Privacy policy
This policy explains what personal data LearnFloo processes, why, with which providers, for how long, and how to exercise your rights. It covers the www.learnfloo.com website, the app.learnfloo.com application, the API, the MCP server and the pages of the spaces, including on a custom domain.
Who is responsible
LearnFloo is published by Socaplikacija d.o.o., a company incorporated in Slovenia, Kozaršče 9, 5220 Tolmin, registration number 6614795000, VAT SI93424256. Contact for any question about your data: support@learnfloo.com.
LearnFloo plays two different roles:
- Controller for your LearnFloo account, the billing of space owners, support, security and the statistics of the www.learnfloo.com website.
- Processor for everything that happens inside a space (members, posts, courses, lives, e-mails sent to members). The space owner is the controller: they decide who joins and what is published, recorded or sent. For a question about the data of a space, contact its owner first; we will help them answer you.
The data we process
- Account: name, e-mail address, profile picture, language, password (stored as a hash, never in plain text), notification preferences. When an owner connects their own tool (LMS, CRM) through the API, they send us your name and e-mail to give you access; a guest of a live can also join without an account, with just the name they type.
- Activity in spaces: posts, comments, messages, reactions, course progress, quiz and exercise answers, XP, badges, registrations to lives and events, live attendance.
- Lives and video calls: the image and sound of participants who turn on their camera or microphone are transmitted in real time. A live is recorded only if the host starts the recording; the replay is then kept in the space, with automatically generated subtitles.
- Videos and files uploaded to spaces, the studio and the media library.
- Payments: LearnFloo never sees your card numbers. Payments go through Stripe, which only sends us the payment status, amount, currency and the last four digits of the card.
- Owner billing: name or company name, billing address, VAT number, history of invoices and credits.
- Support: the content of your exchanges with us.
- Technical data: IP address, browser and device type, connection and error logs, needed for security and for the service to work.
Why, and on what basis
| Purpose | Legal basis |
|---|---|
| Providing the service: account, spaces, courses, lives, service e-mails | Performance of the contract |
| Billing space owners and keeping the accounts | Performance of the contract and legal obligation |
| Security, prevention of abuse and fraud | Legitimate interest |
| Cookieless audience measurement of the website and the app | Legitimate interest |
| Newsletters and digests | Your consent, withdrawable in one click |
| An owner's advertising pixels on the pages of their space | Your consent, asked before anything loads |
Audience measurement and cookies
We measure audience with Umami, which we host ourselves. Umami sets no cookie and does not track visitors from one site to another. On www.learnfloo.com only, a share of visits (15%) is recorded as a session replay to improve the pages; form fields are masked. This replay does not exist in the app.
The app uses the browser's local storage to keep your session and preferences (language, display). This storage is essential to the service and is not used for advertising.
A space owner may add their Meta pixel or Google Analytics to the public pages of their space. These tools only load after you agree in the banner shown on those pages; the owner is responsible for that processing.
Our processors
| Provider | Role | Company country | Data location |
|---|---|---|---|
| Convex, Inc. | Database and functions of the service | United States | Ireland (European Union) |
| LiveKit, Inc. | Audio and video transmission for lives and calls | United States | Servers closest to the participants |
| BunnyWay d.o.o. (Bunny.net) | Hosting of videos, files and pages, automatic subtitles | Slovenia | European Union and global delivery network |
| Postmark (ActiveCampaign, LLC) | Sending e-mails | United States | United States |
| Stripe Payments Europe, Ltd. | Payments and invoices | Ireland (US group) | European Union and United States |
Transfers outside the European Union are covered by the European Commission's standard contractual clauses or by the EU–US Data Privacy Framework, depending on the provider. We do not sell or rent any data to anyone.
How long
- Account: as long as it is active. After a deletion request, your data is erased within 30 days, except what the law requires us to keep.
- Content of a space (posts, courses, replays): as long as the owner keeps it, or until the space is deleted.
- Invoices and accounting records: the legal period, 10 years in Slovenia.
- Technical logs: 12 months at most.
- Audience statistics: aggregated, without direct identification of visitors.
Your rights
You can ask to access your data, correct it, erase it, receive it in a portable format, restrict its processing, and object to processing based on our legitimate interest. You can withdraw a consent at any time. Write to support@learnfloo.com; we answer within one month. For the data of a space, we pass your request on to its owner and help them answer it.
If you believe your rights are not respected, you can lodge a complaint with the Informacijski pooblaščenec, the Slovenian data protection authority (ip-rs.si), or with the data protection authority of your own country.
Security
Traffic is encrypted (HTTPS), passwords are never stored in plain text, API keys are stored as hashes and internal access is limited to the people who need it. In the event of a data breach likely to put you at risk, we notify the competent authority and, where required, the people concerned.
Minimum age
LearnFloo is for people aged 16 and over. A space for younger learners must be opened by a school or a responsible adult, who collects the necessary permissions.
Changes
We update this policy as the service evolves. The date of the last update is shown at the top of the page; in the event of a significant change, space owners are notified by e-mail.