Privacy Policy

Last updated: 22 February 2026 · Hyphen Education Group Ltd

The short version: We collect data to run the platform and personalise your learning. We don't sell it. We don't share it with third parties except those needed to operate the service. You can request deletion at any time.

Hyphen Education Group Ltd ("we", "us") operates the Autonomy learning platform. This Privacy Policy explains what data we collect, why, and how you can control it. It applies to autonomy-platform.com, autonomy.academy, and related services.

We are the data controller under UK GDPR and the UK Data Protection Act 2018.

1. Data We Collect

Account data

Email address (required for authentication)
Name (provided during onboarding)
Career goals and self-reported interests (provided during onboarding, used to personalise learning)

Learning data

Your answers to AI assessment questions
Scores, feedback, and progression through learning nodes
Self-reported confidence ratings
Session activity timestamps and session duration
Node selections and learning paths taken
Quality ratings submitted after sessions

Payment data

Purchase records (amount, product, timestamp)
Card details are processed by Stripe and never stored by us

Technical data

Platform events (page visits, feature usage) for product improvement
Browser type and device type (via standard web headers)

2. How We Use Your Data

To provide the service — authenticate you, personalise learning content, track your progress, and deliver AI-generated tuition
To improve the product — analyse aggregated learning patterns to improve content quality and curriculum design
To communicate with you — send access links, re-engagement nudges if you become inactive, and important service updates
To process payments — record transactions and manage subscriptions via Stripe
To support you — respond to queries and troubleshoot issues

Our legal basis for processing is: contract performance (to deliver the service you purchased), legitimate interests (product improvement, re-engagement communications), and consent (where we ask for it explicitly).

3. AI and Your Learning Data

Your answers to assessment questions are sent to Anthropic's API (Claude) to generate personalised feedback and scoring. Anthropic processes this data as a sub-processor under data processing agreements. Your data is not used to train Anthropic's models under our enterprise agreement.

AI-generated nudge messages are created from your anonymised progress data and sent by our platform, not by a human coach unless explicitly stated.

4. Data Sharing

We share data only with sub-processors required to operate the service:

Supabase — database and authentication (EU data residency)
Anthropic — AI content generation and assessment
Stripe — payment processing
Resend — transactional email delivery
Netlify — platform hosting

We do not sell your data. We do not share it with advertisers or data brokers.

If Autonomy or Hyphen Education Group is acquired, your data may transfer to the acquiring entity under equivalent protections.

5. Data Retention

Account and learning data: retained while your account is active and for 2 years after closure, unless you request earlier deletion
Payment records: retained for 7 years for legal and tax compliance
Deleted accounts: learning data anonymised within 30 days of deletion request

6. Your Rights

Under UK GDPR you have the right to:

Access — request a copy of data we hold about you
Rectification — correct inaccurate data
Erasure — request deletion of your account and learning data
Portability — receive your data in a machine-readable format
Object — object to processing based on legitimate interests (e.g. re-engagement emails)
Withdraw consent — where processing is consent-based

To exercise any of these rights, email oscar@hyphenedu.com. We will respond within 30 days.

You also have the right to lodge a complaint with the ICO (Information Commissioner's Office) at ico.org.uk.

7. Cookies and Local Storage

We use browser local storage (not third-party cookies) to store session state and learning progress between visits. This is necessary for the platform to function. We do not use advertising trackers or analytics cookies.

We use Stripe's payment widget, which sets cookies for fraud prevention. These are governed by Stripe's privacy policy.

8. Security

We use industry-standard security measures including row-level security on our database, HTTPS for all connections, and magic link authentication (no passwords stored). Access to production data is restricted to authorised personnel only.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email. The date at the top indicates when it was last revised.

10. Contact

Data controller: Hyphen Education Group Ltd, England and Wales.

Privacy queries: oscar@hyphenedu.com

← Back to Autonomy