How we handle your data.How we handle your data.

1. Who we are

Learnify is a product of HabileLabs Pvt. Ltd., with offices in Jaipur, Gurugram, Mumbai, Surrey (Metro Vancouver, Canada) and Zug (Switzerland). Our registered office is at Sec-93 Agarwal Farm, Mansarovar, Jaipur, Rajasthan 302020, India. For questions about this policy or your data, contact us at info@habilelabs.io.

2. What we collect

• Account data — name, work email, organization and role when you sign up, request a demo, or are provisioned into an LMS workspace.
• Usage data — pages visited, course progress, quiz attempts, device and browser information, IP address.
• Content you upload — courses, lessons, files, comments and submissions inside your Learnify workspace.
• Support data — messages, attachments and call notes when you contact us.

3. How we use it

We use personal data to:

• Provide and operate the Learnify LMS and this website.
• Authenticate users, secure accounts and prevent abuse.
• Send service notifications, transactional emails and (with consent) product updates.
• Improve product performance, reliability and learning outcomes — using aggregated, de-identified analytics.
• Comply with legal, tax and audit obligations.

We do not sell your personal data, and we do not use learner content to train third-party AI models.

4. Where data is stored

Learnify is deployed on AWS, Azure or GCP regions chosen by your organization. By default, Indian customers’ data is stored in ap-south-1 (Mumbai); EU customers in eu-central-1 (Frankfurt); North American customers in us-east-1 (N. Virginia). On-premise deployments are available on the Enterprise plan.

5. Sharing and sub-processors

We share data only with vetted sub-processors that help us run Learnify — including cloud infrastructure (AWS, Azure, GCP), email delivery, error monitoring and payment processing. A current list is available on request from info@habilelabs.io.

6. Data retention

Account and workspace data is retained for the duration of your organization’s agreement and made available for export for 30 days after termination, after which it is deleted from production systems. Compliance and audit logs are retained for 7 years by default (configurable per workspace). Website and demo inquiries are retained for up to 24 months. Backups age out on a rolling schedule after deletion.

7. International transfers

Your organization chooses its hosting region, and data stays in that region by default. Where personal data must move across borders — for example, support access from another HabileLabs office — we rely on appropriate safeguards such as standard contractual clauses (SCCs) or equivalent mechanisms recognized under GDPR and the India DPDP Act. Details of transfer safeguards are available on request.

8. Security

We follow industry best practices: TLS in transit, AES-256 at rest, role-based access, principle of least privilege, regular penetration testing and a documented incident response process. Learnify is ISO 27001 aligned and SOC 2 Type II ready.

9. AI features and automated decisions

Learnify’s AI co-pilot generates drafts — quizzes, summaries, translations and module splits — that are reviewed and approved by a human before publication. We do not use Learnify to make automated decisions that produce legal or similarly significant effects about individuals, and learner content is never used to train third-party AI models.

10. Children's data

Learnify workspaces are provisioned by organizations, and our website is not directed at children. Where an education customer enrolls learners under the age of majority, the customer is responsible for obtaining any required parental or institutional consent; we process that data solely on the customer’s instructions.

11. Your rights

Depending on your jurisdiction (GDPR, India DPDP Act, CCPA and others), you may have the right to access, correct, port or delete your personal data, and to withdraw consent for marketing communications. To exercise these rights, email info@habilelabs.io — we respond within 30 days.

12. Cookies

Our website uses a small set of cookies: essential cookies needed for the site to function, and analytics cookies used in aggregate form. Where the law requires consent for non-essential cookies (for example under GDPR), we only set them on the basis of your consent, and you can withdraw that consent at any time. You can additionally block or delete cookies through your browser without losing core functionality.

13. Grievance officer and data protection contact

For grievances under the India DPDP Act and the IT Rules, or to reach our data protection function under GDPR, write to our Grievance Officer at info@habilelabs.io (subject line “Data Grievance”) or by post to HabileLabs Pvt. Ltd., Sec-93 Agarwal Farm, Mansarovar, Jaipur, Rajasthan 302020, India. We acknowledge grievances within 72 hours and aim to resolve them within 30 days.

14. Changes to this policy

When we update this policy materially, we will revise the “last updated” date above and, where appropriate, notify customers in-product or by email.

15. Contact

Questions, concerns or data requests? Reach the Learnify team via the contact page or email info@habilelabs.io.