Privacy Policy

1. Overview

This policy explains how Foundations (“we”, “us”, “our”) collects, uses, stores, and discloses personal information when you visit our website, create an account, or purchase and use the course. We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2. Information we collect

• Account information: name, email address, and authentication data (we use email magic links and Google sign-in — we never see or store your Google password).
• Purchase information: handled by our merchant of record, Lemon Squeezy; we receive confirmation of purchase but not your full payment card details.
• Course progress data: lesson completion, quiz results, XP, streaks, practice portfolio trades and written rationales, and self-reported goals/risk profile from onboarding.
• Usage data: pages visited, feature usage, and device/browser information, collected via PostHog and Vercel Analytics.
• Communications: emails you send us, and your email preferences.

3. How we use it

We use personal information to: provide and personalise the Service (track your progress, run streaks and leaderboards); process purchases and refunds; send transactional emails (receipts, magic links) and, if you opt in, product and habit nudges; improve the course based on aggregate usage patterns; and meet our legal and accounting obligations.

4. Who we share it with

We share limited personal information with the service providers (sub-processors) that run the platform on our behalf, including: Supabase (database, authentication, storage), Lemon Squeezy (payments and tax), Resend (email delivery), Bunny Stream (video hosting), Vercel (hosting), PostHog (product analytics), and Sentry (error monitoring). These providers may store data outside Australia; where they do, we take reasonable steps to ensure your information receives a comparable standard of protection.

We do not sell your personal information.

5. Leaderboards and community features

By default, leaderboards display an anonymised handle, not your real name. You can opt out of leaderboard display entirely in your profile settings at any time.

6. Data security and retention

We use industry-standard safeguards (encryption in transit, access controls, row-level security on our database) to protect your information. We retain account and progress data for as long as your account is active, plus a reasonable period afterwards for legal, accounting, and dispute-resolution purposes, after which it is deleted or de-identified.

7. Your rights

You may request access to, correction of, or deletion of your personal information, and you may opt out of marketing emails at any time via the unsubscribe link or your profile settings. To make a request, or to lodge a privacy complaint, contact us using the details below — we’ll respond within a reasonable time. If you’re not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).

8. Cookies

We use cookies and similar technologies for authentication, essential site functionality, and analytics. You can control cookies through your browser settings, though some features may not work correctly if you disable them.

9. Children

The Service is intended for adults. We do not knowingly collect personal information from children under 16.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified via email or an in-app notice.

11. Contact

Privacy questions or requests: email talk@moneybyash.com.