Privacy Policy

We collect only what the program needs to function:

• •Account details — your name, email address, and a securely hashed password.
• •Payment data — payment references and confirmations from our payment gateway (Razorpay). We never receive or store your card details.
• •Program activity — lesson progress, workbook answers and reflections, SMART goals and actions, assessment answers and scores, XP, levels and streaks.
• •Device basics — a push notification token if you enable notifications, and the cookies required to keep you signed in.

To run the platform: delivering lessons, saving your work, computing your six-dimension progress, processing payments, issuing certificates, and sending transactional emails (activation, lesson unlock, streak milestones and similar).

We do not sell your data, and we do not use your reflections for advertising or research without your explicit consent.

Your lesson reflections are encrypted on your device before they are saved, and the key stays on your device — the stored copy is unreadable without it. Other learners cannot see your records. The team can see account records (progress, goals and other saved answers) for support and administration; the encrypted reflection content is not readable without your key. If you switch devices, your 12-word recovery phrase restores access. No system can promise protection from every possible attacker.

Payment records are viewable only by the team, for support and accounting. Your email and payment details are never shown to other students.

Limited service providers help us operate — for example email delivery and push notification infrastructure. They process data only to provide those services, and we keep the data they receive to the minimum needed.

Passwords are stored with industry-standard hashing (bcrypt). Authentication uses HTTP-only, secure cookies, and sessions expire after 7 days. Data is transmitted over TLS.

Your account data is retained while your account is active. You can request access to, correction of, or deletion of your personal data by writing to help@jointransform.com from your registered email — we will act on requests within a reasonable period, subject to legal obligations.

You can disable push notifications at any time in Settings.

Privacy questions and requests: help@jointransform.com.