Learvexa AI

Privacy Policy

Version: 2026-08-31-v3
Last updated: August 31, 2026

This Privacy Policy explains how Learvexa AI ("Learvexa") processes personal data when you create an account or use the learning platform. Learvexa is intended to handle personal data consistently with applicable Philippine data-protection requirements, including the Data Privacy Act of 2012 and its implementing rules.

1. Personal data we may process

Depending on the features you use, Learvexa may process:

• Account data: name, email address, password hash, email-verification status, optional profile photo, and account settings.
• Learning-plan data: onboarding selections, learning goals, study capacity, and career-path preferences.
• Assessment and progress data: assessment answers, scores, lesson progress, quiz attempts, roadmap state, and skill evidence.
• Coding-lab data: drafts, submitted code, validation results, attempt history, verification snapshots, and whether AI assistance was used.
• Career-readiness and certificate data: final challenge submissions, results, readiness records, certificate details, verification identifiers, and certificate status.
• Support and administrative data: communications, content-management activity, and audit information associated with authorized administrative actions.
• Technical and security data: session identifiers, timestamps, request metadata, rate-limit events, security logs, and other technical information needed to operate and protect the service.

2. How personal data is collected

Personal data may be collected directly from you when you register, complete onboarding, answer assessments or quizzes, write or submit code, use AI Mentor, complete career-readiness activities, update your account, or contact Learvexa. Technical data may also be generated automatically when you use the service.

3. Purposes of processing

Learvexa may process personal data to:

• create, authenticate, verify, and secure learner accounts;
• generate and maintain learning roadmaps and progression state;
• deliver lessons, coding practice, quizzes, and assessments;
• score submissions and build evidence-based skill summaries;
• distinguish assisted practice from independent evidence;
• provide AI-assisted learning features when requested and enabled;
• evaluate Career Readiness eligibility and final-challenge results;
• issue, display, revoke when justified, and publicly verify certificates;
• prevent abuse, investigate security events, and protect the platform;
• maintain curriculum, evidence, and authorized administrative audit history;
• send account, verification, password-reset, security, and service communications;
• maintain, troubleshoot, and improve platform reliability and usability.

4. Basis for processing

The applicable basis depends on the processing activity. Learvexa may process personal data with your consent; where processing is necessary to provide the account or service you requested; to comply with legal obligations; or for legitimate operational interests such as security, fraud prevention, service integrity, and troubleshooting, where those interests are permitted by applicable law. Where consent is required, it should be requested in a manner that allows you to make an informed choice.

5. Automated scoring, recommendations, and AI-assisted features

Learvexa uses rule-based and automated processes for activities such as assessment scoring, quiz scoring, coding checks, lesson unlocking, roadmap recommendations, evidence summaries, readiness gates, and certificate eligibility. These processes operate on the learner data and published evaluation rules relevant to the activity.

When you use AI Mentor, relevant learning context may be sent to the configured AI service provider to generate the requested assistance. This may include your question, coding-lab context, submitted draft, runtime or validation error information, and related instructional context. Learners should not submit passwords, API keys, private credentials, or unnecessary sensitive personal information to AI Mentor. AI Mentor does not independently create verified coding evidence.

6. Recipients and service-provider categories

Personal data may be processed by service providers that Learvexa uses to operate the platform, such as hosting and infrastructure providers, database or storage providers, transactional email providers, AI service providers when AI features are used, and security or monitoring providers when configured. Only data reasonably needed for the relevant service should be shared with those providers.

Learvexa may also disclose information when required by applicable law, lawful process, or a valid request from a competent authority. Learvexa does not sell learner personal data to advertisers.

7. Cookies, sessions, and similar technologies

Learvexa uses cookies or equivalent session mechanisms that are necessary for functions such as authentication, CSRF protection, security, preferences, and authenticated navigation. The current service is not designed around third-party advertising trackers.

8. Retention

Learvexa retains personal data only for as long as reasonably necessary for the purposes described in this Policy and for applicable security, backup, dispute-resolution, certificate-verification, evidence-integrity, and legal requirements. Retention can differ by record type. Account deletion may remove data from active account use while some security, audit, certificate, backup, or historical evidence records may need to remain for a longer period where there is a legitimate and lawful reason to retain them.

9. Security

Learvexa uses technical and organizational measures intended to protect personal data, including password hashing, email verification, authorization controls, protected sessions, CSRF protection, rate limits, security headers, restricted handling of application secrets, and audit records for selected administrative or evidence-sensitive actions. No internet service can guarantee absolute security.

10. Your data-privacy rights

Subject to applicable law and any lawful limitations or exceptions, you may have rights concerning your personal data, including the rights to be informed, access your data, object to certain processing, correct or rectify inaccurate data, request erasure or blocking where applicable, obtain data portability where applicable, seek damages where provided by law, and file a complaint with the National Privacy Commission.

Privacy requests may be sent to learvexaai@gmail.com . Learvexa may need to verify your identity before acting on a request. Some requests can be limited where continued processing or retention is permitted or required by applicable law.

11. Public certificate verification

If a completion certificate is issued, Learvexa may make limited certificate-verification information publicly available through its verification feature. Public verification is intended to expose only the information needed to confirm the certificate's status and completion details, rather than private account or learning-history data.

12. Changes to this Privacy Policy

Learvexa may update this Policy when data practices, service providers, features, or legal requirements materially change. The current version and update date will be published with the Policy. Where applicable law requires additional notice, consent, or an opportunity to object, Learvexa should provide that process before relying on the change in that manner.

13. Contact and complaints

Questions, privacy requests, or concerns may be sent to learvexaai@gmail.com .

If you believe your rights under applicable Philippine data-protection law have been violated, you may also have the right to file a complaint with the National Privacy Commission, subject to its applicable rules and procedures.