Privacy Policy

Last Updated: 2 March 2026

1. Introduction

This Privacy Policy describes how Friendswith Limited, operating under the brand name "Vibed Unicorn" ("Company," "we," "us," or "our"), collects, uses, shares, and protects your personal information when you use our AI-powered online learning platform (the "Platform"). We are committed to protecting your privacy and adhering to all relevant data protection laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Australian Privacy Act 1988, the UK General Data Protection Regulation (UK GDPR), and other applicable privacy laws. By using the Platform, you consent to the collection, use, and sharing of your information as described in this Privacy Policy.

2. Information We Collect

We collect various types of information to provide and improve our Platform services.

2.1 Information You Provide Directly

Account Information: When you create an account, we collect personal details such as your name, email address, profile details, and user type designation (Course Creator or Student). We also collect account credentials and authentication data to secure your access.

Course-Related Content: If you are a Course Creator, you may upload content such as videos, documents, course descriptions, and supporting materials. Students may provide search queries, course preferences, and community forum posts. Chat messages and conversations with our AI learning assistant are also collected.

Payment Information: When you make a purchase or subscribe, we collect billing information through our payment processor (Stripe). We do not directly store full credit card numbers on our servers.

Communication Data: We collect communications you send through the Platform, such as community forum posts, support requests, and feedback submissions.

2.2 Information Collected Automatically

When you use the Platform, we automatically gather certain information including: pages visited and features used, time spent on the Platform, device information (IP address, browser type, operating system), and course engagement data (videos watched, quiz scores, progress tracking). We use cookies and similar tracking technologies to provide and improve our services (see our Cookie Policy).

2.3 AI Interaction Data

When you use our AI-powered features, we collect chat conversation logs with the AI learning assistant, quiz responses and results, transcript search queries, and learning preference data inferred from your interactions. This data helps us improve the accuracy and relevance of AI responses.

2.4 Information from Third Parties

We may receive information from third-party authentication providers (such as Firebase Authentication), analytics providers, and payment processors to supplement or verify your data.

3. How We Use Your Information

3.1 Platform Operation and Improvement

We use your information to: authenticate you and personalize your experience; deliver course content and AI-powered features; process payments and manage subscriptions; generate transcripts and AI responses based on course content; provide progress tracking and quiz functionality; improve Platform performance, fix bugs, and develop new features.

3.2 Communication and Support

We use your contact information to respond to support requests, send service-related notifications (account verification, security alerts, course updates), and inform you of Platform changes. We may send marketing communications with your consent, which you can opt out of at any time.

3.3 Business Operations

Your information supports analytics and performance monitoring, security and fraud prevention, legal compliance, and research and development for new features.

3.4 Email Communications

Operational Emails: By signing up, you agree to receive operational emails necessary to provide the service, including account verification, security alerts, and activity confirmations.

  • Student Notifications: Students may receive emails about course updates, new module releases, and community activity. You can control notification preferences in your account settings.
  • Creator Notifications: Creators may receive emails about new enrollments, student activity, and payout notifications.
  • Opt-Out: You may opt out of non-operational communications at any time via unsubscribe links or account settings. Opting out does not affect essential service emails.

4. AI Processing and Data Use

4.1 AI-Powered Features

Our Platform uses AI to provide: a learning assistant that answers questions about course content with video timestamps; automatic video transcription and indexing; quiz generation based on course material; and content search and recommendations.

4.2 AI Training and Improvement

We do not use your personal data or uploaded content to train our AI models. Our AI is trained on broad datasets and improves through system updates using test data and aggregated, non-identifying information. Your specific course content, chat conversations, and personal information remain confidential and are not used for model training.

4.3 AI Data Retention

AI interaction data (chat logs, quiz results, transcript queries) is stored to allow you to review past conversations and to ensure service quality. We apply the same security measures to AI interaction data as we do for other personal data. You can request deletion of specific AI conversation data by contacting us.

5. Information Sharing and Disclosure

5.1 Sharing Between Users

Course Creators can see aggregated enrollment and engagement data for their courses. Community forum posts are visible to other enrolled students (using auto-generated anonymous usernames). We do not broadly publish personal contact information between users without consent.

5.2 Service Providers

We share information with trusted third-party service providers who perform services on our behalf, including:

  • Cloud Hosting: Firebase/Google Cloud for platform hosting and data storage.
  • Payment Processing: Stripe for secure payment handling.
  • AI Services: AI providers for powering learning features, under strict confidentiality agreements.
  • Analytics: Analytics tools for understanding Platform usage (data is typically aggregated or anonymized).
  • Video Delivery: Video hosting and streaming services for secure content delivery.

We only share the minimum information necessary and do not allow providers to use your data for their own marketing.

