Privacy & Cookie Policy

LeO AI (“we”, “us”, “our”) operates this learning platform at learningonline.ai. This policy explains what personal information we collect, why, how we use it, and the choices you have. It applies to visitors and registered users of the site.

We collect information in three ways:

Information you give us. When you create an account, we collect your name, email address, and (optionally) your company and job title. If you contact us, we keep the content of your message and your contact details so we can respond.

Payment information. When you subscribe, our payment processor Stripe collects and processes your payment details. We do not receive or store your full card number. We retain a record of your subscription tier, billing interval, transaction amount, and a Stripe customer reference so we can manage your access and support your account.

Information collected automatically. Like most websites, we collect basic technical and usage data — such as pages visited, approximate location (from IP), device and browser type, and how you arrived at the site. Where you have consented, this includes analytics and advertising identifiers (see the Cookies section below).

We use your information to:

• Provide and manage your account and access to the modules in your tier;
• Process payments, renewals, upgrades, and refunds;
• Track your learning progress so you can resume where you left off;
• Send you service messages (e.g. payment confirmations, important account notices);
• Respond to your enquiries and provide support;
• With your consent, understand how the site is used and measure the effectiveness of our advertising;
• Meet our legal and tax obligations.

Cookies are small files stored on your device. We group them as follows:

Strictly necessary. Required for the site to function — for example, keeping you logged in and remembering your cookie choice. These are always on and don’t require consent.

Analytics. Help us understand how visitors use the site (e.g. Google Analytics). Set only if you accept.

Advertising. Used to measure and improve our advertising and, where applicable, to show relevant ads (e.g. Google Ads). Set only if you accept.

When you first visit, we ask for your consent before setting any analytics or advertising cookies. We use Google Consent Mode, which means these tools respect your choice from the very first page load. You can change your mind at any time by clearing the site’s stored data in your browser, which will prompt the consent banner again.

We don’t sell your personal information. We share it only with the service providers that help us run the platform, including:

• Stripe — payment processing;
• Supabase — secure database and authentication for your account;
• Resend — transactional email delivery;
• Google (Analytics / Ads / Tag Manager) — analytics and advertising measurement, where you have consented;
• Vercel — website hosting.

These providers process data on our behalf under their own security and privacy commitments. Some may process data outside Australia; where that happens, we take reasonable steps to ensure appropriate protection.

We keep your account and transaction records for as long as you have an account and for a reasonable period afterwards to meet legal, tax, and accounting obligations. You can ask us to delete your account data at any time, subject to records we are legally required to retain.

You can ask us to: access the personal information we hold about you; correct it if it’s wrong; delete it; or stop using it for certain purposes. To make a request, contact us via the Contact page. We’ll respond within a reasonable timeframe.

If you are in a region with specific data protection laws (such as the EU/UK GDPR), you may have additional rights, including the right to lodge a complaint with your local data protection authority. In Australia, you may contact the Office of the Australian Information Commissioner (OAIC).

We take reasonable technical and organisational measures to protect your information, including encryption in transit and access controls on our systems. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly if an issue arises.

Our paid platform is intended for adults. Our Parents & Caregivers content is designed for adults supporting children’s learning — it is not directed at children themselves. We do not knowingly collect personal information from children.

We may update this policy from time to time. When we make material changes, we’ll update the “last updated” date above and, where appropriate, notify you. Your continued use of the site after an update means you accept the revised policy.

Questions about this policy or your data? Reach us through the Contact page and we’ll be glad to help.