Legal

Privacy Policy

Last updated 6 July 2026

This Privacy Policy explains how Grypio ("Grypio", "we", "us", or "our") collects, uses, and protects your personal information when you use our website and learning platform (the "Service"). We are the controller of your personal information. If you have any questions, contact us at hello@grypio.com.

Who we are

Grypio is an AI skills learning platform that helps people learn to use AI through structured lessons, practice, and tools. We operate the Service online for a global audience.

Information we collect

Account information. When you create an account we collect your name, email address, and a securely hashed password. If you sign in with a third-party sign-in provider, we receive basic profile information such as your name, email address, and profile picture from that provider.

Subscription and payment information. Payments are handled by our third-party payment provider, which acts as the merchant of record. We do not collect or store your full payment card details. We receive limited information such as your subscription tier, billing status, and the country associated with your purchase.

Learning activity. We store your activity on the platform, such as lessons completed, quiz and assessment responses, streaks, points, certificates, and time spent learning.

Practice interactions. When you use our AI practice features, the messages you send are processed to generate a response and to operate and improve the feature.

Technical and usage information. We collect information such as your device and browser type, approximate location derived from your IP address, and how you interact with the Service, including through cookies and similar technologies (see our Cookie Policy).

Communications. If you contact us, we keep a record of that correspondence.

How we use your information

We use your information to:

• provide, operate, and secure the Service and your account;
• process subscriptions and payments;
• personalise and improve the Service and develop new features;
• communicate with you about your account, changes, and support;
• send you marketing communications where permitted, from which you can unsubscribe at any time;
• understand how the Service is used through analytics; and
• comply with our legal obligations and protect our legal rights.

Where the law requires a lawful basis for processing (for example, consent, performance of a contract, legal obligation, or our legitimate interests in running and improving our business), we rely on the appropriate basis for each purpose above.

How we share your information

We do not sell your personal information. We share it only with:

• service providers (processors) who help us run the Service, described by category: cloud hosting and infrastructure, payment processing, email and communications delivery, product analytics, and AI processing. These providers act on our instructions and are required to protect your information. We can provide our current list of key providers on request;
• authorities or other parties where required by law, to enforce our terms, or to protect the rights, safety, and security of Grypio, our users, or the public; and
• a successor in the event of a merger, acquisition, or sale of assets, subject to this Policy.

International transfers

We operate online and use providers in different countries, so your information may be processed internationally, including in countries other than the one where you live. Where we transfer information across borders, we take steps to ensure it remains appropriately protected.

Data retention

We keep your personal information for as long as your account is active and as needed to provide the Service, and afterwards only as long as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymise it.

Your rights

Depending on where you live, you may have rights over your personal information, such as the right to access, correct, delete, or receive a copy of it; to restrict or object to certain processing; to withdraw consent; and to data portability. You can exercise many of these directly in your account or by contacting hello@grypio.com. If you believe we have not handled your information properly, you may also have the right to complain to the data protection authority in your country.

Security

We use appropriate technical and organisational measures to protect your information, including encryption in transit, hashed passwords, access controls, and database-level security. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The Service is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has provided us with information, contact us and we will delete it.

Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will post the updated Policy with a new effective date and, where appropriate, notify you.

Contact

For any privacy question, or to exercise your rights, contact us at hello@grypio.com.

_Last updated: 6 July 2026._