Privacy Policy

1. Introduction and scope

YESI Pty Ltd (ABN 57 637 465 626), trading as YESI Education (“YESI”, “we”, “us” or “our”), is a global online education business headquartered in Sydney, New South Wales, Australia.

This policy explains how we collect, use, store, disclose and protect personal information when you use our websites, mobile applications, courses, books, newsletters, podcasts, support services and other learning products. Supplemental disclosures may apply where a particular product collects information specific to its function.

We aim to comply with the Australian Privacy Act 1988 and Australian Privacy Principles, the GDPR and UK GDPR where applicable, the CCPA/CPRA for California residents, and relevant Apple App Store requirements.

2. Information we collect

Information you provide

• Name, email address and optional profile information.
• Support enquiries, feedback and other communications.
• Survey, research, contest or community responses.
• Account details where a product offers account-based features.

Information collected automatically

• Product usage, feature interactions and learning progress.
• Device model, operating system, app version and identifiers.
• IP address, access times, referring pages and server logs.
• Crash reports, diagnostics and performance information.

Information from third parties

We may receive limited profile information from Apple Sign In or other authentication providers, aggregated analytics from service providers, and subscription entitlement data from Apple. We do not directly receive your payment-card details.

3. How we use your information

• Provide, personalise and improve our products and services.
• Manage accounts and validate access to subscribed content.
• Respond to support requests, questions and feedback.
• Send service notices and opted-in educational communications.
• Analyse performance, diagnose faults and develop new features.
• Prevent fraud, abuse and security incidents.
• Meet legal obligations and enforce our terms.

Where GDPR or UK GDPR applies, our legal bases may include performance of a contract, consent, compliance with legal obligations and our legitimate interests in operating, securing and improving our services. We may also create aggregated or de-identified information that does not identify you.

4. Data sharing and service providers

We do not sell personal information. We disclose information only as reasonably necessary to trusted providers that help us operate our products, including cloud hosting, analytics, diagnostics, email, customer support and communications services; to Apple for App Store services; with your consent; or where law, safety or a business transfer requires it.

Contact-form submissions are processed by FormSubmit for spam screening and delivery to our inbox. The form may process your name, email address, subject, message, IP-derived security data and verification signals. Do not submit passwords, payment details or sensitive information through the contact form.

External links and third-party products are governed by their own privacy policies. We encourage you to review those policies before providing information.

5. Subscriptions and payment data

Mobile-app subscriptions and in-app purchases are processed by Apple through the Apple In-App Purchase system. YESI does not collect or store credit-card, debit-card or bank-account information. Apple may provide us with limited non-financial transaction data—such as subscription status, tier and expiry date—so we can provide the correct entitlements.

Free trials convert to paid subscriptions unless cancelled before the disclosed deadline. You can manage or cancel subscriptions in your Apple ID settings. Apple controls billing, renewals, cancellations and refund processing.

6. Cookies, analytics and tracking

Our websites may use strictly necessary, functional, analytics and, with appropriate permission, marketing cookies. Most browsers let you control cookies in their settings. Disabling some cookies may affect site functionality.

Our apps may use analytics and diagnostic SDKs. If an app tracks data across other companies’ apps or websites for advertising, it will ask for permission through Apple’s App Tracking Transparency framework before doing so.

7. Data retention and security

We retain information only for as long as needed for its stated purpose, our legitimate business needs and legal obligations. Typical periods include: account information for the account lifetime plus up to three years; support communications for up to three years; analytics for up to two years; diagnostics for up to twelve months; and legally required transaction records for up to seven years. FormSubmit may retain contact submissions for up to 30 days.

We use safeguards including encryption in transit, access controls, reputable infrastructure providers, confidentiality obligations and incident-response procedures. No transmission or storage method is completely secure, so we cannot guarantee absolute security.

If a qualifying breach occurs, we will notify affected people and relevant regulators as required, including under Australia’s Notifiable Data Breaches scheme.

8. International data transfers

YESI operates globally. Information may be processed outside your country, including in Australia and countries used by our service providers. Where required, we use recognised safeguards such as adequacy decisions, Standard Contractual Clauses or the UK International Data Transfer Agreement, and take reasonable steps under Australian Privacy Principle 8.

9. Children’s privacy

Our general services are intended for people aged 13 or older, or the applicable digital-consent age in their region. We do not knowingly collect personal information from children under 13 without appropriate consent. Parents or guardians who believe a child has provided information should contact us so we can investigate and delete it where required.

10. Your rights and choices

Depending on your location, you may request access, correction, deletion, restriction or portability of your personal information; object to certain processing; withdraw consent; or opt out of direct marketing. You may also delete an account through available in-app controls or by contacting us.

Email y021@pm.me with the subject “Privacy Request”. We may need to verify your identity. We aim to respond within 30 days or the period required by applicable law.

11. Regional privacy disclosures

Australia

YESI Pty Ltd handles personal information consistently with the Australian Privacy Principles. Privacy complaints should first be sent to us. If unresolved, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

European Union, EEA and United Kingdom

YESI Pty Ltd acts as controller unless stated otherwise. You may exercise the rights described above and complain to your national authority. UK users may contact the Information Commissioner’s Office at ico.org.uk.

California

California residents may request to know, access, correct or delete covered information; opt out of covered sale or sharing; limit certain uses of sensitive information; and exercise their rights without discrimination. YESI does not sell personal information for monetary consideration.

12. Changes and contact

We may update this policy as our products, practices or legal obligations change. We will update the effective date and provide additional notice where required.