5.3 Legal Requirements

We may disclose your information when required by law, legal process, or government request; to protect our rights, property, or safety; or to investigate fraud or security issues.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity, which will be bound by the same privacy commitments.

5.5 No Sale of Personal Data

We do not sell your personal information to third parties for monetary consideration.

6. Data Security and Protection

6.1 Security Measures

We implement comprehensive security measures including:

Encryption

Data encrypted in transit (TLS) and at rest. Secure video storage with tokenized playback.

Access Controls

Role-based access, multi-factor authentication for admin access, and regular access reviews.

Infrastructure Security

Secure cloud hosting, regular security patches, and intrusion detection monitoring.

Incident Response

Comprehensive incident response plan with rapid containment and notification procedures.

6.2 Data Retention

We retain personal information only as long as necessary:

  • Account Data: Retained while your account is active and for up to 3 years after deletion for legal compliance.
  • Course Content: Retained while courses are active and for up to 1 year after removal.
  • AI Chat Logs: Retained for up to 2 years (anonymized after 6 months).
  • Analytics Data: Aggregated data retained indefinitely with personal identifiers removed.

6.3 Data Breach Notification

In the event of a data breach, we will: assess the impact and risk; notify relevant authorities within 72 hours where required; inform affected users without undue delay; and provide guidance on protective measures.

7. Your Privacy Rights

Depending on your jurisdiction, you have certain rights regarding your personal information:

7.1 Access and Portability

You have the right to request a copy of the personal data we hold about you, and to receive your data in a portable, machine-readable format.

7.2 Correction

You can update your account information through your profile settings, or contact us to correct any inaccuracies in your data.

7.3 Deletion

You can request deletion of your personal data. We will remove it from active systems, subject to legal retention requirements. Account deletion is irreversible.

7.4 Opt-Out Rights

You can opt out of marketing communications, non-essential cookies, and certain data collection activities at any time. Exercising opt-out rights will not result in discrimination or reduced service.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for authentication, analytics, and personalization. For full details, please see our Cookie Policy. You can manage cookie preferences through your browser settings or our cookie preference center.

9. International Data Transfers

Your information may be processed in countries other than your residence, including the United States (Firebase/Google Cloud infrastructure) and other jurisdictions where our service providers operate. We ensure appropriate safeguards for international transfers through standard contractual clauses, adequacy decisions, and binding corporate rules.

10. Children's Privacy

The Platform is not intended for children under 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will delete it promptly and notify parents or guardians.

11. California Privacy Rights (CCPA/CPRA)

California residents have the right to: know what personal information is collected and how it's used; delete personal information (subject to exceptions); opt out of the sale or sharing of personal information; correct inaccurate information; and exercise these rights without discrimination.

We collect identifiers (name, email), commercial information (course purchases), internet activity (usage data, chat logs), and inferences (learning preferences). We do not sell personal information for monetary consideration.

12. European Privacy Rights (GDPR)

12.1 Legal Basis for Processing

Consent (Article 6(1)(a)): For marketing communications, non-essential cookies, and voluntary data sharing.

Contract Performance (Article 6(1)(b)): For providing Platform services, processing payments, delivering course content, and AI-powered learning features.

Legitimate Interests (Article 6(1)(f)): For platform security, fraud prevention, analytics, and improving user experience.

Legal Obligation (Article 6(1)(c)): For complying with applicable laws and regulatory requirements.

12.2 Your Rights Under GDPR

EU/EEA/UK residents have rights of: access, rectification, erasure, restriction of processing, data portability, objection to processing, withdrawal of consent, and lodging complaints with a data protection authority.

12.3 Exercising Your Rights

Contact us at hello@vibedunicorn.com with your name, email, and a description of the right you wish to exercise. We will respond within one month.

13. Australian Privacy Rights (Privacy Act 1988)

Australian residents have rights under the Australian Privacy Principles (APPs) including: access to personal information (APP 12), correction of inaccurate information (APP 13), right to complain about privacy breaches, and notification of data breaches that may cause serious harm. For complaints, contact us at hello@vibedunicorn.com or lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

14. Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, new features, legal requirements, or industry best practices. For material changes, we will provide at least 30 days' advance notice via email and/or Platform notifications. Continued use after changes take effect constitutes acceptance. Previous versions are available upon request.

15. Contact Information

For questions about this Privacy Policy, data practices, or to exercise your privacy rights:

Friendswith Limited (trading as Vibed Unicorn)

Email: hello@vibedunicorn.com

Data Rights Requests

Email: hello@vibedunicorn.com

Subject: Data Rights Request - [Type]

Response within 30 days.

Security Incidents

Email: hello@vibedunicorn.com

Subject: URGENT - Security Incident

Acknowledgment within 24 hours.

This Privacy Policy is effective as of the "Last Updated" date above and applies to all users of the Vibed Unicorn Platform.