Privacy Notice

Who is responsible

uPull.ai Ltd, London, UK, is responsible for Academy personal information. For privacy questions, access requests, corrections, deletion requests or objections, contact help-desk@upull.ai.

What we use

• your name, email address, organisation, role and account details;
• saved, active and completed courses, pathways and milestone badges;
• learning evidence you choose to record, including any attachment link you provide;
• manager invitations and reporting relationships;
• supplier course submissions and administrator review decisions;
• Learner Community posts, comments and moderation records; and
• your optional Academy-updates preference and questions asked to the Academy Assistant.

Why we use it

We use this information to operate secure Academy accounts, provide learning and progress records, support managers and suppliers where the relevant role applies, run the Learner Community safely, respond to support requests and improve the service. We send Academy updates only where you have opted in. Necessary account, password-reset, invitation and badge emails are service messages, not marketing.

Our usual legal basis is our legitimate interest in operating a secure professional learning service. We use consent for optional Academy updates and your in-product choices, such as sharing an evidence entry with your manager or publishing a community post.

Who can see your learning

Your learning record is available to you. A manager cannot see your information merely by entering your email address: you must first accept their invitation. Evidence is private by default; a manager can see an individual evidence entry only when you choose to share it with them. Community content is visible to the relevant Academy community once you choose to publish it. Authors can remove their own posts, and Academy administrators can moderate unsafe or inappropriate content.

How long we keep it

• Account and learning records: while your account is active, then normally 12 months after closure or last activity.
• Evidence and attachment links: while your account is active, then normally 12 months after closure or last activity.
• Manager invitations and assignment records: 12 months after their final status.
• Community posts and comments: until removed or your account closes, then normally 12 months.
• Supplier submission and review audit: 24 months after the final decision.
• Security and application logs: normally 90 days, unless required for an investigation.

We may retain information longer where a documented legal, contractual, dispute or audit requirement applies.

Hosting and third parties

The Academy application and database are hosted in Google Cloud's London region (`europe-west2`). Course links take you to external providers; their privacy terms apply once you leave the Academy. We do not sell Academy personal information.

Your rights

You can ask us for access to, correction or deletion of your personal information, or object to certain processing. You can withdraw from Academy updates at any time. Contact help-desk@upull.ai first; you may also complain to the UK Information Commissioner's Office if you are unhappy with how we handle your information.