Privacy Policy

1. Scope and who we are

This Privacy Policy explains how Cyanic Innovations (“Cyanic Innovations,” “UX Crumbs,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal data when you visit, create an account for, or use UX Crumbs and related websites, applications, communications, and services (the “Service”). UX Crumbs is a product by Cyanic Innovations.

This Policy does not cover third-party websites, apps, or services that we do not control. If an organization provides you with access to UX Crumbs, that organization may have its own privacy notice and may act as a separate controller/business for information it supplies or receives.

2. Personal data we collect

We collect personal data directly from you, automatically from your use of the Service, from service providers, and, where applicable, from an organization that invites or administers your account. The categories may include:

• Account and contact data: name, username, email address, password or authentication data, age/eligibility information, profile details, language, and account preferences.
• Learning and Service data: enrollments, progress, lesson interactions, assessments, responses, achievements, XP, leaderboard settings, feedback, and support history.
• Content you provide: prompts, assignments, comments, files, images, messages, community posts, and other material you submit. Do not submit sensitive information unless the Service expressly requests it and you have a lawful basis to do so.
• AI Feature data: prompts, inputs, context, preferences, generated output, quality ratings, and information necessary to operate, secure, evaluate, and improve AI Features, subject to the choices and controls we provide.
• Technical and usage data: IP address, device and browser type, operating system, identifiers, app version, approximate location inferred from IP, logs, pages/screens viewed, feature usage, diagnostics, and cookie or similar-technology data.
• Transaction data: subscription status, plan, invoices, payment confirmation, tax location, and limited payment-related details. Payment card details are normally processed by our payment processor and are not stored by us except as described at checkout.
• Communications and marketing data: your requests, emails, survey responses, preferences, and records of communications with us.

3. How we use personal data

We use personal data to:

• provide, maintain, personalize, and administer the Service and your account;
• deliver learning experiences, assessments, progress tracking, community features, and AI Features;
• process subscriptions and transactions, prevent payment fraud, and provide customer support;
• protect the security, integrity, and availability of the Service; detect, investigate, and prevent abuse, cheating, unlawful conduct, and policy violations;
• analyze product performance, troubleshoot, conduct research, improve content and user experience, and develop new features;
• send service, security, account, billing, legal, and (where permitted) marketing communications;
• comply with legal obligations, enforce our agreements, protect rights and safety, and respond to lawful requests.

4. Legal bases and consent

Where data-protection law requires a legal basis, we process personal data as necessary to perform our contract with you; to pursue legitimate interests such as operating, securing, improving, and marketing the Service in a proportionate manner; to comply with legal obligations; to protect vital interests; or with your consent.

Where we rely on consent, you may withdraw it at any time using the relevant settings, cookie controls, unsubscribe link, or by contacting us. Withdrawal does not affect processing already performed or processing based on another lawful basis. We will seek additional consent where required, including for non-essential cookies or certain marketing, children’s data, or sensitive-data processing.

5. AI Features and automated processing

AI Features may process the information you submit, including prompts and learning interactions, to generate responses, feedback, recommendations, summaries, or other output. We may use automated systems and appropriately authorized reviewers to provide the feature, maintain quality, secure the Service, investigate misuse, and improve our systems, subject to applicable law and our contractual controls with providers.

AI output may be inaccurate, incomplete, biased, or unsuitable. Do not use it as the sole basis for decisions that produce legal or similarly significant effects about a person. We do not intentionally use solely automated decision-making to make such decisions about you, unless we provide a specific notice and any required safeguards.

Do not input another person’s personal data, confidential business information, health data, government identifiers, payment-card details, or other sensitive data into AI Features unless we expressly permit it and you have provided all required notices and obtained valid permission.

6. How we disclose personal data

We may disclose personal data to the following categories of recipients, only as appropriate for the purposes above:

• service providers that host, secure, analyze, support, communicate for, process payments for, or otherwise help us provide the Service;
• AI and technology providers that process data on our documented instructions and subject to appropriate contractual safeguards;
• organizations that provide or manage your access, such as an employer, school, or team administrator, as described in the applicable plan or agreement;
• professional advisers, auditors, insurers, and financing or transaction counterparties;
• government authorities, courts, law enforcement, or other parties where required by law or necessary to protect rights, safety, and security;
• a buyer, successor, or other party involved in a merger, financing, sale of assets, or reorganization, subject to applicable law.

We do not sell personal information for monetary consideration. We do not knowingly sell or share personal information of minors. If we engage in advertising or analytics that is classified as a “sale” or “sharing” under a privacy law, we will provide required notice and a “Do Not Sell or Share My Personal Information” or equivalent control.

7. Cookies, analytics and similar technologies

We use cookies, SDKs, pixels, local storage, and similar technologies to keep the Service functioning, remember preferences, understand use, measure performance, prevent fraud, and, where permitted, support marketing. Our Cookie Policy will describe the technologies and controls in more detail.

You can manage non-essential technologies through our cookie banner or settings where available, and through browser/device controls. Blocking some technologies may limit functionality. We honor legally required opt-out preference signals, such as Global Privacy Control, where applicable.

8. International data transfers

We may process personal data in countries other than the country where you live, including where our personnel, affiliates, or providers operate. Those countries may have different data-protection laws.

Where required, we use appropriate transfer mechanisms and safeguards, such as adequacy decisions, contractual commitments, technical and organizational measures, or another valid legal mechanism. You may request information about relevant safeguards by contacting privacy@uxcrumbs.app, subject to security and confidentiality restrictions.

9. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Service, meet legal, tax, accounting, and reporting requirements, resolve disputes, maintain security, and enforce agreements. Retention periods depend on the data type, purpose, sensitivity, risk, and legal obligations.

When data is no longer needed, we delete, anonymize, or aggregate it, subject to backup cycles and legal preservation requirements. For details on specific retention periods for different categories of personal data, please contact us at privacy@uxcrumbs.app.

10. Security

We maintain administrative, technical, and organizational measures designed to protect personal data from unauthorized access, alteration, loss, misuse, or disclosure. These measures may include access controls, encryption where appropriate, monitoring, testing, vendor assessment, and incident-response procedures.

No security method is perfect. You are responsible for protecting account credentials and devices, and for promptly notifying us at privacy@uxcrumbs.app of suspected unauthorized account access.

11. Your privacy rights and choices

Depending on your location and applicable law, you may have the right to request access to, correction of, deletion of, restriction of, or objection to our processing of your personal data; to request portability; to withdraw consent; to opt out of certain targeted advertising, sale/sharing, profiling, or automated decision-making; and to complain to a supervisory authority.

To exercise a right, contact privacy@uxcrumbs.app. We may verify your identity and authority before acting, and may deny, limit, or charge for a request only where law permits. We will not discriminate against you for exercising applicable rights.

You may update certain account data in account settings, unsubscribe from promotional email through the link in the message, and manage cookies through available settings. Authorized agents may submit requests where law permits, subject to verification.

12. Region-specific information

13. Changes to this Policy

We may update this Privacy Policy as our practices, technology, or legal requirements change. We will post the updated version with a revised effective date and, for material changes, provide additional notice or seek consent where required.

14. Contact us

For privacy requests, security reports, and questions regarding this Policy or our data practices, contact us at: