Privacy Policy
Last updated: 6 July 2026
1. Who we are
Isikolo operates isikolo.co and isikolo.app. This policy explains what personal data we collect and how we use it. Contact: ben@isikolo.co.
2. Data we collect
- Account data — name, email address, password (stored hashed), role (student/creator).
- Purchase data — courses purchased, amounts and currency, transaction references. Full payment details (card numbers, Pix data) are processed by Paddle, our merchant of record — we never see or store them.
- Usage data — pages viewed, lessons watched, device and browser information, collected via PostHog and Vercel Analytics to improve the product.
- Creator data — profile information, uploaded content, and payout details for creators who license content to us.
3. How we use data
- To provide the service: accounts, purchases, course access and progress.
- To process payments and prevent fraud (via Paddle).
- To pay educators their revenue share.
- To understand product usage and improve Isikolo.
- To communicate service messages; marketing messages only with consent.
4. Where data lives and who we share it with
Data is stored with our infrastructure providers: Supabase (database and authentication, EU region), Vercel (hosting), PostHog (analytics) and Paddle (payments). We do not sell personal data. We share data only with these processors, or where required by law.
5. Your rights
Depending on where you live — including under the UK/EU GDPR and Brazil's LGPD (Lei Geral de Proteção de Dados) — you have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise any right, email ben@isikolo.co. You may also lodge a complaint with your local data protection authority (in Brazil, the ANPD).
6. Retention
Account data is kept while your account is active. Purchase records are retained as required for tax and accounting. Analytics data is retained in aggregate form.
7. Cookies
We use essential cookies for login sessions and functional storage for course progress. Analytics use first-party tooling; we do not run third-party advertising cookies.
8. Changes
We will post any changes to this policy on this page and note the date above.