Privacy Policy

Last updated: October 8, 2026

This Privacy Policy explains what personal data Ademy collects, why, who we share it with and the choices and rights you have. It applies to ademy.net, our emails and our checkout pages.

1. Who is responsible for your data

The controller of your personal data is Ademy Group, based in Spain, which operates Ademy. For any privacy question or request, email [email protected].

2. Data we collect

Account data: your email address and name. If you sign in with Google, we also receive your Google account identifier and profile photo.
Membership and payment data: your plan, trial and subscription status, billing dates, amounts, currency and payment history. Payments are processed by Stripe; we never receive or store your full card number.
Learning data: the courses and lessons you watch, your progress and your saved classes.
Interests: the course categories you choose when you sign up.
Location (approximate): your country, worked out from your IP address, so we can show prices in your currency. We do not collect your precise location.
Security logs: technical records such as IP address, browser, date and time of logins and requests, used to keep the service secure and prevent fraud.
Checkout analytics: on our sign-up and payment pages we record, with our own first-party tool, an anonymous visitor code created from your IP address and browser user agent (a "hash", not your actual IP), your device type and browser type, whether Apple Pay or Google Pay is available on your device, and which buttons you click. We use this only to understand and improve our checkout.
Messages: what you send us by email or through the contact form.

We do not ask for, and do not want, sensitive data such as health information. Providing your email and payment details is necessary to subscribe; without them we cannot provide the service.

3. Why we use your data and our legal bases

If you are in the EU, EEA or UK, the GDPR requires us to have a legal basis for each use:

To create and run your account, provide the courses and community groups, process payments and renewals, and send you service emails (sign-up confirmation, login links, trial-ending reminder, receipts, and changes to prices or terms). Legal basis: performance of our contract with you.
To show prices in your currency and remember your interests and progress to recommend relevant courses. Legal basis: performance of our contract and our legitimate interest in giving you a relevant experience.
To improve the checkout and the platform using the checkout analytics and usage data described above. Legal basis: our legitimate interest in making the service work better. You can object at any time (see section 8).
To keep Ademy secure and prevent fraud, abuse and repeated trials. Legal basis: our legitimate interest in protecting the service and our members.
To answer your questions and requests. Legal basis: contract or legitimate interest.
To meet legal obligations, such as tax and accounting records and responding to lawful requests. Legal basis: legal obligation.

We do not use your data for automated decisions that have legal or similarly significant effects on you, and we do not use advertising cookies or targeted advertising.

4. Who we share your data with

We do not sell your personal data. We share it only with service providers (processors) who help us run Ademy and who may use it only on our instructions:

Hosting provider: stores and serves the website and its database.
Stripe: processes payments, including Apple Pay and Google Pay, and helps prevent fraud. Stripe also acts as an independent controller for some payment data under its own privacy policy.
Google: provides "Continue with Google" sign-in, if you choose to use it.
Email delivery provider: sends our service emails, such as login links and reminders.

We may also share data when required by law, to protect our rights or the safety of others, or as part of a merger or sale of our business (in which case this policy will continue to protect your data). Community groups run on third-party apps such as WhatsApp or Telegram; if you join one, those apps process your data under their own privacy policies, and other group members can see the information your profile on that app shows.

5. International transfers

Ademy Group is based in Spain (European Union). Some of our service providers (for example, payment processing and hosting) may process data in the United States and other countries outside the EEA. When personal data is transferred to countries that do not have an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK addendum where applicable) or another lawful transfer mechanism, together with appropriate safeguards. You can ask us for more information about these safeguards.

6. How long we keep your data

Account, learning and interests data: while your account exists. If you ask us to delete your account, we delete or anonymize this data, except what we must keep for the reasons below.
Payment and billing records: for as long as tax and accounting laws require.
Security logs and checkout analytics: only as long as needed for security and to improve the checkout, after which they are deleted or kept only in aggregated form.
Support messages: as long as needed to handle your request and any follow-up.

7. Security

We use reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), passwordless login with one-time links or Google, and access limited to people who need it. Payments are handled by Stripe, a certified payment processor. No system is 100% secure, so please keep your email account secure and tell us if you notice anything suspicious.

8. Your rights

Depending on where you live, you have the right to:

access the personal data we hold about you and get a copy;
correct inaccurate data;
delete your data;
receive your data in a portable format;
object to processing based on our legitimate interests, including the checkout analytics;
restrict processing in certain cases;
withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email [email protected] from the email address of your account. We may need to verify your identity. We will reply within one month (or the time the law requires). If you are in the EU, EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

9. California privacy rights (CCPA/CPRA)

If you are a California resident, this section applies to you in addition to the rest of this policy.

Categories of personal information we collect (in the last 12 months), from you, your device and our payment and sign-in providers, for the purposes described in section 3:

Identifiers: name, email address, Google account identifier, IP address and an anonymous visitor code.
Customer records and commercial information: subscription, trial and payment history (no full card numbers).
Internet or other electronic network activity: course progress, saved classes, interests, button clicks on the checkout, device and browser type, and security logs.
Approximate geolocation: country only.
Audio or visual information: your Google profile photo, if you sign in with Google.

We do not collect sensitive personal information as defined by California law. We disclose personal information for business purposes only to the service providers listed in section 4.

No sale or sharing. We do not sell your personal information and do not "share" it for cross-context behavioral advertising, and we have not done so in the last 12 months. We do not knowingly sell or share the personal information of consumers under 16.

Your rights. You have the right to know what personal information we collect, use and disclose; to access it; to delete it; to correct it; to opt out of sale or sharing (although we do not sell or share it); and to limit the use of sensitive personal information (although we do not use it for purposes that require this right). We will not discriminate against you for exercising these rights.

How to exercise them. Email [email protected] with the subject "California privacy request". We will verify your request by confirming it with the email address on your account. You can use an authorized agent, who must provide proof that you authorized them. We will respond within 45 days, or tell you if we need more time as the law allows.

Retention. We keep each category of personal information for the periods described in section 6.

10. Children

Ademy is only for people who are 18 or older (or the age of majority where they live). We do not knowingly collect data from children. If you believe a child has given us personal data, email us and we will delete it.

11. Cookies

We only use strictly necessary cookies. See our Cookie Policy.

12. Changes to this policy

We may update this policy from time to time. We will post the new version here and update the date above, and if a change is significant we will tell you by email or on the website before it applies.

13. Contact

Ademy Group. Email: [email protected].