Privacy Policy

We collect the minimum information needed to run your account, deliver courses, process payments, and keep the community functioning. We don't sell your personal information, and we don't share it with third parties for their own marketing purposes.

Account information — your name, email address, and password (stored securely by our authentication provider, never in plain text). If you sign in with Google, we receive your name, email, and profile photo from Google.

Profile information — anything you choose to add, like a bio, avatar photo, title, or social links.

Course & learning activity — enrollments, lesson progress, quiz results, notes you take, XP and streak data, and community posts/comments you create.

Payment information — handled directly by Stripe, our payment processor. We receive confirmation that a payment succeeded and basic billing status, but we never see or store your full card number.

Phone number — only if you choose to give us one. It is never required to use the Service, and how we use it is described in section 5 below.

Technical information — standard web request data (IP address, browser type, device information) collected automatically to keep the Service secure and working correctly.

• To create and maintain your account, and let you sign in securely (including two-factor authentication)
• To give you access to the courses and community features you're enrolled in or a member of
• To process membership payments and send billing-related emails (receipts, renewal notices, payment failures)
• To send account-related emails — confirmations, password resets, and security notices (like a new 2FA device being added)
• To personalize your experience — tracking your progress, showing relevant courses, and running the leaderboard/achievements features
• To keep the Service secure, prevent abuse, and enforce our Terms and Community Guidelines

We work with a small number of trusted service providers to run the Service. Each only receives the data needed to do its job:

• Cloud database & authentication provider — securely stores your account and course data, and handles sign-in.
• Stripe — processes membership payments. Stripe has its own privacy policy governing the payment data it handles directly.
• Google — if you choose "Continue with Google" to sign in, Google shares your basic profile information with us as authorized by you during that sign-in.
• Email delivery provider — sends the account emails described above (sign-in confirmations, password resets, security notices, billing receipts). It receives the address the message is sent to.
• Content delivery & hosting providers — serve the site's images, course thumbnails, and files. Like any web request, these receive your IP address and the page you're viewing.
• YouTube and Vimeo — some courses use a trailer hosted on one of these platforms. The video player only loads when you press play; until then, nothing is requested from the player. Course pages with a YouTube trailer do load its still image from YouTube's image servers, which receives your IP address. Once you press play, that platform's own privacy policy governs the playback session.

We don't sell your personal information to anyone, for any purpose.

If you provide a phone number and opt in to receive text messages from us (for example, account or support-related notifications), the following applies:

• We only send you SMS messages if you've explicitly opted in. Opting in is never required to use the Service.
• Message frequency varies depending on your account activity and any support conversations. Message and data rates may apply.
• You can opt out at any time by replying STOP to any message. Reply HELP for assistance, or contact us at help@dookademy.com.
• We do not share your phone number with third parties for their marketing purposes. Carriers are not liable for delayed or undelivered messages.

We use cookies and your browser's local storage to run the Service. We do not use advertising cookies, and we don't use third-party analytics or tracking cookies — nothing stored here follows you to other websites, and none of it is sold or shared.

There are three kinds, and they are worth telling apart:

The notice, and how to say no. The first time you visit we show a short cookie notice. Accepting it turns on the performance storage described above. If you'd rather not have it, simply don't accept — closing or ignoring the notice leaves that storage switched off, and the Service works normally without it. You can also clear everything at any time from your browser's settings (usually under "Cookies and site data" or "Clear browsing data"), or block storage for this site entirely. Doing so signs you out and resets your preferences, but nothing else is lost — your account, courses and progress live on our servers, not in your browser.

Embedded video. Course trailers, community posts and member stories don't load a video player until you ask for one: you see a still image and a play button, and the YouTube or Vimeo player — along with any cookies it sets — only loads once you press play. If you never press play, those services never hear from your browser.

Payments. When you go through checkout, Stripe sets its own cookies to process the payment and prevent fraud. That happens on Stripe's own pages and is covered by their privacy policy, linked in the third parties section above.

We use industry-standard security practices to protect your data, including encrypted connections (HTTPS), database-level access controls, and optional (required for staff accounts) two-factor authentication. No system is 100% secure, but we take reasonable steps to protect your information and respond quickly if something goes wrong.

We keep your account information for as long as your account is active. If you delete your account, we remove or anonymize your personal information within a reasonable period, except where we're required to retain certain records (like payment history) for legal or accounting purposes.

You can, at any time:

• Access and update your profile information directly in your account settings
• Request a copy of the personal data we hold about you
• Delete your account yourself, at any time, from Profile → Security in your account settings. This removes your profile, enrollments, progress, notes, and community posts, and cancels any active membership so you aren't billed again — no request to us is needed. (Admin accounts are the one exception: for safety, another administrator has to remove them.)
• Opt out of non-essential email notifications from your notification settings

To make a data request, email help@dookademy.com. Depending on where you live, you may have additional rights under laws like the GDPR or CCPA — we'll honor applicable requests regardless of location.

The Service is not directed to children under 13, and we don't knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us and we'll delete it.

Our servers and service providers may be located in the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S., where data protection laws may differ from those in your country.

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above, and for meaningful changes, we'll make a reasonable effort to notify active members by email or an in-app notice.

Questions about this Privacy Policy or your data? Reach us at help@dookademy.com, by phone at +1 352 721 4266, or by mail at Dooke LLC, 9 Emerald Way, Ocala, Florida, 34972.