Privacy policy

Last updated 30 September 2026

Who is responsible

For a community’s content (posts, comments, courses, who is a member), the creator who runs that community decides what happens with it, and Academy processes it on their behalf. For your Academy sign-in and for creators’ billing, the operator named above is responsible.

What we store

• From Whop, when you open Academy: your Whop user id, name, username and profile picture.
• What you do in a community: posts, comments, likes, poll votes, RSVPs, lesson progress, points, and your bio if you write one.
• If a creator imports a community from another platform: the imported members’ names, profile pictures, points and, if the creator uploads a member export, their email addresses.
• If you sign in on a community’s own web address: a sign-in cookie that keeps you logged in (30 days).

Why, and on what basis

• To run the community you joined: contract (GDPR Art. 6(1)(b)).
• To keep it safe (reports, bans, abuse prevention) and to back it up: legitimate interest (Art. 6(1)(f)).
• Invite emails to imported members are sent on the creator’s behalf, each with an unsubscribe link. We never send marketing without consent.

Who else processes it

• Whop: accounts, access, payments, notifications and uploaded lesson videos.
• Cloudflare: delivers the app and custom domains securely.
• Our server host, where the database and nightly backups live.
• Resend, if email is switched on: sends invite and broadcast emails.
• Videos embedded from YouTube, Vimeo, Loom or Wistia load from those services when you play them.

How long

• Community content: as long as the community uses Academy, or until the creator or you delete it.
• Sign-in sessions: 30 days. Backups: 14 days.
• Unsubscribes are kept, so we never email that address again.

Your rights

You can ask to see, correct, export or delete your data, and object to how it is used. Ask the community’s creator for community content, or us for everything else. You can complain to the Danish Data Protection Agency (Datatilsynet).

Cookies

Academy sets only the cookie needed to keep you signed in on a community’s own address. No tracking or advertising cookies.