Privacy Policy
How GXPLearn.io collects, uses and protects personal data. Last updated: July 2025.
This Privacy Policy describes how GXPLearn.io collects, uses and protects personal data when you use our training platform.
Who we are
GXPLearn.io is an independent educational training platform for GxP, GMP, CSV, CSA and validation learning. This policy applies to the website, training app and related services operated at gxplearn.io.
What we collect
When you create an account, we collect your email address and authentication data through our identity provider (Supabase Auth). As you use the training platform, we store module progress, scores, completion state and licence status to sync your learning across devices. If you submit a business demo or support request, we collect the information you provide (such as name, company and message). Individual payments are processed by Stripe; we receive transaction metadata but not full card numbers.
How we use your information
We use account and progress data to authenticate you, deliver training content, enforce licence access, respond to support requests and operate the platform. We do not use learner data for advertising profiles or sell personal information to third parties. Where you request a team or site licence, we use contact details to discuss onboarding and invoicing.
Legal bases (EEA and UK)
Where the GDPR or UK GDPR applies, we process personal data on the following bases: performance of a contract (providing the service you signed up for); legitimate interests (securing and improving the platform, preventing abuse); and consent where required (for example, optional marketing communications if offered). You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
What we do not do
GXPLearn.io does not sell learner data. We do not claim to provide validated GMP training records, regulator-approved certification, or employer-mandated training compliance on your behalf.
Service providers
We use trusted processors to run the platform, including Supabase (authentication and database hosting), Stripe (payment processing) and infrastructure providers that host static assets. These providers process data only on our instructions and under appropriate agreements.
Cookies and local storage
The training app uses browser local storage for theme preferences, module progress and session state. Sign-in may use cookies managed by our authentication provider. We do not use third-party advertising cookies on the training app.
Data retention
Account and progress data are retained while your account remains active and as needed to meet legal, tax or dispute-resolution obligations. When you request account deletion, we delete or anonymise personal data within 30 days unless we must retain specific records by law.
Your rights
Depending on your location, you may have rights to access, correct, delete, restrict or port your personal data, and to object to certain processing. To exercise these rights, email support@gxplearn.io. You may also lodge a complaint with your local data protection authority.
International transfers
Our service providers may process data in countries outside your own. Where required, we rely on appropriate safeguards such as standard contractual clauses approved by relevant authorities.
Children
GXPLearn.io is intended for professional and educational use by adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us data, email support@gxplearn.io so we can delete it.
Changes to this policy
We may update this Privacy Policy from time to time. The last updated date at the top of this page shows when changes were published. Material changes will be communicated through the app or website where appropriate.
Contact
For privacy questions or data requests, email support@gxplearn.io.
Ready to practise regulated workflows?
Choose the path that fits — start with free foundation modules or discuss a team licence for your organisation.
For individuals
Start with the free foundation modules and upgrade when you are ready for simulation labs and professional scenarios.
For businesses
Request a business demo or pilot discussion for team/site licensing, standalone export, and onboarding use cases.