Privacy Policy

Your trust matters deeply to us at Frixo, and we're committed to protecting your personal information while you learn and grow on our platform. This policy walks you through exactly what data we collect, why we need it, and how we keep it secure—because understanding your rights shouldn't require a law degree.

Last Updated: January 2025

Information We Collect

When you join Frixo, we gather information that helps us create a personalized learning experience tailored to your educational goals. We collect this data through three primary channels: information you provide directly, data generated automatically as you use our platform, and certain details from third-party sources when you choose to connect external accounts or services.

The personal information you share with us includes your name, username, password, email address, profile photo, educational background, and language preferences. Beyond these basics, we track your learning journey—the courses you enroll in, lessons you complete, quiz scores, assignment submissions, time spent on different modules, and progress through certification programs.

Account and Profile Data

Registration information encompasses your chosen username, secure password hash, primary email address, and optional phone number for account recovery purposes. We never store passwords in plain text—they're encrypted using industry-standard hashing algorithms.
Profile customization allows you to add biographical details, professional experience, educational credentials, learning objectives, and skill assessments. These elements help instructors and fellow learners connect with you based on shared interests.
Billing and payment data includes your payment method details, transaction history, subscription tier, and invoicing information. Our payment processors handle sensitive card information directly, so we never store complete payment credentials on our servers.

Learning Activity Information

Your interactions within our educational ecosystem generate valuable data that shapes your experience. We monitor which videos you watch, how long you engage with each lesson, when you pause or rewind content, and what playback speed you prefer. Discussion forum posts, comments on course materials, questions asked to instructors, and peer-to-peer messaging all contribute to our understanding of your learning style.

Assessment data forms another crucial layer—we record your quiz attempts, assignment submissions, peer review participation, and certification exam results. This information doesn't just track your progress; it helps us identify concepts that might need additional explanation or resources that resonate particularly well with learners.

Technical and Usage Data

Device information captures your operating system version, browser type and version, screen resolution, device model, and unique device identifiers. We use this to ensure our platform displays correctly across different devices and to troubleshoot technical issues.
Log data automatically records your IP address, access times, pages viewed, referring URLs, and clickstream patterns. This helps us understand traffic sources, identify popular content, and detect unusual activity that might indicate security concerns.
Location data derived from your IP address gives us general geographic information—typically city and country level—which helps us provide region-appropriate content, language options, and comply with local regulations. We don't track precise GPS coordinates unless you explicitly enable location services for specific features.

Data Usage Purposes

We put your information to work in ways that directly benefit your learning experience and keep our platform running smoothly. The data we collect powers core functions like authenticating your login, remembering your progress, personalizing course recommendations, and enabling communication between students and instructors.

Our recommendation engine analyzes your learning patterns to suggest courses that align with your interests and skill level. When you struggle with particular concepts, we might surface supplementary materials or alternative explanations. If you're excelling, we'll point you toward advanced topics that challenge your growing expertise.

Platform Operations and Services

Account management requires us to verify your identity, process your subscription payments, respond to support requests, and send essential service notifications about your account status, course updates, or platform changes. Without this data, we couldn't maintain your access or resolve technical problems.
Educational delivery depends on tracking your progress through course materials, saving your place in video lectures, recording your quiz scores, and issuing certificates upon completion. We use this information to ensure you can seamlessly resume learning across devices and maintain an accurate transcript of your achievements.
Communication facilitation enables direct messaging between learners, instructor feedback on assignments, discussion forum participation, and announcement systems that keep you informed about new content or platform features. Your profile information helps others identify you within these collaborative spaces.

Service Enhancement and Research

Aggregated data from thousands of learners reveals patterns that guide our content development and platform improvements. We analyze completion rates, common drop-off points, frequently asked questions, and areas where students request additional resources. This research informs curriculum design without exposing individual learning struggles.

A/B testing helps us refine user interface elements, navigation structures, and feature implementations. We might show different groups of users variations of a new tool to determine which version provides the clearest path to learning success—always respecting your privacy by keeping individual test participation anonymous in our analysis.

Data Collected Through External Tools

Modern online education relies on specialized services that each bring unique capabilities to our platform. We've partnered with carefully selected third-party providers who help us deliver video content, process payments, analyze platform usage, and maintain infrastructure. Each integration means some of your data flows to these external services under their own privacy policies.

Video hosting providers receive information about which lectures you watch and how you interact with video players. Analytics platforms collect anonymized usage statistics that reveal how learners navigate our site. Payment processors handle your financial transactions securely, while cloud infrastructure providers store and serve the content you access.

Analytics and Performance Monitoring

Web analytics services track page views, session duration, bounce rates, and conversion funnels to help us understand how effectively our platform serves different user groups. These tools typically collect cookie identifiers, device characteristics, and browsing behavior patterns aggregated across many users.
Performance monitoring systems detect slow page loads, error messages, and technical failures that disrupt your learning experience. They capture diagnostic information like browser console logs, network timing data, and server response codes that our engineering team uses to identify and fix problems quickly.
A/B testing platforms randomly assign users to experimental groups testing interface variations, feature implementations, or content presentations. These services collect interaction data to determine which versions perform better, helping us make evidence-based design decisions.

Communication and Support Tools

Customer support platforms store your help desk tickets, chat transcripts, and support email correspondence so our team can provide consistent assistance across multiple interactions. When you contact us for help, these systems retain conversation history, attached screenshots, and resolution notes that enable faster problem-solving for recurring issues.

Email service providers manage our transactional messages, course announcements, and marketing communications. They track delivery rates, open rates, and click-through rates on emails we send—though you can opt out of promotional messages while still receiving essential account notifications.

Data Protection and Confidentiality

Security isn't just a checklist item for us—it's a continuous commitment that shapes every technical decision we make. We employ multiple layers of protection, from encryption protocols that scramble your data during transmission to access controls that limit who can view sensitive information within our organization.

Our infrastructure runs on secure cloud platforms with built-in redundancy and disaster recovery capabilities. Regular security audits, penetration testing, and vulnerability assessments help us identify weaknesses before they become problems. When security researchers discover potential issues, we act quickly to patch vulnerabilities and notify affected users if necessary.

Technical Security Measures

Encryption standards protect your data both in transit and at rest, using TLS 1.3 for all connections to our servers and AES-256 encryption for stored sensitive information. Your password never travels across the internet in readable form, and we hash it using bcrypt before storage.
Access controls ensure that only authorized personnel can view personal information, and even then, access is limited to what's necessary for their specific job functions. We maintain detailed audit logs of who accesses what data and when, enabling us to detect unauthorized access attempts.
Data minimization guides our collection practices—we only gather information that serves a clear purpose in delivering or improving our educational services. We regularly review stored data and delete outdated records according to retention schedules outlined in our data management policies.

Organizational Safeguards

Our team receives regular training on data protection principles, recognizing phishing attempts, and following security best practices in their daily work. We've established incident response procedures that kick into action if we detect a potential data breach, ensuring rapid containment and transparent communication with affected users.

Vendor management processes require our third-party partners to demonstrate adequate security measures before we share any user data with them. We execute data processing agreements that legally bind these partners to protect your information according to the same standards we maintain internally.

Cookie Usage

Cookies and similar tracking technologies help us remember your preferences, maintain your logged-in status, and understand how you use our platform. When you first visit Frixo, we ask for your consent to use non-essential cookies—those that aren't strictly necessary for the platform to function but help us improve your experience through analytics and personalization.

Essential cookies keep you logged in, remember your language preference, and maintain your shopping cart if you're purchasing courses. These can't be disabled without breaking core functionality. Analytics cookies track aggregated usage patterns, while preference cookies save your video playback settings and interface customizations.

Session cookies expire when you close your browser and help manage temporary states like form data or navigation history within a single visit. They're crucial for maintaining security during your active session on the platform.
Persistent cookies remain on your device for longer periods, storing preferences like "remember me" options, theme selections, or recently viewed courses. You can clear these through your browser settings whenever you wish.
Third-party cookies come from external services embedded in our platform, such as video players or social media widgets. We've minimized these where possible, but some integrated tools require them to function properly.

Legal Framework for Data Protection

We process your personal data based on several legal grounds depending on your location and the nature of the information. When you create an account, we rely on our contract with you to provide educational services. For improvements and analytics, we base processing on our legitimate business interests—always balanced against your privacy rights.

Compliance with regulations like GDPR, CCPA, and other privacy laws shapes our data practices across all regions, not just where legally required. You have rights to access your data, request corrections, download a copy, or delete your account entirely. We've built tools directly into your account settings that make exercising these rights straightforward.