Privacy Policy

Cohortle provides purpose-built infrastructure for non-formal, cohort-based learning. We work with organisations across Africa and beyond to design, organise, and sustain effective learning programmes.

If you have questions about this policy, contact us at [email protected].

We collect the following categories of personal data:

• Account data — name, email address, and password (hashed) when you register.
• Profile data — optional bio, LinkedIn URL, and profile avatar you choose to add.
• Learning data — lesson completions, quiz attempts, streaks, and programme progress.
• Usage data — pages visited, features used, and device/browser information collected via analytics tools.
• Communications — messages you send us via email or interest forms on the site.

We use your data to:

• Create and manage your account and learning experience.
• Track your progress and award achievements.
• Send transactional emails (e.g. password resets, welcome emails).
• Improve the platform through aggregated, anonymised analytics.
• Respond to your enquiries and support requests.
• Comply with legal obligations.

We do not sell your personal data to third parties.

We process your data on the following legal bases:

• Contract — processing necessary to provide the service you signed up for.
• Legitimate interests — improving the platform and preventing fraud.
• Consent — where you have explicitly opted in (e.g. marketing communications).
• Legal obligation — where required by applicable law.

We use cookies and similar technologies to keep you logged in and to understand how the platform is used. We use Google Analytics and Umami for anonymised usage analytics. You can disable cookies in your browser settings, though some features may not work correctly.

We use trusted third-party services to operate the platform, including:

• Resend — for transactional email delivery.
• Google OAuth — for optional sign-in with Google.
• Google Drive — for optional content integration by programme conveners.
• Cloudflare — for CDN, DNS, and security.

Each provider processes data only as necessary to deliver their service and is bound by their own privacy policies.

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Data portability.

To exercise any of these rights, email us at [email protected].

We use industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and access controls to protect your data. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your information.

Cohortle is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this policy from time to time. We will notify you of significant changes by email or by posting a notice on the platform. Continued use of Cohortle after changes take effect constitutes acceptance of the updated policy.

For any privacy-related questions or requests, contact us at [email protected].