Last updated: March 2026
Subacademy (operated by Subcheck) respects your privacy. This policy explains what personal information we collect, how we use it, and your rights regarding that information. It applies to subacademy.org (our landing page) and app.subacademy.org (our training platform).
When you create an account on app.subacademy.org, we collect your name and email address through our authentication provider, Clerk. This is the minimum information required to provide you with an account.
As you use the platform, we collect information about your learning progress, including modules started and completed, lesson progress, quiz and assessment scores, time spent on content, and certificates earned. This data is essential to providing the training service.
We automatically collect limited technical data when you visit our sites, including IP address (temporarily, for security), browser type and version, device type, and pages visited. We do not use this data for tracking, profiling, or advertising.
We use your personal information exclusively to:
We use only essential cookies required for the platform to function:
We do not use analytics cookies, advertising cookies, retargeting pixels, or any form of third-party tracking. For full details, see our Cookie Policy.
We use the following third-party services to operate the platform. Each processes data according to their own privacy policies:
We may share limited personal information with our parent organization, Subcheck, as part of normal business operations. We do not sell, rent, or trade personal information to unaffiliated third parties.
Your personal information is retained for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, with the following exceptions:
To request account deletion, email privacy@subacademy.org.
If you are located in the European Economic Area or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):
Our legal basis for processing is contractual necessity (providing the training service you signed up for) and legitimate interest (platform security). To exercise any of these rights, contact privacy@subacademy.org. We will respond within 30 days.
California residents have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
We do not sell personal information. We may share limited information with affiliated entities within our corporate family. You may opt out of such sharing. See our Do Not Sell My Information page.
We comply with the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), and the Connecticut Data Privacy Act (CTDPA). Residents of these states have rights to access, correct, delete, and port their personal data. We do not sell personal data or engage in targeted advertising under any of these frameworks.
Subacademy is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact privacy@subacademy.org and we will delete it promptly.
We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS), secure authentication via Clerk, access controls, and regular security reviews.
Your data may be processed in the United States through our hosting providers (Vercel, Neon, Clerk). Where personal data is transferred from the EU/EEA/UK to the United States, we rely on the EU-U.S. Data Privacy Framework and standard contractual clauses as appropriate.
We may update this Privacy Policy to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date and notify registered users via email.
For privacy-related inquiries, data access requests, or to exercise any of your rights:
Email: privacy@subacademy.org
Operator: Subcheck