Privacy policy

Last updated: 4 August 2026. Data controller: Honelo, a sole trader based in Leicester, England. Contact: Honelosupport@proton.me.

1. Who we are

Honelo ("we", "us") provides an online learning platform. We are the "data controller" responsible for your personal data under the UK GDPR and the Data Protection Act 2018. If you are in the EEA, the EU GDPR applies on equivalent terms.

2. The data we collect

Account data — your name, email, and a securely hashed password (or, if you use Google sign-in, the basic profile your provider shares).
Child account data — if you are on a Family plan and create an account for your child, we collect the username and display name you choose for them, a securely hashed password, and their date of birth if you provide one. Child accounts have no email address and we never ask a child for one. See section 9.
Learning data — which lessons you open and complete, and your progress, so we can save your place and recommend what to learn next.
Billing data — if you subscribe, your plan and payment status. Card details are handled entirely by our payment processor (Stripe); we never see or store your full card number.
Technical data — limited information your browser sends, such as device type and approximate region, used to keep the service secure and working.
Communications — messages you send us via the contact form or email.

3. How and why we use it (legal bases)

To provide the service — creating your account, saving your progress, and managing free and paid plan access. Legal basis: performance of a contract.
To process payments — managing subscriptions and renewals via Stripe. Legal basis: performance of a contract.
To keep the service secure — preventing fraud and abuse. Legal basis: legitimate interests.
To contact you — service emails (e.g. password resets, receipts) and, only with your consent, marketing. Legal basis: contract / consent.

4. Who we share it with

We do not sell your personal data. We share it only with the providers that run the platform, acting as our processors:

Supabase — authentication and database hosting for your account and learning data.
Stripe — payment processing and subscription management.
Our hosting & email providers — website hosting and transactional email delivery.

We may also disclose data where required by law, or to protect our rights, our users, or the public.

5. Cookies and local storage

We use your browser's local storage (a cookie-like technology) to keep you signed in and to remember your progress through lessons. These are strictly necessary for the service to function.

We also use our own first-party measurement to understand how the site is used — which pages are opened and which steps people complete. It sets no cookies and stores nothing on your device for this purpose, and we do not store your IP address: visitors are counted using a salted hash that is rotated every day, so it cannot be traced back to you or linked across days. We do not use third-party advertising or analytics trackers, and we do not share this data.

6. International transfers

Some providers process data outside the UK/EEA. Where they do, the transfer is protected by appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.

7. How long we keep it

We keep your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we must retain certain records (such as billing records) to meet legal obligations.

8. Your rights

You have the right to access your data, correct it, delete it, restrict or object to processing, request portability, and withdraw consent at any time. To exercise any of these, email Honelosupport@proton.me. You may also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or your local supervisory authority.

9. Children

Our Family plan is designed for a parent or guardian to learn alongside their children, so we do knowingly hold data about children — but only where a parent has set the account up, and only what the service needs to work.

Only a parent can create a child account. Children cannot sign up to Honelo on their own. A child account can only be created from inside a Family-plan parent's account.
What we hold — the username and display name the parent chooses, a securely hashed password, a date of birth if the parent provides one, and the child's own learning progress and journal entries. Child accounts have no email address, and we never ask a child for one.
Our legal basis — consent given by the parent or guardian when they create the account, together with performance of the contract for the Family plan they hold with us.
The parent stays in control — from their account page a parent can see every linked child account, reset a child's password, and remove a child's account at any time. Removing it deletes that child's login and their learning data.
No advertising or profiling — we do not build advertising profiles of children, show them advertising, or share their data with advertisers or third-party analytics. The measurement described in section 5 sets no cookies and is never used to target anyone.

If you are under 16 and want to use Honelo, ask a parent or guardian — either to add you to their Family plan, or to agree to our terms on your behalf and supervise your use. If you believe a child has an account that no parent or guardian set up or agreed to, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. We will post the new version here and update the "Last updated" date. Significant changes will be notified by email or an in-app notice.

11. Contact

Questions about this policy or your data? Email Honelosupport@proton.me or use our contact page.