Privacy Policy

Effective date: June 1, 2026

Last updated: June 1, 2026

LearnOut, LLC ("LearnOut," "we," "us," or "our") operates the LearnOut platform, accessible at learnout.io (the "Platform"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what choices you have.

By creating an account or using the Platform, you agree to the collection and use of information as described in this policy. If you do not agree, do not use the Platform.

1. Information we collect

Information you provide directly

  • Account information: name, email address, password (hashed, never stored in plaintext), and profile photo.
  • Profile information: bio, location (city/state), interests, and skills.
  • Teacher information: headline, about section, qualifications, certifications, insurance status, and class listings including descriptions, photos, pricing, and safety disclosures.
  • Booking information: class selections, session dates, and any communications with teachers through the platform messaging system.
  • Reviews: written reviews and star ratings you submit after attending a class.
  • Support communications: any emails or messages you send to support@learnout.io.

Information collected automatically

  • Log data: IP address, browser type, pages visited, time spent, and referring URLs, collected automatically when you use the Platform.
  • Device information: device type, operating system, and browser version.
  • Cookies and similar technologies: session cookies (required for login), preference cookies, and analytics identifiers. See Section 8 for details.
  • Error and performance data: application errors, crashes, and performance traces collected via Sentry (see Section 4).

Information from third parties

  • Stripe: when you connect a Stripe account as a teacher or complete a payment as a student, Stripe shares with us confirmation of payment status, a payment intent identifier, and your connected account status. We do not receive your full card number, bank account number, or government ID documents — those are handled exclusively by Stripe.

2. How we use your information

  • To provide the Platform: creating your account, processing bookings, facilitating payments, sending booking confirmations, revealing venue addresses 24 hours before class, and processing refunds.
  • To communicate with you: transactional emails (booking confirmations, cancellations, review requests, address reveals), and operational notices (policy updates, security alerts). We do not send marketing emails without your explicit opt-in.
  • To enable teacher-student connections: sharing your first name and booking details with the teacher of a class you have booked, and sharing your public profile with students who view your teacher listing.
  • To maintain safety and trust: detecting fraud, investigating disputes, and enforcing our Terms of Service.
  • To improve the Platform: analyzing usage patterns, diagnosing errors, and understanding how features are used. This analysis uses aggregated or de-identified data where possible.
  • To comply with legal obligations: responding to lawful requests from government authorities, complying with tax reporting requirements, and fulfilling our obligations under applicable law.

3. Information sharing

We do not sell your personal information. We share it only in the following circumstances:

Between users on the Platform

  • When you book a class: the teacher receives your first name, profile photo (if set), and booking confirmation. The teacher does not receive your email address, last name, or payment details unless you share them voluntarily through messaging.
  • Your public profile: your display name, profile photo, and reviews you have written are publicly visible on the Platform.
  • Your reviews: reviews you submit are attributed to your display name and are publicly visible on the relevant class and teacher pages.
  • Venue address: the full street address of a class is shared only with confirmed, paid students, and only within 24 hours of the class start time.

With service providers

We share data with third-party vendors who help us operate the Platform, under contractual obligations to protect your data and use it only for the services they provide to us. See Section 4 for the full list.

For legal and safety reasons

  • To comply with a subpoena, court order, or other legal process.
  • To protect the rights, property, or safety of LearnOut, our users, or the public.
  • In connection with a merger, acquisition, or sale of all or substantially all of our assets, in which case we will notify users before their data is transferred and becomes subject to a different privacy policy.

4. Third-party data processors

The following third-party services process personal data on our behalf or as independent controllers. We encourage you to review their privacy policies.

Stripe — payments and teacher payouts

Stripe processes all payment card data and teacher bank account information. Stripe acts as an independent data controller for this data. LearnOut never stores full card numbers, bank account numbers, or government ID documents. Stripe may conduct identity verification on teachers before enabling payouts.

stripe.com/privacy →

Supabase — database and authentication

Supabase stores our application database (user profiles, bookings, messages, reviews) and handles authentication. Data is stored in the United States. Supabase processes data as a data processor under our instructions.

supabase.com/privacy →

Resend — transactional email

Resend delivers transactional emails on our behalf, including booking confirmations, cancellation notices, and review requests. Resend processes your email address and the content of emails we send you. We do not use Resend for marketing email without your opt-in.

resend.com/privacy →

Sentry — error monitoring and performance

Sentry captures application errors, crashes, and performance traces to help us identify and fix bugs. Sentry may receive your IP address, browser type, and the page you were on when an error occurred. Sentry does not receive payment information or message content.

sentry.io/privacy →

Google Places API — address autocomplete

When you enter a location in the class creation form or browse filters, we use Google's Places API to provide address suggestions. Your partial address input is sent to Google. Google's use of this data is governed by their privacy policy.

policies.google.com/privacy →

Vercel — hosting

Our Platform is hosted on Vercel. Vercel processes request logs including IP addresses as part of serving the application. Data is processed in the United States.

vercel.com/legal/privacy-policy →

5. Data retention

  • Account data: retained for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it by law.
  • Booking and payment records: retained for 7 years to comply with tax and financial record-keeping requirements.
  • Messages: retained for 2 years after the last activity in the conversation, then deleted.
  • Error logs (Sentry): retained for 90 days per Sentry's standard configuration.
  • Reviews: retained indefinitely as part of the platform's trust system. If you delete your account, reviews remain but are de-attributed to "Former user."

6. Data security

We implement technical and organizational measures to protect your personal data, including:

  • Encryption in transit via TLS for all data transmission.
  • Encryption at rest for data stored in Supabase.
  • Row-level security policies that ensure users can only access their own data.
  • Passwords hashed using industry-standard algorithms — we never store plaintext passwords.

No security system is perfect. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

7. Your rights and choices

Access and correction

You can access and update most of your personal information directly through your account settings. For data not accessible through settings, contact us at privacy@learnout.io.

Deletion

You may request deletion of your account and associated personal data by emailing privacy@learnout.io. We will action deletion requests within 30 days, subject to legal retention obligations described in Section 5.

Data portability

You may request an export of your personal data in a machine-readable format by emailing privacy@learnout.io.

Marketing communications

We do not send marketing emails without your opt-in. Transactional emails (booking confirmations, cancellations, address reveals) are necessary for the Platform to function and cannot be opted out of while you have an active account.

Illinois residents

If you are a resident of Illinois, you have rights under the Illinois Personal Information Protection Act (PIPA). To exercise any of your rights, contact us at privacy@learnout.io. We do not sell personal information and do not engage in automated decision-making that produces legal or significant effects on individuals.

8. Cookies

We use the following categories of cookies:

  • Strictly necessary cookies: required for the Platform to function, including authentication session cookies. These cannot be disabled.
  • Preference cookies: remember your settings and preferences. These can be cleared through your browser settings.
  • Analytics cookies: we do not currently use third-party analytics cookies. If this changes, we will update this policy and add a cookie consent mechanism.

You can control cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging in.

9. Children's privacy

The Platform is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from a minor, we will delete it promptly. If you believe a minor has created an account, please contact us at privacy@learnout.io.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email at least 14 days before the changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.

11. Contact us

For questions, requests, or concerns about this Privacy Policy:

This Privacy Policy was last reviewed by LearnOut on June 1, 2026. It does not constitute legal advice. Consult a qualified attorney for questions about your specific situation.