the following rights:

Access: Request a copy of the personal information we hold about you
Correction: Update or correct inaccurate information
Deletion: Request deletion of your personal information (subject to legal retention requirements)
Portability: Receive your data in a machine-readable format
Opt-Out: Unsubscribe from marketing communications
Objection: Object to certain processing of your data
Restriction: Request restriction of processing in certain circumstances

To exercise these rights, please contact us at privacy@wildacademy.com. We will respond within 30 days.

9. Data Retention

Account Data: Retained for the duration of your account plus 90 days after closure
Learning Progress: Retained while account is active; anonymized after deletion
Chat History: Retained for account duration; deleted upon account deletion
Certificates: Retained permanently for verification purposes (even after account deletion)
Analytics: Aggregated data retained indefinitely; personal identifiers removed after 2 years

10. Children's Privacy

Wild Academy is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

For users aged 13-18, parental consent may be required depending on local regulations.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. Cookies & Tracking Technologies

We use cookies and similar technologies to:

Maintain your session and keep you logged in
Remember your preferences and settings
Analyze usage patterns and improve services
Provide security features

You can control cookies through your browser settings. However, disabling cookies may affect functionality.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Continued use of Wild Academy after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Email: privacy@wildacademy.com

Data Protection Officer: dpo@wildacademy.com

15. Additional Rights for EU and California Residents

For EU Residents (GDPR)

Under GDPR, you have the right to lodge a complaint with your local supervisory authority if you believe our processing of your personal data violates data protection laws.

For California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, sold, or disclosed, and the right to opt-out of the sale of personal information. We do not sell personal information.