1. Who We Are
Amniora is an online cybersecurity learning platform that provides interactive learning tools, saved labs, roadmap progress, achievements, and, in the future, AI-powered educational features and paid subscriptions. For the purposes of UK GDPR and EU GDPR, Amniora is the data controller for personal data processed through this platform.
2. Personal Data We Collect
We may collect account information such as your email address, authentication details, profile settings, saved labs, generated lab content, roadmap progress, XP, levels, achievements, AI prompts, AI responses, support messages, usage records, device information, browser information, IP address, cookie identifiers, and security logs.
3. How We Collect Data
We collect data directly from you when you create an account, use Amniora, save labs, complete roadmap tasks, update settings, contact us, or use future AI features. We may also collect technical data automatically through authentication systems, cookies, local storage, server logs, security tools, and analytics services where permitted by law.
4. Lawful Bases for Processing
We process personal data only where we have a lawful basis under applicable data protection law. This may include performance of a contract when providing your account and platform features, legitimate interests such as improving and securing Amniora, consent for optional cookies or certain communications, and legal obligation where we must comply with applicable laws.
5. How We Use Your Data
We use personal data to create and manage accounts, authenticate users, provide saved labs, track roadmap progress, deliver learning features, personalise the user experience, secure the platform, prevent fraud or abuse, provide support, improve Amniora, enforce usage limits, and prepare future AI and subscription features.
6. AI Features and Generated Content
Amniora uses third-party AI services, including OpenAI, to provide features such as the AI Tutor and AI Lab Generator. If you use these features, prompts, uploaded or selected context, generated outputs, usage records, timestamps, model metadata, and related technical information may be processed by Amniora and OpenAI to provide the feature, maintain conversation or lab history, prevent misuse, monitor fair use, and improve reliability. Amniora has enabled optional sharing of API inputs and outputs with OpenAI for research, evaluation, testing, and service improvement. Do not submit sensitive, confidential, proprietary, legally privileged, or private material, protected health information, children's personal information, passwords, private keys, payment details, or confidential business information into AI features. Retention and user-rights handling follows the general retention and rights sections of this Privacy Policy and the capabilities currently supported by Amniora and its providers. This setting may change; if it does, Amniora will update this Privacy Policy and the AI content sharing notice where required.
8. Third-Party Services
Amniora may use trusted third-party providers to operate the platform. This currently includes Supabase for authentication, database storage, and backend infrastructure. In the future, Amniora may use providers such as Stripe for secure subscription payments, analytics providers for product improvement, hosting providers for deployment, and AI providers for educational AI features.
9. Payments and Subscriptions
If Amniora introduces paid subscriptions, payment processing will be handled by a secure third-party payment provider such as Stripe. Amniora will not store full card numbers, CVV codes, or full payment card details. We may store subscription status, plan type, billing identifiers, renewal status, cancellation status, and payment-related metadata needed to manage access to paid features.
10. International Data Transfers
Some third-party providers may process data outside the United Kingdom or European Economic Area. Where this happens, Amniora will aim to rely on appropriate safeguards such as adequacy regulations, adequacy decisions, standard contractual clauses, or equivalent lawful transfer mechanisms required by UK GDPR and EU GDPR.
11. Data Retention
We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy. Account data, saved labs, roadmap progress, and learning history may be kept while your account remains active. Security logs, support messages, billing records, and legal records may be kept for longer where necessary for security, fraud prevention, accounting, dispute resolution, or legal compliance.
12. Data Security
Amniora uses reasonable technical and organisational measures to protect personal data, including authenticated access controls, database ownership checks where appropriate, secure third-party infrastructure, and platform security controls. However, no online platform can guarantee complete security, and users should protect their login details carefully.
13. Your Data Protection Rights
Depending on your location, you may have the right to access your personal data, request correction, request deletion, restrict processing, object to processing, request data portability, withdraw consent where processing is based on consent, and complain to a data protection authority. In the UK, this is the Information Commissioner’s Office. In the EU, you may contact your local supervisory authority.
14. Your Right to Object
You have the right to object to processing based on legitimate interests, including certain types of profiling or analytics. You may also object to direct marketing at any time. Amniora will respect valid objections unless there are compelling legitimate grounds or legal reasons to continue processing.
15. Children’s Privacy
Amniora is not intended for children below the minimum digital consent age required by applicable law. Users should only create an account if they are legally able to use online learning services in their location or have appropriate permission from a parent or guardian where required.
16. Data Sharing
We do not sell personal data. We may share personal data with service providers who help operate Amniora, where required by law, to protect users or the platform, during business transfers, or where you have given consent. Service providers are expected to process data only for authorised purposes.
17. Changes to This Privacy Policy
We may update this Privacy Policy as Amniora develops, including when AI features, subscriptions, analytics, classroom tools, or new integrations are introduced. The latest version will be shown on this page with an updated date.
18. Contact
If you have questions about this Privacy Policy or wish to exercise your data protection rights, you can contact Amniora through the Contact page once available.