Privacy Policy

Effective Date: March 14, 2026

Learning Whistle (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights in relation to it. By using the Platform you agree to the practices described here.

1. Information We Collect

1.1 Account Data

When you sign in with Google via Firebase Authentication, we receive your Google display name, email address, and Google profile photo URL. We store your display name and a reference to your Google profile photo URL; we never display your Google photo on public-facing surfaces of the Platform.

1.2 Usage and Learning Data

We collect data about how you use the Platform, including the learning paths you generate, stations you complete, quiz results, Miles earned, your Complexity Dial position (1–20), category heatmap data, your equipped avatar, and paths stored in your Offline Vault.

1.3 Payment Data

Gold Ticket purchases are processed by Stripe, Inc. We do not store your full payment card number, CVV, or bank details. We receive from Stripe a transaction record and your Gold Ticket balance is updated in our database accordingly.

1.4 Technical Data

We may collect technical data such as your browser type, device type, operating system, IP address, and general geographic region. This is used for security, abuse prevention, and improving Platform performance.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and improve the Platform;
Personalise AI-generated learning paths to your Complexity Dial setting and interests;
Calculate and display your Miles balance, rank, and category heatmap;
Process Gold Ticket purchases and maintain your balance;
Send important account and service communications;
Detect and prevent fraud, abuse, or violations of our Terms of Service;
Comply with legal obligations;
Analyse aggregated, anonymised usage trends to improve the Platform.

3. Cookies and Similar Technologies

We use a single session cookie (__session) set by Firebase Authentication to maintain your login state. This cookie is strictly necessary for the Platform to function and cannot be disabled without preventing sign-in. We do not use tracking, advertising, or third-party profiling cookies.

4. Analytics Providers

We use Google Analytics and Firebase Analytics to understand how users interact with the Platform. These services may collect anonymised usage data including page views, session duration, and feature engagement. Google’s data processing terms apply to these services. We do not use analytics data to build individual user profiles for advertising purposes.

5. How We Share Your Information

We do not sell, rent, or trade your personal data to third parties. We share data only in the following limited circumstances:

Service providers: Google (Firebase, Cloud Run, Gemini, Analytics), Stripe (payments). These providers act as data processors under appropriate agreements.
Legal requirements: If required by law, court order, or to protect the rights, property, or safety of Learning Whistle, our users, or others.
Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will notify you via email or an in-app notice before your data becomes subject to a different privacy policy.

6. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Platform. If you request deletion of your account (see Section 8), we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it longer. Aggregated, anonymised analytics data may be retained indefinitely.

7. Children’s Privacy

The Platform is not directed to children under 13 years of age. We include a mandatory age gate during onboarding. If a user indicates they are under 13, their Firebase Authentication token is revoked immediately server-side using the Firebase Admin SDK, and no personal data is written to our database. If you believe a child under 13 has created an account, please contact us at learn@learningwhistle.com and we will delete the account promptly.

8. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you.
Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
Do Not Sell: We do not sell personal information.

To exercise these rights, email us at learn@learningwhistle.com. We will verify your identity and respond within 45 days.

9. Security

We implement reasonable technical and organisational measures to protect your information, including the use of HTTPS, Firebase Authentication (Google OAuth), server-side session management, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your Google account credentials safe.

10. Third-Party Links and Affiliate Content

The Platform may display affiliate links to Amazon (via Amazon OneLink) and Shutterstock. Clicking these links will take you to third-party websites that have their own privacy policies. We are not responsible for the privacy practices or content of these third-party sites. We do not track your purchases on third-party sites beyond the commission event reported by the affiliate network.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the Effective Date at the top of this page and may send an email notification or display an in-app notice. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: learn@learningwhistle.com
Website: LearningWhistle.com

We will respond to all privacy-related requests within 30 days.