SKOLY Academy

Privacy Policy

Last Updated: September 2026

At SKOLY, we take the privacy of learners seriously. This Policy explains what data we collect, how we use it, how we protect it, and your rights. It is designed to comply with the GDPR and to support both individual learners and universities operating under institutional agreements (MOUs).

1. Who We Are

SKOLY is the data controller for personal data processed through the Academy platform (unless we act as a processor under an institutional agreement with a university).

2. Information We Collect

  • Account details (name, email, learner status where provided)
  • Content and materials you upload or generate (notes, simulations, documents, queries)
  • Technical data needed to operate and secure the Service

3. How We Use Your Information

We use data solely to:

  • Provide and improve the SKOLY Academy platform and its AI assistants
  • Deliver personalized learning and clinical simulation support
  • Maintain security and prevent misuse
  • Communicate with you about your account and the Service
  • Comply with legal obligations

4. Special Note on Health-Related Information

If you choose to upload any health-related or clinical study materials, we treat that information with heightened care: encryption, access controls, and strict purpose limitation. Identifiable sensitive data is never used to train models in a way that could re-identify individuals.

We do not sell your personal data.

5. Your Rights (GDPR)

You have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. You may also withdraw consent where applicable and lodge a complaint with a supervisory authority.

To exercise your rights: privacy@theskoly.com

6. Data Retention

We keep personal data only as long as needed to provide the Service and meet legal requirements. You may request deletion of your account and associated data at any time (subject to legal retention obligations).

7. Security

We use encryption, strict data isolation, and access controls aligned with GDPR, SOC 2, and ISO 27001 principles.

8. Institutional Use (Universities / MOUs)

When access is provided through a university or institutional agreement, additional terms in the MOU or Data Processing Agreement may apply. The institution remains responsible for its authorized users.

9. Changes

We may update this Policy. The latest version will always be available here.

10. Contact

privacy@theskoly.com