Privacy Policy.

LAST UPDATED · AUGUST 26, 2026

This Privacy Policy describes how Green Leaf Consulting, the company that owns and operates the Superhuman AI newsletter and the Superhuman Academy (the “Company,” “we,” “us,” or “our”), collects, uses, and shares personal information in connection with the Superhuman Academy websites, lessons, exams, certificates, emails, and related services (the “Service”), and the choices available to you. By using the Service you acknowledge the practices described here. This policy supplements — and does not replace — the practices that govern your subscription to the Superhuman AI newsletter.

1 · Information we collect

Information you provide

• Identity and contact details — your email address and first name, provided directly by you or passed to the Service when you subscribe to the newsletter and open the Academy.
• Onboarding answers — professional context you choose to share, such as area of work, experience with AI, seniority, industry, company size, optional company name, and preferred learning time.
• Feedback and communications — messages, ratings, bug reports, exam answers, and any other content you submit through the Service.

Information collected automatically

• Usage data — pages and lessons viewed, actions taken, progress, XP, badges, certificates, session information, and interaction events.
• Device and technical data — browser type and version, device type, operating system, screen dimensions, language, approximate location derived from IP address, and identifiers set by our analytics tooling.
• Email engagement — whether emails we send are delivered, opened, or clicked, collected through standard email technologies.

Microphone

Some lessons offer voice dictation using your browser’s built-in speech recognition. Audio is processed by your browser and, where applicable, your browser vendor’s speech service; we do not record, store, or receive your audio. Microphone access is requested only when you choose a live try, and every dictation exercise offers a watch-instead alternative.

2 · How we use information

• To provide and operate the Service — building your learning path, saving progress, issuing certificates, and enabling sign-in across devices.
• To send communications you have signed up for, including the daily newsletter and a short series of Academy emails. You can pause Academy emails without affecting the daily newsletter using the link included in those emails.
• To analyze, maintain, improve, and develop the Service and its content, including measuring which lessons work.
• To respond to your messages and provide support.
• To protect the Service, our users, and our rights — including detecting and preventing fraud, abuse, and security incidents.
• To comply with legal obligations and enforce our Terms of Service.
• To create aggregated or de-identified data, which we own and may use and share for any lawful purpose (for example, “40% of Academy members work in marketing”). Such data does not identify you.

3 · Legal bases (EEA and UK)

Where the GDPR or UK GDPR applies, we process personal information: (a) to perform our contract with you (providing the Service you request); (b) for our legitimate interests, such as improving the Service, securing it, and growing our audience, balanced against your rights; (c) with your consent, where required (which you may withdraw at any time); and (d) to comply with legal obligations.

4 · How we share information

• Service providers — vendors that process information on our behalf to run the Service, including email and subscription management (beehiiv), product analytics (PostHog), hosting, data storage, and internal communications and support tooling used to route your feedback to our team. Providers are permitted to use the information only to perform services for us.
• Legal and safety — where we believe disclosure is reasonably necessary to comply with law or legal process, respond to lawful requests, or protect the rights, property, safety, or security of the Company, our users, or others.
• Business transfers — in connection with any merger, acquisition, financing, reorganization, or sale of some or all of our business or assets, information may be transferred as part of that transaction, subject to reasonable confidentiality protections.
• Aggregated or de-identified data — as described in Section 2.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

5 · Cookies and local storage

The Service uses browser local storage to make the product work — saving progress, preferences, streaks, and sign-in state on your device. Our analytics tooling may use cookies or similar identifiers to recognize return visits and measure usage. We do not use third-party advertising cookies on the Academy. You can clear local storage and cookies through your browser settings; doing so may reset progress stored on that device.

6 · Retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy — typically for as long as you maintain a subscription or account relationship with us — and thereafter as needed to comply with legal obligations, resolve disputes, enforce agreements, and maintain business records. Learning records are retained so that your progress and certificates remain available to you. Retention periods vary by data type and context, and we may retain aggregated or de-identified data indefinitely.

7 · Security

We use commercially reasonable technical and organizational measures designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot and do not guarantee the security of any information. You are responsible for keeping sign-in links sent to you confidential.

8 · International transfers

The Company is based in the United Arab Emirates, and the Service is operated using service providers and infrastructure located in the United States and other jurisdictions. Wherever you access the Service from, you understand that your information will be transferred to, stored, and processed in the United Arab Emirates, the United States, and other jurisdictions that may not provide the same level of data protection as your home jurisdiction. Where required, we rely on appropriate safeguards for such transfers.

9 · Your rights and choices

• Email choices. Every marketing email includes an unsubscribe link; Academy-series emails include a link to pause that series separately from the daily newsletter.
• Access, correction, deletion, portability. Depending on your jurisdiction, you may have the right to request access to, correction of, deletion of, or a copy of your personal information, and to object to or restrict certain processing. You can make a request through the feedback button in the Service. We may need to verify your identity and may retain information where the law permits or requires. We will not discriminate against you for exercising any of these rights.
• EEA/UK. You also have the right to lodge a complaint with your local supervisory authority.
• California. California residents may exercise the rights described above under the CCPA/CPRA. We collect the categories of information described in Section 1 for the purposes in Section 2, share them as described in Section 4, and do not sell or share personal information as those terms are defined in California law. We do not knowingly collect the information of consumers under 16.

10 · Children

The Service is intended for working professionals and is not directed to children under 16. We do not knowingly collect personal information from children under 16; if we learn we have done so, we will delete it.

11 · Third-party services

The Service teaches and links to third-party tools and websites. This policy does not apply to those third parties, and we are not responsible for their privacy practices. Review the privacy policies of any third-party service you use.

12 · Changes to this policy

We may update this policy from time to time. The date above reflects the latest version, and material changes may also be announced through the Service or by email. Your continued use of the Service after changes take effect constitutes acknowledgment of the updated policy.

13 · Contact

Questions or requests under this policy can be sent through the feedback button available on every page of the Academy.