Legal
Privacy Policy
Last updated: April 8, 2026
Winnelo ("we", "us", or "our") is a microlearning platform designed to help organisations run competitive, quiz-based training for their teams. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Winnelo platform. By creating an account or using Winnelo, you agree to the practices described here.
1. Who We Are
For any privacy-related questions or requests, please contact us at hello@winnelo.com.
2. Information We Collect
Account Information
When you register for Winnelo, we collect your full name, email address, and a securely hashed password. Administrators may also provide the name of their organisation.
Platform Activity
To provide the core service, we collect data about your participation on the platform, including quiz attempts and scores, XP (experience points) earned, challenge completion timestamps, leaderboard rankings, and group or team membership within your organisation.
Technical Data
We automatically collect certain technical information when you access Winnelo, including your IP address, browser type and version, device type, and general usage patterns such as pages visited and session duration. This data is used solely for security, debugging, and platform improvement.
Communications
If you contact us directly or receive invite emails, we retain the content of those communications to assist with your query.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Winnelo platform
- Authenticate your identity and manage your account
- Display leaderboards and track competitive progress within your organisation
- Send account-related emails (invitations, password resets, confirmations)
- Generate quiz content using AI tools on behalf of administrator accounts
- Analyse usage to improve platform features and performance
- Comply with legal obligations and enforce our Terms of Service
We do not sell your personal data. We do not use your data for advertising.
4. Data Sharing and Third-Party Services
We use a limited number of trusted third-party services to operate Winnelo. Each service is bound by appropriate data processing agreements.
Supabase
Our database and authentication provider. Your account credentials, profile data, quiz results, and platform activity are stored in Supabase's secure infrastructure. Supabase is SOC 2 Type II certified.
Resend
Our transactional email provider, used to deliver account invitations, password resets, and other platform notifications.
Anthropic (Claude)
Used by administrator accounts to generate quiz question content via AI. Only the subject matter or topic provided by the administrator is sent to Anthropic. No personal learner data is shared with Anthropic.
We do not share your personal information with any other third parties, except where required by law or in connection with a business transfer, in which case we will notify you.
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the service. If you request account deletion, we will remove your personal information within 30 days, subject to any legal retention obligations.
Aggregated, anonymised usage statistics that cannot identify you may be retained indefinitely for platform analytics.
6. Your Rights
Depending on where you are located, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Rectification — ask us to correct inaccurate or incomplete data
- Erasure — request deletion of your personal data
- Restriction — ask us to limit how we process your data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to certain types of processing
To exercise any of these rights, please email hello@winnelo.com. We will respond within 30 days.
7. Cookies
Winnelo uses session cookies and local storage to maintain your authenticated session. These are strictly necessary for the platform to function and cannot be disabled. We do not use advertising or tracking cookies.
8. Security
We employ industry-standard measures including encrypted data transmission (TLS/HTTPS), hashed password storage, and role-based access controls. However, no method of transmission over the internet is 100% secure. If you believe your account has been compromised, please contact us immediately at hello@winnelo.com.
9. Children's Privacy
Winnelo is intended for use by organisations and their employees or members. The platform is not directed at individuals under the age of 16. If you become aware that a minor has provided us with personal data without appropriate consent, please contact us and we will remove that information promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will notify account holders by email. Continued use of Winnelo after changes are posted constitutes your acceptance of the revised policy.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us:
Winnelo