Privacy Policy
Last updated: April 12, 2026
1. Introduction
This Privacy Policy describes how Global Action Network for Sickle Cell & Other Inherited Blood Disorders (“Platform”, “we”, “us”, or “our”) collects, uses, and protects your personal information when you use our services. We are committed to safeguarding your privacy and ensuring the security of your data.
2. Information We Collect
Account Information
When you create an account, we collect:
- Your full name
- Email address
- Password (stored in encrypted form — we never store or have access to your plaintext password)
- Organization affiliation (if provided)
Learning Activity Data
As you use the Platform, we automatically collect:
- Course enrollment records
- Lesson completion progress
- Quiz responses and scores
- Certificates earned
- Course reviews and ratings you submit
Technical Data
We collect minimal technical data necessary to operate the Platform, including browser type, device information, and session cookies required for authentication. We do not use third-party tracking cookies or advertising pixels.
3. How We Use Your Information
We use your information exclusively to:
- Provide and maintain your account and access to course materials
- Track your learning progress and issue certificates of completion
- Communicate important updates about the Platform or your enrolled courses
- Respond to support requests you submit through our contact form
- Improve the quality and relevance of our educational content
We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use your data for advertising.
4. Data Storage & Security
We take the security of your data seriously and implement industry-standard measures to protect it:
- Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS (HTTPS)
- Encryption at rest: Your account credentials are hashed and encrypted using modern cryptographic algorithms. We never store plaintext passwords.
- Row-Level Security: Our database enforces granular access controls ensuring that users can only access their own data, progress records, and certificates
- Secure authentication: We use Supabase Authentication with secure session management, token-based access, and automatic session expiration
- Minimal data collection: We only collect information that is necessary for the operation of the Platform
5. Data Retention
We retain your account data and learning progress for as long as your account is active. If you wish to delete your account and all associated data, you may contact us at the email address provided below. Upon account deletion, your personal information will be permanently removed from our systems within 30 days.
Anonymized, aggregate data (such as total course completion rates) may be retained indefinitely for the purpose of improving our educational programs.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct any inaccurate information in your profile
- Delete your account and all associated personal data
- Export your learning progress and certificate records
- Withdraw consent for optional communications at any time
To exercise any of these rights, please contact us using the information in the Contact section below.
7. Cookies
We use only essential cookies required for authentication and session management. These cookies are strictly necessary for the Platform to function and cannot be disabled. We do not use analytics cookies, advertising cookies, or any third-party tracking technologies.
8. Children's Privacy
Our Platform is not directed at children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of the Platform after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: