Privacy policy

Who this covers

This policy applies to the CloudyML website and the CloudyML Android app, which give enrolled learners access to the courses they have purchased. Questions about anything here can go to team@cloudyml.com.

What we collect

Your account

Your email address, your name, and a phone number if one was given when you enrolled. Your email address is how your account is identified and how you sign in.

Your learning

Which courses you have access to, which lessons and assignments you have marked complete, your quiz attempts and scores, and the lesson you last had open so the course reopens where you left it.

Certificates

When you generate a certificate we create an image showing your name, the course, and the date, and store it so you can download it again.

Technical records

Your IP address and browser or device identification are recorded when login codes are requested and when staff accounts sign in, in order to limit abuse and to keep a security record. Some accounts also carry device details recorded by earlier versions of our app.

What we do not do

We do not show advertising, and we do not sell or rent your personal information. Our website and app contain no advertising networks, no analytics services and no third-party tracking software. We do not build profiles of you for marketing, and we do not track you across other websites or apps.

Why we hold it

To let you sign in; to show you the courses you have bought and keep your progress between your phone and your computer; to mark and return your quizzes; to issue your certificates; to answer your support requests; and to keep the service secure and working.

Who else processes it

We use a small number of service providers to run the service. They process your data on our instructions and for no purpose of their own:

• MongoDB Atlas — stores our database, hosted in Mumbai, India.
• Vercel — hosts the website and the API.
• Resend — sends your sign-in codes by email.
• VdoCipher — hosts and streams most course videos.
• YouTube (Google) — hosts some course videos. These are embedded in privacy-enhanced mode, so YouTube does not record your viewing for personalised advertising, but Google receives the request and may set cookies necessary for playback. Google’s own privacy policy applies to that.
• Amazon Web Services (S3) — stores certificate images.

We also share information where the law requires it, or where it is needed to investigate abuse of the service.

How long we keep it

Your account, your progress and your certificates are kept for as long as your account exists, so that you keep access to what you bought and can download your certificates again later. Sign-in codes expire within minutes and are deleted automatically. Security records are kept only as long as they are useful for that purpose.

Your choices

Write to team@cloudyml.com to ask for a copy of the information we hold about you, to correct it, or to have your account and its data deleted. Please write from, or tell us, the email address your enrolment is under so we can identify the right account. Deleting your account ends your access to the courses on it.

Children

Our courses are intended for adult learners and for students in higher education. The service is not directed at children, and we do not knowingly collect information from a child. If you believe a child has given us their information, contact us and we will remove it.

Security

Connections to our website and app are encrypted. Access to your account requires a code sent to your email address; there is no password to be guessed or reused. Course videos are served through short-lived, single-use playback authorisations rather than downloadable links. No system is perfectly secure, but we take care to limit what is collected in the first place.

Changes

If this policy changes we will update the date at the top of this page. Material changes will be brought to your attention in the app or by email.