Privacy Policy

Last Updated: July 2026

Introduction

The Human Experience Library ("HXL", "we", "us", or "our") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal information when you use our educational platform, assessments, and storefront.

We believe in Privacy by Design. This means we only collect the minimum necessary data, we separate your educational data from any marketing systems, and we give you full control over your information.

Information We Collect

1. Account Information

When you create an account, we collect your email address and an optional display name. This allows us to securely authenticate you and maintain your session.

2. Learning Data

As you use the HXL platform, we securely store:

• Completed lesson progress
• Assessment results (your "Genome" scores)
• Concepts and artifacts you have saved or pinned

3. User Generated Content

If you use our journaling or reflection features, the text you enter is stored securely. Please note: While this data is private, we advise against entering highly sensitive personal information (such as medical or financial data) into these educational tools.

4. Transaction Data

When you purchase a physical or digital product, we collect the necessary shipping and contact details. We do not store your payment card details. All payment processing is securely handled directly by Stripe.

5. Technical Data

We automatically collect basic technical information to ensure the platform functions correctly, including IP addresses, browser types, and essential cookies.

Legal Basis For Processing (GDPR)

Under the UK and EU GDPR, we process your data under the following lawful bases:

• Contract: For account creation, processing purchases, and delivering our services to you.
• Legitimate Interest: For securing our platform, preventing fraud, and conducting basic analytics to improve the software.
• Consent: For marketing emails and non-essential cookies (which you can manage at any time).
• Legal Obligation: For maintaining tax and accounting records related to purchases.

Your Privacy Rights

You have significant rights regarding your data:

• Access: You can request a copy of your personal data via your Privacy Dashboard.
• Rectification: You can correct inaccurate information in your profile.
• Erasure: You can delete your account and associated data permanently.
• Portability: You can export your learning history and assessment results.
• Withdraw Consent: You can change your cookie preferences or unsubscribe from emails at any time.

Data Retention Policy

We keep your Account Data and Learning Data until you request deletion. Order information is retained for the mandatory legal period required for tax purposes. Journal and reflection data is entirely controlled by you and deleted immediately upon request.

Security & Third-Party Processors

We use industry-standard encryption for all data in transit and at rest. To provide our services, we use trusted third-party processors who are also bound by strict GDPR compliance:

• Convex: Database and Authentication provider.
• Stripe: Secure payment processing.
• Resend: Transactional email delivery.
• Vercel: Secure application hosting.

International Transfers

Your data may be transferred to and processed in regions outside the UK/EU (such as the United States). When this happens, we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data to the standard required by UK/EU GDPR.

Children's Privacy

The HXL framework deals with complex psychological concepts and is not intended for use by children under the age of 16 without parental consent. We do not knowingly collect data from children under 16.

Future AI Features

At present, HXL does not use your personal reflections to train AI models. If future AI features are introduced (e.g., for personalized learning synthesis), they will be strictly opt-in, clearly explained, and will never compromise your underlying data privacy.