Legal

Privacy Policy.

LAST UPDATED · OCTOBER 5, 2026

This Privacy Policy describes how Green Leaf Consulting FZCO, the company that owns and operates the Superhuman AI newsletter and the Superhuman Academy (the “Company,” “we,” “us,” or “our”), collects, uses, and shares personal information in connection with the Superhuman Academy websites, lessons, exams, certificates, paid memberships, emails, and related services (the “Service”), and the choices available to you. By using the Service you acknowledge the practices described here. This policy supplements — and does not replace — the practices that govern your subscription to the Superhuman AI newsletter.

1 · Information we collect

Information you provide

Identity and contact details — your email address and first name, provided directly by you or passed to the Service when you subscribe to the newsletter and open the Academy.
Onboarding answers — professional context you choose to share, such as area of work, experience with AI, seniority, industry, company size, optional company name, preferred learning time, what motivated you to learn AI, what you would like to achieve, what is holding you back, and which AI tools you already pay for.
Payment and membership information — if you purchase a membership, your payment details (such as card number, expiry date, security code, and billing country or postal code) or digital-wallet credentials are entered directly into forms provided by our payment processor, Stripe, and are collected and stored by Stripe, not by us. We do not receive or store your full card number or security code. We receive and keep limited information from Stripe about your purchase, such as a customer identifier, the plan and price you chose, the status of your membership, payment and renewal dates, cancellation status, whether a payment succeeded, failed, was refunded, or was disputed, and the type of payment method used (for example, card, Apple Pay, or Google Pay).
Feedback and communications — messages, ratings, bug reports, exam answers, and any other content you submit through the Service.

Information collected automatically

Usage data — pages and lessons viewed, actions taken, progress, XP, badges, certificates, session information, and interaction events.
Device and technical data — browser type and version, device type, operating system, screen dimensions, language, approximate location derived from IP address, and identifiers set by our analytics tooling.
Email engagement — whether emails we send are delivered, opened, or clicked, collected through standard email technologies.
Checkout and fraud-prevention data — interactions with our pricing and checkout pages (such as whether you viewed an offer, started a payment, or completed or abandoned a purchase), and device, browser, network, and behavioral signals that our payment processor collects on checkout and billing pages to verify payments and detect fraud, including through cookies and challenge tests set by the processor.
Attribution data — the link, campaign, or referral source (such as UTM parameters) through which you first arrived, which we use to measure our marketing and to determine which offers and experiences apply to you.

Microphone

Some lessons offer voice dictation using your browser’s built-in speech recognition. Audio is processed by your browser and, where applicable, your browser vendor’s speech service; we do not record, store, or receive your audio. Microphone access is requested only when you choose a live try, and every dictation exercise offers a watch-instead alternative.

2 · How we use information

To provide and operate the Service — building your learning path, saving progress, issuing certificates, and enabling sign-in across devices.
To sell and manage memberships — processing payments, renewing and cancelling memberships, granting and removing access to membership content, sending receipts and transactional messages about your membership, handling refund requests and disputes, and keeping financial, tax, and accounting records.
To decide which offers, prices, onboarding experiences, and levels of free access are shown to you, including by testing different versions with different groups of users and measuring the results. These decisions concern which version of the Service you are offered and do not produce legal effects or similarly significant effects concerning you.
To send communications you have signed up for, including the daily newsletter and a short series of Academy emails. You can pause Academy emails without affecting the daily newsletter using the link included in those emails.
To analyze, maintain, improve, and develop the Service and its content, including measuring which lessons work.
To respond to your messages and provide support.
To protect the Service, our users, and our rights — including detecting and preventing fraud, payment fraud, account sharing, abuse, and security incidents, and contesting chargebacks.
To comply with legal obligations and enforce our Terms of Service.
To create aggregated or de-identified data, which we own and may use and share for any lawful purpose (for example, “40% of Academy members work in marketing”). Such data does not identify you.

3 · Legal bases (EEA and UK)

Where the GDPR or UK GDPR applies, we process personal information: (a) to perform our contract with you (providing the Service you request, including processing payments and managing your membership); (b) for our legitimate interests, such as improving the Service, testing offers and experiences, preventing fraud, securing the Service, defending chargebacks and legal claims, and growing our audience, balanced against your rights; (c) with your consent, where required (which you may withdraw at any time); and (d) to comply with legal obligations, including tax and accounting record-keeping.

