Privacy Policy

Last updated: 30/03/2025

This Privacy Policy describes how Flixy ("we", "our", or "us") collects, uses, and protects the personal information of users ("you") when you use our platform to access online courses.

Our clients (course providers) are responsible for the content they publish and may act as independent data controllers for certain user information. For specific inquiries about course content or client-related policies, please contact the course provider directly.

1. Who We Are

We provide an online learning platform that allows clients to host and share their courses with registered users. Our platform is designed for users primarily located in Italy.

2. Data We Collect

When you use our platform, we may collect and store the following data:

Personal Data: Name, surname, email address, and optionally your phone number.

Authentication Data: We use Firebase Authentication for login, including third-party login via Google.

Usage Data: Information about courses viewed, progress, completion rates, and other performance indicators.

3. Purpose of Data Collection

We process your data to:

Authenticate and manage user access

Track progress and provide personalized learning experience

Send essential emails (via Resend)

Ensure platform security and performance

4. Legal Basis (GDPR)

We collect and process your personal data based on:

Your consent (e.g. account creation)

Our contractual obligations (e.g. giving access to courses)

Our legitimate interest in improving our services

5. Third-Party Services

Your data may be processed through:

Firebase Authentication (Google LLC)

Resend (Transactional emails)

Cloudflare (Image hosting, CDN)

Turso (Database services)

These providers may store and process your data outside the EU, and we ensure adequate safeguards are in place.

6. Data Retention

We retain your data only as long as necessary to fulfill the purposes stated above, or as required by law.

7. Your Rights

As an EU/Italian resident, you have the right to:

Access your data

Request correction or deletion

Withdraw consent at any time

Lodge a complaint with the Garante per la Protezione dei Dati Personali (GPDP)

To exercise these rights, contact us at: lcs.souza.business@gmail.com

Cookies

We use essential cookies solely to maintain secure authentication sessions via Firebase. These cookies are required for the platform to function and cannot be disabled.

9. Children's Privacy

Our services are not intended for users under 16 years of age.

10. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated to you via email or platform notification.