Privacy Policy

1. What data we collect

Account data: name, email, preferred language, password (encrypted, we never see it in plain text).

Usage data: completed lessons, quiz and exam answers, grades, day streak, certificates earned.

Payment data: processed directly by Stripe. Kolibrí only receives the outcome (active plan, renewal date) — never your full card number.

2. What we use it for

To give you access to the Service and your progress, to process payments, to send you account-related emails (confirmation, reminders, certificates), and to understand how Kolibrí is used so we can improve it.

3. Who we share data with

We don't sell your data. We only share it with the providers we need to run the Service, each acting as a data processor:

• Supabase (database, authentication) · Stripe (payments) · Vercel (hosting) · Resend (email, once active) · PostHog (product analytics, once active).

Some of these providers process data on servers outside your country (for example, in the United States), under contractual data-protection safeguards.

4. How long we keep your data

For as long as your account is active. If you ask us to delete your account, we remove your personal data within a reasonable time, except what we must retain for legal obligations (for example, billing records).

5. Security

Each student can only see and change their own progress (database-level Row Level Security). Lesson video is always served through private, temporary links — never public ones.

6. Your rights

No matter where you live, you can always ask us to access your data, correct it, or delete your account, by writing to hola@kolibriacademy.xyz.

7. If you live in the European Union (GDPR)

You have the right to access, rectify, erase ("right to be forgotten"), restrict, or object to the processing of your data, and to data portability. The legal basis for our processing is performance of the service contract (your account) and, for optional communications, your consent.

You have the right to lodge a complaint with your country's data protection authority if you believe we're not respecting your rights.

8. If you live in Latin America

We recognize your right to access, rectify, update, and delete your personal data under your country's data-protection law (for example, Law 25,326 in Argentina). You can exercise it by writing to hola@kolibriacademy.xyz, and if we don't resolve your request, you have the right to complain to the corresponding data protection authority.

9. If you live in the United States (e.g., California)

You have the right to know what personal data we collect about you, to request its deletion, and to not be discriminated against for exercising these rights. We do not sell your personal data to third parties.

10. Cookies

We use a simple cookie to remember your preferred language, and (once active) the usage-analytics scripts mentioned in section 3, which may also use cookies or local storage.

11. Children

Kolibrí is not directed at children under 16, and we do not knowingly collect data from children.

12. Changes to this policy

If we make a material change, we'll notify you by email before it takes effect.

13. Contact

To exercise any of these rights or ask a question, write to us at hola@kolibriacademy.xyz.