4 · How we share information

Service providers — vendors that process information on our behalf to run the Service, including email and subscription management (beehiiv), transactional email delivery (Resend), product analytics (PostHog), hosting, data storage, and internal communications and support tooling used to route your feedback to our team. Providers are permitted to use the information only to perform services for us. Your onboarding answers and membership status may be stored with our email provider so that the emails you receive match your learning path.
Payment processing — Stripe processes payments, stores payment details, and performs fraud screening for membership purchases. Stripe uses the information it collects both on our behalf and, for some purposes such as fraud prevention, compliance, and operating its own services (for example, its Link saved-checkout feature, if you choose to use it), as an independent controller under its own privacy policy, available at stripe.com/privacy. If you pay with a digital wallet, the wallet provider (such as Apple or Google) also processes the transaction under its own terms and privacy policy.
Legal and safety — where we believe disclosure is reasonably necessary to comply with law or legal process, respond to lawful requests, or protect the rights, property, safety, or security of the Company, our users, or others.
Business transfers — in connection with any merger, acquisition, financing, reorganization, or sale of some or all of our business or assets, information may be transferred as part of that transaction, subject to reasonable confidentiality protections.
Aggregated or de-identified data — as described in Section 2.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5 · Cookies and local storage

The Service uses browser local storage to make the product work — saving progress, preferences, streaks, attribution, and sign-in state on your device. Our analytics tooling may use cookies or similar identifiers to recognize return visits and measure usage. On pricing, checkout, and billing pages, our payment processor sets cookies and similar technologies that are necessary to process payments securely and prevent fraud. We do not use third-party advertising cookies on the Academy. You can clear local storage and cookies through your browser settings; doing so may reset progress stored on that device.

6 · Retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy — typically for as long as you maintain a subscription or account relationship with us — and thereafter as needed to comply with legal obligations, resolve disputes, enforce agreements, and maintain business records. Learning records are retained so that your progress and certificates remain available to you, including after a membership ends. Payment and transaction records are retained for as long as required by applicable tax, accounting, and financial-record laws (generally at least five years after the relevant transaction) and as needed to handle refunds, chargebacks, and disputes, even if you close your account. Retention periods vary by data type and context, and we may retain aggregated or de-identified data indefinitely.

7 · Security

We use commercially reasonable technical and organizational measures designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot and do not guarantee the security of any information. You are responsible for keeping sign-in links sent to you confidential.

8 · International transfers

The Company is based in the United Arab Emirates, and the Service is operated using service providers and infrastructure located in the United States and other jurisdictions. Wherever you access the Service from, you understand that your information will be transferred to, stored, and processed in the United Arab Emirates, the United States, and other jurisdictions that may not provide the same level of data protection as your home jurisdiction. Where required, we rely on appropriate safeguards for such transfers.

9 · Your rights and choices

Email choices. Every marketing email includes an unsubscribe link; Academy-series emails include a link to pause that series separately from the daily newsletter.
Access, correction, deletion, portability. Depending on your jurisdiction, you may have the right to request access to, correction of, deletion of, or a copy of your personal information, and to object to or restrict certain processing. You can make a request through the feedback button in the Service. We may need to verify your identity and may retain information where the law permits or requires, including payment and transaction records we must keep for legal, tax, or accounting reasons. Deleting your account does not by itself cancel a paid membership; cancel it first in your account settings. We will not discriminate against you for exercising any of these rights.
EEA/UK. You also have the right to lodge a complaint with your local supervisory authority.
California. California residents may exercise the rights described above under the CCPA/CPRA. We collect the categories of information described in Section 1 for the purposes in Section 2, share them as described in Section 4, and do not sell or share personal information as those terms are defined in California law. We do not knowingly collect the information of consumers under 16.

10 · Children

The Service is intended for working professionals and is not directed to children under 16. We do not knowingly collect personal information from children under 16; if we learn we have done so, we will delete it.

11 · Third-party services

The Service teaches and links to third-party tools and websites. This policy does not apply to those third parties, and we are not responsible for their privacy practices. Review the privacy policies of any third-party service you use.

12 · Changes to this policy

We may update this policy from time to time. The date above reflects the latest version, and material changes may also be announced through the Service or by email. Your continued use of the Service after changes take effect constitutes acknowledgment of the updated policy.

13 · Contact

Questions or requests under this policy can be sent through the feedback button available on every page of the Academy, or to academy@superhuman.ai.