Privacy Notice

This notice explains what personal information MundiLearning collects when you use an Independent Learner account, why we collect it, and who else is involved. It describes what the service actually does today.

Last updated: 21 September 2026

1. What we collect

Your account

When you register we collect your first name, last name and email address. Your password is stored only as a cryptographic hash, so we cannot read it and cannot tell you what it is.

What we do not ask you for. An Independent Learner account does not collect your phone number, date of birth, gender, photograph, home address, next-of-kin or guardian details, or any health or special-needs information. We do not ask for them and they are not part of this service.

Signing in

To keep you signed in we use two cookies: a session cookie, and a cookie carrying a token that protects forms against cross-site request forgery. Both are necessary for the service to work. We also record the date you last signed in.

We do not use advertising cookies, and we do not run analytics or tracking scripts on the site.

Keeping accounts secure

We count recent sign-in, registration and password-reset attempts so that accounts cannot be attacked by repeated guessing. These counters are stored as keyed one-way hashes — not as your email address or your network address — and they expire on their own.

Payments

For each purchase we keep the offer bought, the amount, the currency, our own payment reference, the reference and status reported by the payment provider, and the times involved.

We never receive or store your card number, expiry date or security code. You enter those on Paystack's own checkout, not on MundiLearning. Our systems have no field in which card details could be kept.

When Paystack notifies us that a payment completed, we record the fact of the notification and a one-way hash of it, rather than storing the notification itself.

Your access

We record which offers you have access to, when that access was granted, when it expires, and which payment it came from.

Your learning activity

As you study we record which lessons you have started and completed, a progress figure for each, the time spent, and when you were last active. This is what lets you pick up where you left off.

AI Tutor

If you use the AI Tutor, we store your questions and the replies so that a conversation can continue, together with the course and lesson it related to. We also record technical usage measurements for each request so that we can manage the cost of the feature.

We do not currently build a profile of your inferred strengths, weaknesses or learning style from these conversations.

Emails we send you

If you ask to reset your password, we record that the request was made, when we attempted delivery, and whether it was sent. We do not keep a copy of the message contents.

Operational records

Our servers keep operational and security logs so that we can run the service, investigate faults and respond to abuse. Diagnostic records about the payment provider are deliberately recorded in a reduced form that strips out credentials and email addresses.

2. Why we use it

to create and run your account and keep you signed in;
to take payment for an offer and give you the access you paid for;
to show you your courses, lessons and progress;
to provide the AI Tutor where it is part of your offer;
to protect accounts and the service against abuse and unauthorised access;
to answer your support requests; and
to keep records of the purchases we have made with you.

3. Who else is involved

We do not sell your personal information. We share it only with the providers we need in order to run the service:

Paystack — our payment provider. It handles the payment itself and tells us the outcome. Your payment details are given to Paystack, not to us.
Our AI provider — when you send a question to the AI Tutor, the text of that question and the relevant lesson context are sent to the AI service that generates the reply.
Our email provider — used to deliver account emails such as a password reset.
Our hosting and infrastructure providers — which operate the servers and database the service runs on.

We may also disclose information where the law requires it, or to establish or defend our legal rights.

4. How long we keep it

We keep your account information and your learning records for as long as your account exists, so that your progress and any access you have bought remain available to you.

Records of payments are kept after access has expired, because they are our record of a transaction with you and may be needed to resolve a later query about it. Security counters expire automatically within their own short window.

5. Your requests

You can ask us for a copy of the personal information we hold about you, ask us to correct it if it is wrong, or ask us to delete your account. Email info@mundilearning.com from the address you registered with.

Please note that we may need to keep payment records even after an account is closed, so a deletion request may not remove every trace of a completed purchase. We will tell you what we have kept and why.

6. Security

The site is served only over an encrypted connection. Passwords are stored as hashes, session cookies are restricted to secure connections and are not readable by scripts in your browser, and sign-in attempts are rate-limited. No service can promise that nothing will ever go wrong, but if a problem affects your information we will act on it.

7. Changes and contact

If this notice changes we will update the date at the top of this page. For any question about your information, email info@mundilearning.com.