Privacy Policy

Last updated: 5 September 2026

This explains what WomenInGenAI Academy collects, why, and what you can do about it. The Academy is operated by Tatyana Kanzaveli, who is the data controller for the purposes of the UK and EU GDPR.

What we collect

What	Why
Your email address and password	To create your account and sign you in. The password is stored by our sign-in provider in hashed form — we never see it.
Your four learning answers: tech comfort, learning style, goal and pace	To adapt every lesson to you. This is the core of what the Academy does. You can change them any time on your profile.
Your preferred language	To write your lessons and the interface in it.
What you type into a lesson, the practice box or the chat	To generate your lesson or answer your question.
Your generated lessons	So you can re-read and download them instead of getting different text each time.
Your progress, and whether you have paid	To show you the right next lesson and to unlock what you bought.
Product events — a lesson started, a lesson finished, a purchase made	To understand whether the Academy works. These record that a step happened, never lesson text, your answers, or your name.
The website you arrived from, and any campaign tag on the link you clicked	To know which of our own posts brought people here. We record only the site's name — for example `linkedin.com` — never the page, the address, or anything you searched for.
The name you type for your certificate	To draw it on the certificate. It is used for nothing else.

We never see or store your card details. Payment happens entirely on Stripe's own checkout page.

Who we share it with

We do not sell your data and we do not use it for advertising. We use these processors to run the Academy:

Supabase — accounts, sign-in, and the database holding your profile, progress and saved lessons.
Anthropic — receives your learning profile and anything you type into a lesson or the chat, in order to write your lesson or answer you.
Stripe — handles payment and holds your payment record.
Vercel — hosts the Academy and serves the pages.
Resend — sends the occasional email nudge if you have started a course and gone quiet.

Some of these operate outside your country, including in the United States. Where that involves a transfer out of the UK or EEA, it is covered by the providers' standard contractual clauses.

Legal basis

Performing our contract with you — your account, your lessons, your progress, your purchase.
Legitimate interests — product analytics that carry no personal content, and keeping the Academy secure.
Legal obligation — keeping payment and tax records.

How long we keep it

Your account and lessons are kept while your account exists, so that what you paid for stays available. Payment records are kept as long as tax law requires. If you delete your account, your profile, progress and saved lessons are deleted with it.

Your rights

Wherever you live, and in particular under the UK and EU GDPR, you can ask us to:

Give you a copy of your data;
Correct anything wrong — the four learning answers you can already change yourself, on your profile;
Delete your account and everything in it;
Restrict or object to a particular use;
Export your data in a portable form. Your lessons already download as a single file from the Academy itself.

Email hello@womeningenai.ai and we will action it within 30 days. If you are unhappy with how we handle it, you can complain to your data protection authority — in the UK, the Information Commissioner's Office.

Cookies and local storage

The Academy does not use advertising or tracking cookies. It stores a sign-in session so you stay logged in, and a small amount of data in your browser to remember things like which milestone messages you have already seen. Signing out clears that.

Children

The Academy is for adults and is not directed at children under 16.

Changes

If we change this policy materially, we will tell you by email. The date at the top always shows the current version.

Contact

hello@womeningenai.ai